This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa
File:                     e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa (raw, json)
Hash identifier:          UqmdCkaE2x97G5652mrDCrAzo9s1KYD0UTPSVaeBV80=
Subject key identifier:   05:D0:C3:AA:16:63:BB:98:A6:CA:A3:30:BB:2E:2E:A8:97:59:B1:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       793341DE7D86C7CC731DFE740C90E94EEDDADB43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa
Signing time:             Sun 07 Dec 2025 01:11:20 +0000
ROA not before:           Sun 07 Dec 2025 01:11:20 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.236.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:33:41:de:7d:86:c7:cc:73:1d:fe:74:0c:90:e9:4e:ed:da:db:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:11:20 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=b4e680b1aacb1fdb8d8727a035e3358b326adfeb8c6f3d1787004210f9a8dcac, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:97:95:84:15:e8:bb:74:67:c5:f9:ff:ec:d8:
                    6a:9e:a9:d8:9e:6a:b9:f6:e5:6c:ca:30:5d:ec:b1:
                    bb:66:16:ba:58:73:30:f4:9a:01:e2:3b:d3:11:07:
                    2f:85:a0:31:0e:9d:09:96:ed:3b:de:01:d3:bd:a7:
                    a5:9c:34:73:d3:33:45:94:b7:26:ca:3d:aa:2a:8a:
                    c9:a3:f8:6f:5a:d9:f2:32:ed:c2:8f:58:55:89:79:
                    30:77:e1:46:76:3b:0b:61:ca:b6:d2:7e:d6:13:f0:
                    09:6e:09:03:b7:43:eb:d7:d3:d6:3d:45:55:8e:ad:
                    ec:65:00:7c:89:31:d1:1e:b3:30:dc:c7:3e:f3:86:
                    36:53:2d:95:c9:79:b8:20:36:14:75:b8:8b:39:88:
                    4a:d1:f5:4a:f6:b9:b2:2f:ba:6c:8b:c0:7f:61:1d:
                    c7:9e:b3:3b:45:ac:5a:78:34:45:4a:f2:83:7e:8e:
                    fd:93:f6:30:3f:c8:78:ff:4e:62:e7:6e:c5:ec:07:
                    c3:b1:28:21:eb:5c:90:54:c3:f2:63:a6:be:bd:8f:
                    43:35:cf:1c:d8:2f:13:04:20:86:01:1d:26:9b:ff:
                    9c:00:c2:a5:13:ca:a7:ca:7f:9e:c9:67:33:7a:7c:
                    70:de:4f:88:85:b3:df:4d:41:43:77:4e:38:d8:81:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D0:C3:AA:16:63:BB:98:A6:CA:A3:30:BB:2E:2E:A8:97:59:B1:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:62:5e:95:97:47:a8:2a:9c:b9:3b:4e:70:85:8f:04:df:99:
         ad:1f:8f:34:03:85:f4:1d:92:3c:a6:41:5e:14:9f:9e:69:fa:
         6d:f4:35:9e:9c:0d:74:21:49:5a:89:43:77:c8:d8:8c:47:52:
         ee:62:64:d5:12:21:da:44:84:f7:86:fa:c0:c9:e9:7c:3a:5d:
         33:38:85:ae:42:5c:3f:8e:20:a9:9a:93:d4:a3:fe:9e:05:58:
         c3:8f:76:e2:b3:86:38:3f:a8:f3:9a:d2:07:21:cd:25:48:1d:
         4f:b8:d4:6b:d2:08:82:0f:dc:97:75:3d:c3:e4:0b:18:a5:d2:
         13:a3:2b:ad:3e:9c:30:85:fb:80:5b:a8:58:ce:97:d4:ed:0f:
         a6:30:e2:c0:1f:df:4a:07:86:bc:72:ed:cc:92:c6:d3:98:a5:
         c3:ea:f8:51:17:8e:87:82:50:6c:15:84:0b:1e:75:fc:4e:db:
         35:fb:7e:56:2c:fd:70:3d:2c:ce:28:1b:81:d0:77:e4:ba:b9:
         5b:d3:c1:3e:7f:29:74:0a:2c:52:6a:a8:aa:9f:43:76:93:c8:
         e8:af:cb:ed:b3:d5:23:69:fc:7b:26:0a:4a:6f:af:e5:ef:39:
         86:fa:76:cc:0e:89:35:36:ef:5e:e4:21:8e:46:49:e0:bd:29:
         97:c1:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:29:06 2025 by rpki-client