This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f979b6a2-7283-4b23-a95c-123113c3ca0b.roa
File:                     f979b6a2-7283-4b23-a95c-123113c3ca0b.roa (raw, json)
Hash identifier:          YQ6IIxRXmbGisiKsLDgwNjYT0dhMA2csu1iSx86HebA=
Subject key identifier:   63:D8:51:C8:16:27:EF:E6:0E:B3:BA:04:B6:8C:7A:21:49:BC:CD:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E7BDA9CA431E2C37F8B8A5D3641E0910ACE52EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f979b6a2-7283-4b23-a95c-123113c3ca0b.roa
Signing time:             Mon 08 Dec 2025 00:21:20 +0000
ROA not before:           Mon 08 Dec 2025 00:21:20 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.34.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7b:da:9c:a4:31:e2:c3:7f:8b:8a:5d:36:41:e0:91:0a:ce:52:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:21:20 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=8e5def644b84fd8d1a1ca4a240d91b42be098adcdbd9276a711a827369751ad8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:46:c6:f1:1b:ac:44:9a:a8:09:35:7e:c0:
                    26:ff:4c:e2:91:2d:e4:c3:25:08:b7:0d:b3:ee:ee:
                    3d:a5:1d:18:df:b4:1d:91:56:df:cd:d4:1c:b2:42:
                    72:4f:26:6e:6a:67:67:7f:4d:87:ec:68:be:36:2f:
                    1b:f3:9e:7f:5e:44:40:4f:1b:46:95:b5:6f:57:66:
                    67:f6:c1:40:9b:26:8e:35:db:f2:50:d8:da:a0:db:
                    92:1c:92:6f:b9:aa:3d:44:80:11:5c:cb:58:ba:f2:
                    81:fe:9e:c5:b3:7f:36:5b:64:ed:43:ab:24:c0:0f:
                    d9:e7:37:c6:ea:33:9c:6a:de:59:8b:a4:59:20:34:
                    ec:37:bb:05:16:b1:44:18:a8:78:73:4c:57:04:04:
                    47:7f:7a:cb:9d:df:6a:f9:dd:e0:65:e0:18:13:03:
                    a5:59:9e:b8:86:12:43:5f:af:fb:71:f7:5a:d1:21:
                    ad:c3:73:03:3e:a8:d1:14:2b:f8:b0:45:4a:d5:22:
                    d9:e8:a7:4e:a9:6c:9a:82:20:f0:50:27:45:f9:8f:
                    7b:25:8e:74:a6:d9:47:b2:fc:42:43:9a:e4:b1:02:
                    c1:ba:73:55:4f:ae:6d:fd:4c:6a:59:bb:f1:a7:a3:
                    f2:50:2d:90:a4:d6:8f:27:ab:c6:25:fa:4f:ff:d9:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D8:51:C8:16:27:EF:E6:0E:B3:BA:04:B6:8C:7A:21:49:BC:CD:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f979b6a2-7283-4b23-a95c-123113c3ca0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.34.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:2f:85:7f:a1:b9:c8:33:8d:2d:4a:18:39:3b:bf:54:89:25:
         e7:66:d2:b2:2f:09:a4:a1:29:b9:30:f0:06:ae:9e:4a:e8:88:
         4e:c7:3d:38:71:43:c9:52:1b:9f:29:69:45:86:96:e1:73:26:
         b5:77:01:23:83:a3:ef:30:06:38:16:09:e7:d2:c6:b4:61:59:
         72:f0:72:f7:09:fe:2a:b2:7a:d7:b8:67:87:d5:b6:b4:44:98:
         3d:ff:6c:97:a5:59:7f:d4:15:41:3f:55:8c:02:48:f6:9d:b4:
         5d:be:b0:4a:36:bf:61:0e:ac:e1:bc:12:e7:43:a9:10:1d:9b:
         7a:29:02:24:66:4a:ff:7f:cd:63:3c:b4:ce:42:24:ac:df:9d:
         ed:0a:3e:c5:e5:7f:ff:1a:e2:aa:4e:86:66:c6:2f:1c:13:e0:
         01:aa:84:83:c0:6e:d3:5f:5e:f7:64:24:93:46:a6:c8:8e:3e:
         cc:53:17:6c:58:07:1f:91:51:1a:11:83:32:56:de:19:08:e7:
         ef:17:19:9d:17:22:84:e6:12:90:43:e8:83:aa:c1:4f:96:7f:
         79:5a:de:3c:34:4d:f6:87:d9:c4:18:80:0e:c3:d3:fa:63:89:
         3b:f6:0a:33:18:1c:f9:72:de:bc:9f:cd:9c:4c:e5:7f:6c:38:
         f1:ee:61:77
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfnvanKQx4sN/i4pdNkHgkQrOUuswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA4MDAyMTIwWhcNMjYwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZTVkZWY2NDRiODRmZDhkMWExY2E0YTI0MGQ5MWI0MmJl
MDk4YWRjZGJkOTI3NmE3MTFhODI3MzY5NzUxYWQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKBUbG8RusRJqoCTV+wCb/TOKRLeTDJQi3DbPu7j2lHRjf
tB2RVt/N1ByyQnJPJm5qZ2d/TYfsaL42Lxvznn9eREBPG0aVtW9XZmf2wUCbJo41
2/JQ2Nqg25Ickm+5qj1EgBFcy1i68oH+nsWzfzZbZO1DqyTAD9nnN8bqM5xq3lmL
pFkgNOw3uwUWsUQYqHhzTFcEBEd/esud32r53eBl4BgTA6VZnriGEkNfr/tx91rR
Ia3DcwM+qNEUK/iwRUrVItnop06pbJqCIPBQJ0X5j3sljnSm2Uey/EJDmuSxAsG6
c1VPrm39TGpZu/Gno/JQLZCk1o8nq8Yl+k//2dCLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUY9hRyBYn7+YOs7oEtox6IUm8zR4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y5NzliNmEyLTcyODMtNGIyMy1hOTVjLTEyMzExM2MzY2EwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQjIlAwDQYJKoZIhvcNAQELBQADggEBACEvhX+hucgzjS1KGDk7v1SJJedm
0rIvCaShKbkw8AaunkroiE7HPThxQ8lSG58paUWGluFzJrV3ASODo+8wBjgWCefS
xrRhWXLwcvcJ/iqyete4Z4fVtrREmD3/bJelWX/UFUE/VYwCSPadtF2+sEo2v2EO
rOG8EudDqRAdm3opAiRmSv9/zWM8tM5CJKzfne0KPsXlf/8a4qpOhmbGLxwT4AGq
hIPAbtNfXvdkJJNGpsiOPsxTF2xYBx+RURoRgzJW3hkI5+8XGZ0XIoTmEpBD6IOq
wU+Wf3la3jw0TfaH2cQYgA7D0/pjiTv2CjMYHPly3ryfzZxM5X9sOPHuYXc=
-----END CERTIFICATE-----
Generated at Mon Dec 29 13:27:58 2025 by rpki-client