This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06862e8d-0d1c-49d3-b5ab-59127edee178.roa
File:                     06862e8d-0d1c-49d3-b5ab-59127edee178.roa (raw, json)
Hash identifier:          X/4ubi9CqhjEbCJsicyIs7O1D2SAvU75vzYSG3Ka4uk=
Subject key identifier:   DC:5B:FD:C1:6F:20:B2:6A:48:E3:0F:F5:7F:82:43:54:36:09:9E:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1757280DCD24EADD7D121BFFF928E6072477443A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06862e8d-0d1c-49d3-b5ab-59127edee178.roa
Signing time:             Wed 03 Dec 2025 01:11:19 +0000
ROA not before:           Wed 03 Dec 2025 01:11:19 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff9:2c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:57:28:0d:cd:24:ea:dd:7d:12:1b:ff:f9:28:e6:07:24:77:44:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:11:19 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=a1622531a6c80ea86cbe803100a7ec22a67f07c7bf5afb38f6055999a325f0fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3d:09:c7:51:a6:57:05:f8:d6:70:49:17:aa:
                    3e:78:21:cb:82:23:80:db:45:3e:04:36:73:68:2f:
                    ab:ec:8f:cd:34:be:b9:80:02:90:3d:4b:21:07:f9:
                    0e:38:33:90:33:ec:74:62:50:3b:8c:2d:cf:7c:af:
                    3d:dc:c0:5c:74:f4:e1:2c:c7:38:67:8c:a9:23:dc:
                    f2:9f:13:08:18:77:8d:97:2f:31:4c:ab:1e:0e:c2:
                    05:a9:bd:23:43:e7:da:cc:93:16:23:72:c7:d5:06:
                    ae:de:df:95:1a:64:58:90:1e:84:aa:be:65:26:c3:
                    be:4f:07:7e:74:b7:39:0c:d9:0e:1d:a7:85:98:1c:
                    59:f7:84:8d:1b:61:22:43:e4:6b:84:4e:b1:28:f1:
                    9a:c9:21:ce:52:a0:39:a1:9b:59:d6:f4:e5:86:bd:
                    89:31:5d:57:fe:39:74:cf:7a:6c:2c:ee:26:39:74:
                    95:ce:27:77:46:b3:ae:34:78:53:98:0e:d6:d9:9f:
                    d4:ca:4b:04:5c:42:8d:ee:41:c9:1c:6e:6d:e0:d3:
                    ec:6f:c5:6f:af:c8:05:ca:c3:1b:b3:af:a9:d0:14:
                    96:e7:8d:5d:f7:2e:6f:22:da:14:89:15:aa:e5:19:
                    7f:3f:59:f0:4d:1c:f6:c9:3c:58:79:45:bc:dd:42:
                    4c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5B:FD:C1:6F:20:B2:6A:48:E3:0F:F5:7F:82:43:54:36:09:9E:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06862e8d-0d1c-49d3-b5ab-59127edee178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff9:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:99:41:14:d1:45:58:1f:2c:f5:af:27:10:09:62:c3:39:a8:
         d4:32:3c:96:d4:0a:4e:71:38:ac:f9:0b:73:17:db:b7:1b:39:
         08:db:a5:25:1e:11:ca:b4:42:85:2d:ec:5f:e9:28:6f:17:63:
         c9:07:d4:a9:7b:ed:b0:96:d9:f5:31:b2:0d:8a:d2:d8:f2:a3:
         b8:c8:06:6c:57:f6:60:bd:54:0e:07:06:38:4f:87:17:50:88:
         b2:12:61:6c:39:77:31:55:63:55:d3:3e:45:82:a0:ac:25:ea:
         4f:28:d4:8e:0e:b6:2e:c3:30:05:73:5a:8c:16:85:55:df:ea:
         da:ec:24:2f:78:b4:53:e9:7d:83:fc:ba:82:34:ae:4e:27:87:
         28:1d:29:d3:ed:91:bf:ac:88:eb:c6:84:41:ba:c6:3f:1d:73:
         44:4f:44:2e:50:50:82:31:dd:f0:e7:60:38:d7:07:70:ab:dc:
         00:7f:3b:05:4f:05:75:39:5c:0c:9b:91:09:f2:1d:90:f3:bd:
         65:08:dc:6c:5f:6b:f8:94:21:ec:06:c6:12:4f:95:4d:fc:32:
         63:5c:d0:ac:5b:26:03:8f:49:a7:f4:aa:b1:2f:3e:c6:86:fb:
         35:4b:c3:31:ab:43:f9:bd:49:0a:ec:29:15:02:88:fc:79:c6:
         97:66:67:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:52:37 2025 by rpki-client