This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
File:                     f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa (raw, json)
Hash identifier:          Ee2VFXXmWg1duR8edKXvEl5EfGgE1+SNDVk1C1Z0tc4=
Subject key identifier:   4C:74:1B:07:91:8A:8B:6C:25:D1:BD:1D:2E:B7:03:42:39:D4:D8:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E70DEF17324B32FBC378B73B3B088E397984DBF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
Signing time:             Sun 07 Dec 2025 02:30:37 +0000
ROA not before:           Sun 07 Dec 2025 02:30:37 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.39.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:70:de:f1:73:24:b3:2f:bc:37:8b:73:b3:b0:88:e3:97:98:4d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 02:30:37 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=6404557867aad6af365f6d85a9b2cdaf5625d85d173c347bb2abb3c5b9903c8b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:c7:c8:b3:82:7b:a2:27:4e:9b:87:a6:75:
                    66:78:78:3f:ac:e1:b3:2a:42:c2:19:fd:a2:d4:86:
                    ce:60:90:ad:28:80:55:eb:7f:66:fd:5d:42:c9:98:
                    64:9d:df:43:c2:bd:3f:92:72:e6:ce:6a:c9:ba:e2:
                    a2:7a:73:89:e2:14:c8:c5:3e:e6:2d:78:40:3a:53:
                    2d:2a:a0:ad:20:0a:11:1f:f3:86:45:8a:33:ec:b5:
                    9c:54:7f:6d:be:e7:b0:4f:1f:8d:d8:00:52:33:75:
                    1e:31:68:a7:2f:58:79:2c:d9:6e:5a:d2:35:92:66:
                    43:17:4d:ce:c8:f2:57:a4:5d:13:50:05:12:17:09:
                    00:7f:3c:ac:db:20:dd:a5:40:65:44:4a:99:30:34:
                    5c:0d:0c:ce:c3:81:ff:e7:12:ea:78:c2:31:c3:62:
                    8f:38:fa:0d:b1:6d:bb:96:84:c8:51:f9:18:8f:5f:
                    f7:24:13:0a:3a:a4:46:08:ec:6b:cc:b3:d5:e2:72:
                    6b:12:a4:f4:7c:b7:6b:ee:d9:13:12:86:67:17:7c:
                    1c:32:63:cc:5e:c8:07:ee:5c:a1:5b:aa:93:e1:8f:
                    04:26:25:52:42:4d:8c:92:c5:62:03:a1:b6:e4:f0:
                    05:69:d7:33:a5:03:30:2e:94:aa:f3:05:6d:53:24:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:74:1B:07:91:8A:8B:6C:25:D1:BD:1D:2E:B7:03:42:39:D4:D8:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:17:f5:d9:94:28:b3:0c:15:d7:14:95:45:34:af:90:9c:c8:
         2c:9a:4a:36:c7:bb:d4:66:74:64:2b:30:fd:8c:05:a2:b5:25:
         06:80:31:1d:dc:5b:51:ef:d8:b0:55:7b:15:0a:48:37:09:aa:
         af:bf:83:8a:92:c2:ea:ae:75:2d:d9:51:29:5f:e8:b5:34:4c:
         a5:5e:aa:d9:e0:e1:05:6e:57:63:94:b5:5c:50:9e:36:ea:9e:
         e7:4d:b0:f7:e3:26:6f:85:fd:a4:91:1a:13:ef:7d:f3:d8:dd:
         87:07:72:f6:b6:7a:00:5f:fb:09:21:d6:69:c7:2f:c0:56:39:
         fa:b0:0f:f4:b4:31:37:32:68:db:ae:ad:ad:17:08:c8:63:a6:
         90:0d:62:d3:5c:7a:da:d6:5f:7f:f1:54:23:a4:5a:b8:95:2a:
         26:ea:7d:88:c5:dc:d2:b1:9c:13:54:66:b1:46:88:25:66:16:
         68:e5:e9:27:2a:e9:62:1c:ac:a8:c4:a9:b7:6e:d9:cd:ad:a1:
         56:f2:9a:a3:dc:04:b2:ce:92:7e:38:6c:e9:82:ae:6d:fe:b3:
         7d:cb:9d:dd:dc:d9:e2:7f:31:a0:cb:64:5a:ec:11:ad:2f:75:
         db:b6:f2:61:67:e1:43:3c:af:e3:39:e8:0c:81:ac:74:78:b0:
         0e:2b:58:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:55:41 2025 by rpki-client