This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fb6ffb-fb6e-4323-ab8c-1d8ad8737cfd.roa
File:                     18fb6ffb-fb6e-4323-ab8c-1d8ad8737cfd.roa (raw, json)
Hash identifier:          ZF7A0lwp9QQx3ilolJrGbtfcWrBdsgaFtGf4a1Xq8tw=
Subject key identifier:   88:84:A0:57:D7:B1:6F:FC:B0:E4:9E:4A:16:D1:90:DE:CF:60:EF:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E88EB82C4078CB1138D64993CBBFDE7624CD10F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fb6ffb-fb6e-4323-ab8c-1d8ad8737cfd.roa
Signing time:             Sat 06 Dec 2025 01:21:18 +0000
ROA not before:           Sat 06 Dec 2025 01:21:18 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:88:eb:82:c4:07:8c:b1:13:8d:64:99:3c:bb:fd:e7:62:4c:d1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 01:21:18 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=4b487500fa206d7a39dbe0f1bd9fc615acde0e51c0c8f47a3611cdde7bba085f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c8:07:f9:d8:29:00:d5:12:a3:87:3f:cc:16:
                    ac:d3:08:3b:27:37:d3:68:3e:05:62:1e:b2:09:8f:
                    7e:1f:c8:17:76:8e:0f:36:5f:76:51:b9:4c:8c:a6:
                    23:68:46:e2:c4:dc:b0:a3:d1:ce:0b:db:e1:f8:fc:
                    ff:fb:35:b9:b3:82:70:08:e7:e1:f4:ec:e5:15:30:
                    7b:cd:31:9e:8e:01:c1:b9:55:76:4e:5b:c2:88:4c:
                    69:e2:68:51:e8:52:13:1b:ea:b1:54:5f:30:a6:7e:
                    c3:fa:99:f1:88:ba:25:51:35:5d:0d:7f:f7:16:07:
                    1c:38:87:ca:ad:2a:11:41:ba:a5:71:c2:fd:b7:87:
                    2f:78:98:a2:42:1b:44:98:3d:d8:c1:ce:c6:5a:b4:
                    43:31:05:b1:e0:72:8b:8b:9d:8a:47:54:48:67:04:
                    57:b6:34:5f:7e:cf:c3:58:b6:80:cd:8f:76:26:e8:
                    9d:45:b0:d5:34:9d:e5:98:00:6c:67:69:46:f2:3c:
                    26:f8:60:3d:4b:d8:78:d4:54:1d:d7:96:0e:a0:33:
                    27:47:a7:a4:25:07:3d:12:9a:4d:cc:91:67:4b:61:
                    51:f4:2a:e9:18:68:ae:63:73:c6:f4:08:f2:77:7c:
                    8c:d6:bd:20:3b:a9:47:11:b4:86:d7:8c:bc:02:44:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:84:A0:57:D7:B1:6F:FC:B0:E4:9E:4A:16:D1:90:DE:CF:60:EF:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fb6ffb-fb6e-4323-ab8c-1d8ad8737cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:43:99:1d:d9:36:24:76:3f:11:fa:d3:61:09:dc:c4:bc:1f:
         c9:d7:fb:f4:fc:5b:c7:83:3c:3f:11:4e:b0:e1:a3:d4:00:5c:
         ad:28:e3:87:d7:0b:38:4f:80:86:98:ee:84:76:b1:b5:23:a8:
         20:ae:95:4f:42:cf:8a:89:c5:1a:b5:d2:13:7b:5e:aa:2d:b9:
         81:9b:0b:b7:b9:80:ed:44:2f:2f:10:56:72:a2:9b:9f:12:d4:
         7b:c3:7b:f8:0d:d6:fa:6d:5d:9f:13:a9:cc:c8:7d:85:46:f0:
         65:34:d2:4f:00:3e:09:97:8d:99:aa:d9:6d:22:5b:9d:2a:20:
         35:e3:c2:83:14:4a:bb:b6:51:5a:58:d9:66:66:24:15:05:29:
         38:61:7b:3a:66:95:c2:cc:86:9b:03:7c:97:d1:01:24:ff:66:
         bb:5f:50:46:12:c5:93:2f:6c:2f:c2:b2:6e:9e:ad:aa:f9:4e:
         b6:6f:79:c0:53:a3:38:7f:c4:f9:8f:d9:82:8f:71:ed:ac:79:
         41:0e:89:97:89:02:17:41:5e:a3:0a:8c:b1:c8:d8:ea:df:c5:
         42:94:59:d3:c0:45:62:63:90:6a:92:38:ee:ae:d8:e7:d3:3a:
         90:8c:fb:85:2e:f0:1f:38:17:c4:f3:4a:05:e6:e5:0a:6a:61:
         f0:34:79:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:56:44 2025 by rpki-client