This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efdd0c0d-537b-4262-90b2-7372f28bd5ef.roa
File:                     efdd0c0d-537b-4262-90b2-7372f28bd5ef.roa (raw, json)
Hash identifier:          a9OjvHFodJRhR3upvGrlAU/2pyKkvDih55cBcOFe3+M=
Subject key identifier:   74:86:37:60:5E:82:3A:B1:2E:90:62:6F:AF:47:48:F4:E4:3F:DA:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64CB1BECF790AAD251263B0124074AEB8AE014E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efdd0c0d-537b-4262-90b2-7372f28bd5ef.roa
Signing time:             Sun 07 Dec 2025 02:30:33 +0000
ROA not before:           Sun 07 Dec 2025 02:30:33 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cb:1b:ec:f7:90:aa:d2:51:26:3b:01:24:07:4a:eb:8a:e0:14:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 02:30:33 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=39eb29dc30ee95dda575a020f4a3390d130aa758f701c6204a4c81157c960dde, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:73:16:c8:de:f9:7a:16:f3:03:20:92:0b:
                    40:b0:19:4a:8a:17:c9:dd:19:bf:16:b6:68:b1:53:
                    c1:38:8d:9f:be:95:fe:db:cc:8f:a4:46:85:71:88:
                    7f:56:ec:35:4e:d6:ba:38:7f:2a:18:18:fc:09:59:
                    a4:5a:19:8e:3e:b3:3e:2f:0b:f6:52:7d:39:51:dc:
                    66:cf:55:98:97:53:d0:ea:15:82:51:3b:bd:3f:3d:
                    6f:a5:79:95:d6:e1:2b:6b:94:e0:6b:c3:83:a5:e2:
                    24:d1:69:64:11:72:89:60:da:52:1c:09:7f:4a:a4:
                    db:6b:f2:89:30:91:ec:4a:92:59:9c:9e:8f:1a:ad:
                    56:4a:5a:c2:0e:86:04:e0:44:65:12:91:ce:3d:44:
                    63:a7:0e:6a:e6:36:ea:b5:8e:71:1a:7a:ba:6e:94:
                    58:aa:62:2c:a5:47:18:a2:6c:35:6c:f7:5f:92:f3:
                    dc:5b:aa:60:3f:9e:be:e6:3d:e0:99:57:09:fd:80:
                    65:36:e4:63:ed:4b:12:16:82:f3:03:5d:69:40:ba:
                    79:b4:aa:84:25:32:9e:2b:5e:35:82:5c:7e:23:ba:
                    9c:9f:18:0e:37:1c:5b:db:f5:3d:b0:92:46:89:84:
                    dc:4e:97:37:95:52:56:76:21:a0:50:fd:0a:af:c1:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:86:37:60:5E:82:3A:B1:2E:90:62:6F:AF:47:48:F4:E4:3F:DA:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efdd0c0d-537b-4262-90b2-7372f28bd5ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:21:97:47:8d:40:ba:a6:28:fa:de:13:32:7b:a9:88:d0:58:
         04:73:4a:58:a5:bb:72:3d:4a:c2:61:7f:e0:7d:7e:ec:e4:83:
         09:ae:7a:e5:05:e8:8e:53:cc:f9:3c:58:b1:46:13:f8:dc:da:
         e2:ca:7a:d6:5a:e0:41:2f:8f:01:4f:ea:11:3a:35:d1:08:a9:
         4c:e0:7d:4e:b1:4b:81:22:e7:a5:71:47:69:e3:86:a3:49:96:
         4e:f7:fe:d6:dd:17:c0:1e:f1:86:29:0e:91:cf:61:5a:ce:b5:
         fa:ee:66:1c:70:28:48:46:f6:26:ae:17:39:d8:b5:ce:3d:e7:
         1b:33:38:34:bf:a4:e4:76:dc:8b:8c:db:a8:67:f2:9d:e3:40:
         9c:b9:e4:7e:d1:bf:e9:58:e7:a7:1c:99:1f:43:44:4c:0d:3a:
         a8:2e:94:d0:ab:77:a5:89:3e:db:2b:33:9e:cf:03:b2:85:cf:
         9b:4c:7f:94:3b:bd:ea:b3:a4:81:07:1b:f2:d2:77:c5:be:07:
         22:8a:2f:3c:72:35:ef:85:a0:d3:07:6d:05:95:dc:23:af:27:
         f3:ab:d1:9c:78:25:d6:81:de:54:19:1c:0c:5a:84:07:41:38:
         22:91:87:63:3d:9a:24:57:6c:bd:28:67:b1:92:e0:e1:af:74:
         68:e4:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 03:27:34 2025 by rpki-client