This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10033961-c437-4201-87b8-c9dfc05eb475.roa
File:                     10033961-c437-4201-87b8-c9dfc05eb475.roa (raw, json)
Hash identifier:          eZH6frL/WF6Ihik6jdPNZxlIheelomQjL4UXsg2xi0g=
Subject key identifier:   EC:8D:A2:0F:53:1C:A0:5B:A9:13:37:4A:5C:40:2B:CF:CA:F3:68:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D33EF46649802C3646FE65AB7DC5968F643798B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10033961-c437-4201-87b8-c9dfc05eb475.roa
Signing time:             Wed 03 Dec 2025 01:20:06 +0000
ROA not before:           Wed 03 Dec 2025 01:20:06 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:c400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:33:ef:46:64:98:02:c3:64:6f:e6:5a:b7:dc:59:68:f6:43:79:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:20:06 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=b42c224cb8d8c735d7dc5dc323bbb183ed6320c8ff934f81b958834c763e2ca5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:14:4d:25:6f:c0:d2:4e:cd:c8:ca:cb:f5:
                    48:e5:80:8d:c1:1c:ed:02:bb:0a:4f:6c:53:4a:39:
                    76:eb:b9:02:9e:53:b3:46:b9:ad:31:85:f6:e3:e3:
                    71:08:30:9d:24:6e:99:f0:f7:88:ba:9a:7a:eb:13:
                    5b:34:71:9b:85:ba:5c:3c:f0:b9:fe:e3:bd:66:cf:
                    20:98:8b:76:82:93:11:4d:4a:b5:71:ee:e7:4f:85:
                    72:73:11:7d:32:87:a4:d2:1a:4f:60:65:02:08:3a:
                    59:a2:d9:a6:58:08:63:09:6d:65:16:0f:b1:61:8d:
                    43:cd:6a:b1:35:21:b2:a0:9f:d0:78:84:5a:bb:14:
                    58:f3:c5:b3:75:45:66:a3:aa:6f:93:43:ba:f8:aa:
                    49:df:b4:b6:a9:5d:ab:ee:9c:0c:4d:9a:be:68:c9:
                    22:d1:53:77:3d:7b:bc:c0:5f:0c:4e:9f:28:51:2e:
                    45:03:c6:62:92:ea:f0:1d:02:73:90:35:e3:cd:00:
                    31:0f:57:39:79:50:ad:46:75:dc:64:66:69:57:7e:
                    f1:1f:c1:eb:eb:4c:a4:3e:f8:29:11:59:e7:22:4b:
                    d7:da:f4:41:5f:2a:f6:55:cd:df:86:b3:44:52:9a:
                    52:3e:2e:39:ac:86:d0:89:a5:99:74:6c:76:97:52:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8D:A2:0F:53:1C:A0:5B:A9:13:37:4A:5C:40:2B:CF:CA:F3:68:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10033961-c437-4201-87b8-c9dfc05eb475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:c400::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:9c:28:b0:41:68:59:ff:c5:87:95:c8:a4:90:99:6c:b3:4a:
         ec:5f:45:9d:5e:1d:ef:24:a1:f3:5f:bd:97:1b:90:a2:ac:f1:
         45:6c:30:ba:7e:ae:97:87:43:ca:44:90:ce:e8:99:2d:59:98:
         9a:2e:19:3b:a8:9b:83:77:17:11:b2:16:b8:72:31:ca:dc:b9:
         f4:a8:18:a8:e2:6f:d8:3e:f0:2e:fb:83:b0:d0:d9:b7:93:f2:
         a7:01:4e:78:67:9d:f3:2f:b0:de:3c:ab:ef:9e:01:38:94:c6:
         10:85:cd:ee:1f:ae:36:4e:a5:14:38:87:97:da:e2:2b:8b:28:
         c2:e0:0f:99:c5:77:54:cc:37:64:f7:d4:9f:fa:ac:11:dc:5c:
         66:75:d0:c6:a8:42:71:0e:5c:0e:99:24:25:aa:a4:75:f9:73:
         25:60:74:3e:63:a5:13:4e:4f:51:e5:dc:5c:41:00:b4:2a:a2:
         ca:b5:4f:ee:15:8b:df:b0:4c:e2:36:46:07:bb:6f:5d:5e:fc:
         f8:ce:c0:18:93:5b:e0:cd:5f:c3:2a:95:b5:e6:ec:d6:cb:5a:
         88:6f:87:70:5c:86:34:3b:9a:40:76:2c:25:1f:35:bf:f3:d5:
         02:93:f8:d7:c2:0f:82:19:35:15:53:99:93:cc:29:e7:5b:80:
         24:af:1c:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:53:47 2025 by rpki-client