This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30f88422-ef1a-405c-82bb-2e68f4cdd242.roa
File:                     30f88422-ef1a-405c-82bb-2e68f4cdd242.roa (raw, json)
Hash identifier:          4yHscoE3L0RXnr1L+tpnDkye7624LLSrT8lMwAJ/g1s=
Subject key identifier:   8D:5B:6C:49:30:EB:86:7A:F2:89:AC:31:3B:05:C3:1F:B3:0C:20:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1134483057BD87620275EB402FD824E712DB5BFD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30f88422-ef1a-405c-82bb-2e68f4cdd242.roa
Signing time:             Sun 23 Nov 2025 01:00:46 +0000
ROA not before:           Sun 23 Nov 2025 01:00:46 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fea:8020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:34:48:30:57:bd:87:62:02:75:eb:40:2f:d8:24:e7:12:db:5b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 01:00:46 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=8913f686d5b7f33c4550fcaee5bf9455d9ce4e282b48b3e645df078dacd9070e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:98:4c:de:d7:0d:89:5a:62:1f:a9:30:fb:
                    15:01:b7:71:3f:9c:5d:ec:1e:b3:1d:67:96:9c:50:
                    0d:d9:43:0a:bb:2b:72:73:c7:9e:1e:cc:35:04:84:
                    01:61:30:e7:35:d5:11:a7:54:36:79:66:86:09:ca:
                    e1:9a:ff:3f:50:c2:eb:81:d7:3a:9e:d7:54:2e:85:
                    6e:94:53:f4:1a:29:3f:15:37:65:ab:ec:0d:b8:04:
                    11:0a:ab:fa:43:96:8b:f8:a2:aa:73:f6:8e:f8:8e:
                    39:34:fa:10:53:ad:e8:d4:36:f2:a8:29:c8:04:82:
                    f3:9f:12:6b:70:d8:40:93:14:8d:51:71:d2:27:05:
                    1b:35:1c:a5:e6:3c:fc:77:36:5f:62:e7:b2:d2:c9:
                    17:f3:45:f7:28:92:46:cf:1a:16:68:b6:23:b2:a0:
                    23:95:1f:86:ca:3e:13:49:d0:6d:53:fd:37:36:82:
                    d7:27:5d:c8:fb:b6:12:c5:8f:4b:f2:b0:78:5c:72:
                    10:bf:9e:1f:a5:69:9b:7c:fc:d3:f8:1d:63:83:93:
                    28:24:1d:9a:1b:6a:36:c7:0e:b4:32:8e:be:72:77:
                    b1:d8:a8:ef:8d:a5:67:b5:ef:b6:d9:d7:82:52:57:
                    66:65:09:26:14:00:90:22:28:1a:86:00:45:57:52:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5B:6C:49:30:EB:86:7A:F2:89:AC:31:3B:05:C3:1F:B3:0C:20:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30f88422-ef1a-405c-82bb-2e68f4cdd242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:94:2f:71:4b:ae:59:32:b3:ce:75:ed:6f:2d:ec:55:8f:0c:
         97:20:2c:5c:04:59:14:b8:b9:bb:fe:91:91:13:3f:e0:06:db:
         f7:5e:fb:a1:4b:5a:ac:a5:05:b2:57:35:d4:e8:24:bc:9c:2e:
         b1:7a:47:81:05:ca:71:d7:90:9a:92:e5:45:f3:50:fa:c1:2a:
         20:07:a1:c1:1f:6e:26:66:1f:8f:2f:da:4d:aa:97:0e:b8:37:
         3a:37:b2:7a:fa:cb:8f:25:0b:9b:8d:1c:15:29:bd:70:a3:af:
         6e:3c:56:00:77:f4:c5:53:17:0a:1d:96:68:ca:1f:76:70:21:
         0d:9f:26:6b:56:d8:9c:0c:44:34:09:3e:5c:9a:cc:e6:b8:87:
         78:c8:48:0a:7f:2b:78:99:4c:f2:8e:58:a4:5f:c2:f1:fd:ae:
         7c:88:15:da:e2:ed:0a:c1:fa:ad:96:5d:bd:55:e1:2e:36:f2:
         02:43:b2:d3:1e:55:a1:e1:6e:a8:e5:f5:d0:7b:59:7d:33:6a:
         59:5b:82:61:8b:78:80:05:aa:45:9f:34:37:32:55:f5:c5:2e:
         ab:df:e1:ad:e8:99:a2:6c:78:48:96:b8:f8:e1:23:a8:11:de:
         da:db:79:43:88:a2:2c:33:1d:78:20:73:3a:0d:05:f4:71:47:
         87:28:d2:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:54 2025 by rpki-client