This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15aa6352-348a-401d-8e39-36d727c951f2.roa
File:                     15aa6352-348a-401d-8e39-36d727c951f2.roa (raw, json)
Hash identifier:          QcBUYKubm9RH3qjQ5x73qyzGyCLz9EqVaTmgb9A2XFI=
Subject key identifier:   37:0B:93:9F:33:E0:67:2F:1E:F9:D3:C7:B9:12:79:33:D4:A7:8B:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C909B900E040555833DEE55E05EAA22D34D7132
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15aa6352-348a-401d-8e39-36d727c951f2.roa
Signing time:             Wed 10 Dec 2025 00:41:11 +0000
ROA not before:           Wed 10 Dec 2025 00:41:11 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fef:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:90:9b:90:0e:04:05:55:83:3d:ee:55:e0:5e:aa:22:d3:4d:71:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:41:11 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=4ca95ef3a3297144efa9618adb9295dfae134f764e262c4c66ab8597e9e08662, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:49:42:43:f2:8c:50:f9:ff:1b:19:32:58:
                    3e:4c:00:a1:c7:48:d5:58:69:12:d7:ce:55:9f:2b:
                    28:34:22:bd:5e:f5:6f:26:23:0c:d9:06:cf:3d:73:
                    be:e5:6d:64:1d:61:0d:b1:bd:04:9c:7e:f7:3c:e5:
                    58:a2:88:41:e0:4f:23:ff:94:3f:c6:84:3e:32:52:
                    2d:13:b5:3c:d2:cb:01:4e:c2:8d:3a:70:0b:4f:ae:
                    e9:28:8a:e8:18:99:07:8e:8b:b9:94:7e:a2:22:a0:
                    f5:a1:f4:cf:c7:d1:02:fa:78:bc:41:80:76:b9:f1:
                    0e:c0:45:34:28:97:c6:16:13:a6:2f:e6:61:bf:3b:
                    0a:08:40:a5:f9:8e:17:31:ca:89:fc:73:69:96:8e:
                    e2:83:17:02:79:0d:05:f0:c1:f7:1a:df:ce:14:d7:
                    9c:56:a8:7a:3c:b0:32:1b:85:47:c4:21:93:e7:57:
                    cd:37:88:49:33:15:2a:cb:f4:70:0a:59:0b:8e:21:
                    e5:c9:44:52:84:99:6f:f6:35:94:2b:6e:61:0f:a9:
                    ba:cb:66:a5:aa:20:67:dd:77:ef:89:dc:b0:fb:fd:
                    f6:c7:80:d6:06:6b:e0:02:bd:9d:9d:11:20:0e:b8:
                    c9:16:a4:3d:e8:8b:be:c6:b4:be:8c:43:42:b7:e2:
                    3f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0B:93:9F:33:E0:67:2F:1E:F9:D3:C7:B9:12:79:33:D4:A7:8B:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15aa6352-348a-401d-8e39-36d727c951f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:c0:f6:fb:5d:92:e8:2a:77:ed:97:b2:00:a7:92:fa:44:
         99:ec:e8:5d:ab:a6:02:67:eb:5a:b6:db:71:b1:87:2e:0b:7e:
         6b:6b:a1:76:5d:55:8a:50:71:86:60:94:4f:9b:30:39:f9:15:
         b4:82:b0:6f:f7:28:6b:50:5f:af:5b:2f:f6:b0:fc:55:e1:1a:
         58:87:1d:06:40:66:d7:19:6a:80:ca:5d:8f:03:fe:b2:3d:e2:
         13:96:2c:92:10:f4:0f:46:c1:16:43:a7:3f:ea:09:10:c6:c9:
         0e:db:fe:83:1e:c1:4f:42:11:e9:16:63:df:e8:79:cc:b7:e7:
         00:b6:b2:28:77:2b:1b:d2:e4:c4:cf:2d:66:f4:d5:e1:f3:27:
         3c:c4:be:86:1a:d4:d8:2c:c4:d8:e3:3c:0d:c9:92:f2:c3:7b:
         bc:da:8a:99:90:da:b9:5a:de:7a:79:34:1f:f2:aa:39:d8:ac:
         83:31:ca:ec:ae:11:4b:19:90:41:68:b4:35:4d:12:28:1a:96:
         6c:ba:8b:49:27:fc:54:c4:57:77:73:f2:91:ad:ca:98:b4:0a:
         48:43:72:64:29:7d:eb:58:d7:53:9e:7c:70:0c:af:3a:34:fc:
         d5:88:54:ec:d5:26:e7:2f:cf:2b:47:b2:f3:1f:3e:3c:1d:2c:
         8d:58:e8:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:04:32 2025 by rpki-client