This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b6d433e-ba0e-4da5-a7f4-2226623999ff.roa
File:                     0b6d433e-ba0e-4da5-a7f4-2226623999ff.roa (raw, json)
Hash identifier:          NZ6X9GJkHvW2jJMScdYvuctN0hVb+ULraBgLlIjzOqU=
Subject key identifier:   ED:82:75:15:6E:72:62:D8:0F:82:35:A4:F9:5D:D6:11:FC:62:89:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       165726098D74C38995EB66A3CB3BF05FD86239FA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b6d433e-ba0e-4da5-a7f4-2226623999ff.roa
Signing time:             Sat 29 Nov 2025 00:00:42 +0000
ROA not before:           Sat 29 Nov 2025 00:00:42 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f19:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:57:26:09:8d:74:c3:89:95:eb:66:a3:cb:3b:f0:5f:d8:62:39:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 29 00:00:42 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=0958976fe43f8124d74775350fd7ca4b46563f77f5126531cfaeb879e4b49ad4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:90:b5:54:80:c0:1c:29:e6:f6:7d:96:00:
                    27:12:ca:4a:ba:cf:ab:76:45:e3:f7:ca:36:81:fd:
                    fe:9f:24:81:c0:c7:be:2a:32:2e:0d:68:d9:44:86:
                    72:da:ef:16:51:5d:9d:6a:16:76:c6:0a:21:a8:27:
                    8a:ab:d2:cf:da:03:d6:31:98:1c:31:ee:fe:30:b7:
                    32:5f:56:71:e1:20:d4:f9:c6:2b:51:0b:3c:97:7f:
                    27:19:ea:75:c4:0e:1f:4a:60:32:2c:3f:43:a1:da:
                    2f:d1:ec:9d:12:9e:34:b1:c4:68:3f:49:28:f8:81:
                    3c:13:bb:29:d8:7e:a5:d2:f1:cc:12:e4:35:0b:1c:
                    7f:09:f2:77:b3:ce:13:fb:f1:a4:a3:8e:2e:dc:b9:
                    09:8b:01:98:db:37:9b:fc:81:44:35:32:98:1c:2e:
                    de:50:96:82:7c:43:da:35:a8:b4:a8:94:2a:c5:fd:
                    14:55:ca:eb:3a:69:8e:df:32:73:6e:ab:03:62:a2:
                    08:bf:1c:9c:0a:7f:a2:db:6c:93:ce:c0:00:4a:49:
                    32:f5:b3:22:bd:94:b0:4f:34:57:02:97:d0:77:f5:
                    61:1e:b9:d5:0e:87:7d:86:cf:9f:8c:dc:ad:0e:06:
                    b1:d1:a8:74:7f:ac:3b:5d:37:97:56:5e:6e:d5:8c:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:82:75:15:6E:72:62:D8:0F:82:35:A4:F9:5D:D6:11:FC:62:89:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b6d433e-ba0e-4da5-a7f4-2226623999ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:6b:64:4c:77:1c:29:16:68:0e:9f:9b:ed:e0:2e:a4:1d:
         c9:92:ba:e3:73:d5:b2:cb:20:ad:69:fc:f0:ff:a6:94:9d:74:
         ad:2f:97:f5:07:76:ba:ca:f3:3d:61:13:18:6d:6f:34:10:07:
         02:b6:87:9d:d4:7f:74:5b:10:a3:f9:b0:fb:3f:53:75:28:eb:
         8e:c3:1e:af:33:c4:33:fe:6e:ec:3a:e3:79:67:43:e3:24:d5:
         c5:26:4a:08:5a:63:d0:d7:e7:7e:16:57:b9:c7:eb:1c:c0:18:
         68:a2:d3:95:66:ad:f0:2b:a9:7d:b4:3b:2d:51:ee:2e:2f:5e:
         27:d7:30:af:a2:4e:42:05:29:af:34:d8:14:04:33:ad:30:b2:
         e3:47:44:c8:c3:ca:a3:f1:93:ab:b6:76:d3:43:ef:7c:c0:9d:
         25:22:4d:99:9b:26:96:fe:93:3b:8b:dd:0a:cb:8f:78:1a:3f:
         45:60:aa:00:82:ea:01:af:2f:87:3b:63:73:bb:b5:bb:c0:8b:
         df:13:b4:2b:26:28:3b:7c:68:c8:64:5a:53:08:be:6e:97:4d:
         76:1c:b4:d6:61:5d:ae:ea:56:4d:3e:24:05:34:6b:c4:9f:77:
         2d:07:81:a2:6c:f4:da:fa:31:b2:34:2a:a9:08:e8:d4:3e:d1:
         a8:10:8f:fa
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUFlcmCY10w4mV62ajyzvwX9hiOfowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI5MDAwMDQyWhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwOTU4OTc2ZmU0M2Y4MTI0ZDc0Nzc1MzUwZmQ3Y2E0YjQ2
NTYzZjc3ZjUxMjY1MzFjZmFlYjg3OWU0YjQ5YWQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcypC1VIDAHCnm9n2WACcSykq6z6t2ReP3yjaB/f6fJIHA
x74qMi4NaNlEhnLa7xZRXZ1qFnbGCiGoJ4qr0s/aA9YxmBwx7v4wtzJfVnHhINT5
xitRCzyXfycZ6nXEDh9KYDIsP0Oh2i/R7J0SnjSxxGg/SSj4gTwTuynYfqXS8cwS
5DULHH8J8nezzhP78aSjji7cuQmLAZjbN5v8gUQ1MpgcLt5QloJ8Q9o1qLSolCrF
/RRVyus6aY7fMnNuqwNiogi/HJwKf6LbbJPOwABKSTL1syK9lLBPNFcCl9B39WEe
udUOh32Gz5+M3K0OBrHRqHR/rDtdN5dWXm7VjMA3AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU7YJ1FW5yYtgPgjWk+V3WEfxiie0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBiNmQ0MzNlLWJhMGUtNGRhNS1hN2Y0LTIyMjY2MjM5OTlmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8ZwDANBgkqhkiG9w0BAQsFAAOCAQEANf9rZEx3HCkWaA6fm+3gLqQd
yZK643PVsssgrWn88P+mlJ10rS+X9Qd2usrzPWETGG1vNBAHAraHndR/dFsQo/mw
+z9TdSjrjsMerzPEM/5u7DrjeWdD4yTVxSZKCFpj0NfnfhZXucfrHMAYaKLTlWat
8CupfbQ7LVHuLi9eJ9cwr6JOQgUprzTYFAQzrTCy40dEyMPKo/GTq7Z200PvfMCd
JSJNmZsmlv6TO4vdCsuPeBo/RWCqAILqAa8vhztjc7u1u8CL3xO0KyYoO3xoyGRa
Uwi+bpdNdhy01mFdrupWTT4kBTRrxJ93LQeBomz02voxsjQqqQjo1D7RqBCP+g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:28:25 2025 by rpki-client