This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15c5cbac-dec8-4ae6-9d21-ef5109e8342e.roa
File:                     15c5cbac-dec8-4ae6-9d21-ef5109e8342e.roa (raw, json)
Hash identifier:          M8RFHY5O3tlFPqxzCpTr0kabPZm+Ko23FIFmlQWZbdM=
Subject key identifier:   3F:17:42:BD:55:A0:8D:D8:1C:7B:DE:0A:A1:81:FA:6A:DA:2B:03:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13F5860991DC8ABF1D5BD5F0BEB979F407E7A7D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15c5cbac-dec8-4ae6-9d21-ef5109e8342e.roa
Signing time:             Sat 15 Nov 2025 00:21:09 +0000
ROA not before:           Sat 15 Nov 2025 00:21:09 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2a:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f5:86:09:91:dc:8a:bf:1d:5b:d5:f0:be:b9:79:f4:07:e7:a7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:21:09 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=35bc7ebed321de4da5e5dbe9bb2611d6dbe1d114c01d5a1e09c567ca09f5a8aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:78:a1:89:9d:92:20:74:b8:30:63:fb:24:9a:
                    c3:45:90:66:7e:ed:56:d5:bc:a7:e2:47:ac:c0:29:
                    37:6a:fa:6a:df:75:9b:59:58:47:07:73:30:63:29:
                    77:95:c7:5a:9d:92:d1:88:c3:bd:4b:dc:5e:78:d7:
                    6d:18:de:49:69:cb:8c:39:29:d6:b2:a4:92:ed:49:
                    69:37:a9:0c:1b:81:79:c1:98:b1:52:d1:58:00:1d:
                    6f:88:ae:13:09:fa:5c:ee:ae:b5:bd:0e:43:3f:1a:
                    e8:ff:ec:4d:b8:b6:91:19:6a:32:8c:0b:13:2d:86:
                    7e:2e:bd:59:a6:b4:41:00:ed:38:2e:4c:e3:eb:61:
                    e2:af:d2:8d:26:f4:49:e0:ca:4b:f7:8c:d8:84:73:
                    2f:aa:45:72:19:35:6d:21:cf:34:dc:58:a1:fe:9f:
                    c4:54:74:a4:a4:13:38:86:ec:13:9b:a5:70:08:d3:
                    8a:17:2d:2b:7c:8d:b9:4f:a2:cd:dc:3d:6e:23:c0:
                    1a:63:0a:e4:1c:0c:41:e0:31:43:7f:4a:70:e7:26:
                    8e:47:e3:58:67:d8:a7:6f:d2:66:7e:74:17:d3:93:
                    fd:50:d1:4e:39:98:81:79:99:bf:b8:09:f6:88:49:
                    e7:c9:e0:83:b9:85:0e:32:7d:5d:25:fb:94:95:b0:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:17:42:BD:55:A0:8D:D8:1C:7B:DE:0A:A1:81:FA:6A:DA:2B:03:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15c5cbac-dec8-4ae6-9d21-ef5109e8342e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2a:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:86:ba:d6:2c:13:de:ca:f3:98:ae:36:34:4c:84:9b:eb:
         85:61:85:8a:32:cb:1b:2b:bd:75:f3:d2:a6:1f:9f:78:89:c2:
         3f:31:41:8e:36:d1:76:20:44:f4:14:81:ae:51:cd:ea:fa:a3:
         9d:58:36:6c:6d:da:bf:ab:79:c0:ea:f0:1e:fa:8a:c0:34:83:
         ff:b2:05:33:77:eb:32:c1:d0:b7:6e:66:54:34:9a:26:53:4f:
         e0:ee:66:a3:d4:47:ee:20:c7:6b:ac:e6:c5:fc:49:5c:b7:22:
         ad:d2:34:5a:7d:ae:23:26:a1:d4:9d:e9:6b:21:2e:3c:8f:5d:
         31:73:ce:a0:45:f3:c8:30:c1:af:11:dd:71:bf:11:13:24:c4:
         50:d6:e4:c3:3d:65:9f:2a:1e:25:0a:83:16:b0:06:d7:54:2d:
         c3:5b:28:4c:81:ef:a7:f9:a5:5a:16:b8:41:a1:17:1f:8c:ab:
         58:8d:b1:b0:a7:8d:00:1c:bd:e9:03:97:14:8b:b7:c5:f0:71:
         5b:ba:f3:ac:be:a3:0e:13:2e:bc:61:35:ff:1f:02:8f:f9:1d:
         8d:fc:50:77:2e:37:1b:62:7b:3c:6d:e4:4f:8f:e9:dc:36:91:
         8f:21:a5:51:68:fa:e4:f4:50:d1:0f:17:a2:22:11:18:d2:80:
         63:11:ec:ce
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUE/WGCZHcir8dW9Xwvrl59Afnp9EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE1MDAyMTA5WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNWJjN2ViZWQzMjFkZTRkYTVlNWRiZTliYjI2MTFkNmRi
ZTFkMTE0YzAxZDVhMWUwOWM1NjdjYTA5ZjVhOGFhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDaeKGJnZIgdLgwY/skmsNFkGZ+7VbVvKfiR6zAKTdq+mrf
dZtZWEcHczBjKXeVx1qdktGIw71L3F54120Y3klpy4w5KdaypJLtSWk3qQwbgXnB
mLFS0VgAHW+IrhMJ+lzurrW9DkM/Guj/7E24tpEZajKMCxMthn4uvVmmtEEA7Tgu
TOPrYeKv0o0m9Engykv3jNiEcy+qRXIZNW0hzzTcWKH+n8RUdKSkEziG7BObpXAI
04oXLSt8jblPos3cPW4jwBpjCuQcDEHgMUN/SnDnJo5H41hn2Kdv0mZ+dBfTk/1Q
0U45mIF5mb+4CfaISefJ4IO5hQ4yfV0l+5SVsLtbAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUPxdCvVWgjdgce94KoYH6atorA+wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE1YzVjYmFjLWRlYzgtNGFlNi05ZDIxLWVmNTEwOWU4MzQyZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8qwDANBgkqhkiG9w0BAQsFAAOCAQEAidGGutYsE97K85iuNjRMhJvr
hWGFijLLGyu9dfPSph+feInCPzFBjjbRdiBE9BSBrlHN6vqjnVg2bG3av6t5wOrw
HvqKwDSD/7IFM3frMsHQt25mVDSaJlNP4O5mo9RH7iDHa6zmxfxJXLcirdI0Wn2u
Iyah1J3payEuPI9dMXPOoEXzyDDBrxHdcb8REyTEUNbkwz1lnyoeJQqDFrAG11Qt
w1soTIHvp/mlWha4QaEXH4yrWI2xsKeNABy96QOXFIu3xfBxW7rzrL6jDhMuvGE1
/x8Cj/kdjfxQdy43G2J7PG3kT4/p3DaRjyGlUWj65PRQ0Q8XoiIRGNKAYxHszg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:40:56 2025 by rpki-client