This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3283a168-489e-49fe-839c-d518cd5c1699.roa
File:                     3283a168-489e-49fe-839c-d518cd5c1699.roa (raw, json)
Hash identifier:          X/KEIHKj/Y0DaaMAkB+qEJuIRYe9leQK5YNQUppR5hU=
Subject key identifier:   F6:40:0D:C3:84:54:AC:28:8E:C0:8E:12:8A:73:48:02:0C:D9:6D:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4212236BEFBFA2B2050F43E16B4B03019305DEF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3283a168-489e-49fe-839c-d518cd5c1699.roa
Signing time:             Sat 06 Dec 2025 00:50:49 +0000
ROA not before:           Sat 06 Dec 2025 00:50:49 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:80b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:12:23:6b:ef:bf:a2:b2:05:0f:43:e1:6b:4b:03:01:93:05:de:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 00:50:49 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=745ed0fa369805ce3cc9a758e327a3d76a15e62ea99d2bc7159972a595eb7e0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:bd:30:6f:41:aa:2c:63:d3:ad:db:36:d6:
                    a8:36:9a:6b:e5:64:42:40:82:3f:0e:00:ff:94:4e:
                    5b:fe:7b:f1:ae:24:fa:ef:73:ff:51:21:65:05:16:
                    3a:95:a6:ac:df:12:bc:8b:54:2b:29:36:f2:52:a1:
                    a0:71:87:53:00:3e:0c:c8:62:2a:7a:fe:d1:d8:03:
                    db:4c:c5:ab:c2:c7:da:95:dd:e0:8f:b2:9e:58:31:
                    20:13:1d:d7:46:08:88:61:8d:bb:8e:df:8d:0b:30:
                    90:7a:24:69:68:fe:c1:ed:f2:4f:2b:6c:38:13:0a:
                    2c:4e:e1:eb:a1:80:06:62:a2:55:3d:e3:81:60:c8:
                    93:3a:ee:52:4a:ec:af:ea:a9:25:67:11:7c:88:02:
                    3a:d1:38:11:4f:b5:e3:3f:0a:0e:2e:53:a9:61:78:
                    5c:c2:c7:38:1a:85:9d:ff:06:81:af:00:91:2d:e8:
                    da:71:c8:77:66:2a:21:43:db:be:43:4d:61:58:b2:
                    41:8c:e5:1e:5b:85:ba:cc:07:df:9e:d9:04:6e:7d:
                    f2:4e:9b:5f:eb:44:8e:c6:a7:89:79:c1:f2:5b:d0:
                    67:c5:ec:ae:13:d5:85:42:f6:b9:c0:f8:6c:5d:80:
                    8e:22:16:8f:68:0b:e5:2a:e4:0b:b7:6b:3f:6f:54:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:40:0D:C3:84:54:AC:28:8E:C0:8E:12:8A:73:48:02:0C:D9:6D:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3283a168-489e-49fe-839c-d518cd5c1699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:80b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:f2:0b:68:9a:66:77:8c:4d:a7:a8:8b:09:e8:3e:23:78:a9:
         d1:76:bb:59:86:b2:ad:eb:de:a7:c0:65:ee:82:ed:88:2f:d7:
         e1:ea:36:a9:cb:06:28:ed:d2:f0:c4:69:01:5d:0e:1c:77:7b:
         ae:78:63:82:4f:48:56:ad:bd:c4:21:13:52:06:d5:23:21:7c:
         ba:e1:9f:d6:58:3d:f1:5b:82:68:70:53:68:46:ce:04:7d:a8:
         58:29:1b:6f:37:9f:91:ab:26:d0:93:eb:c3:5d:e9:5b:49:08:
         e6:fd:c1:d7:e9:e6:42:6d:8e:f0:33:fb:c0:56:2b:f7:f8:f4:
         68:1d:f7:96:0e:7d:bc:76:34:65:0e:ff:e1:68:e4:75:2c:55:
         b3:1e:b8:c4:f0:ee:46:26:f6:3a:15:20:cf:44:d8:6c:17:b8:
         20:db:67:14:20:e5:b7:cb:23:0e:bb:87:52:02:a8:66:26:e2:
         a2:73:9a:98:93:44:f2:21:5e:f8:1c:1d:4a:ac:44:b3:6b:74:
         6f:fa:eb:1d:4c:61:89:58:8c:07:44:fb:d6:c9:7d:6f:2a:fe:
         60:e2:79:ea:30:bc:26:0d:94:6d:a7:d4:1e:42:24:58:c9:e7:
         40:68:73:3e:c5:50:e1:46:49:ac:48:d2:c7:8e:20:51:88:88:
         41:3a:23:de
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQhIja++/orIFD0Pha0sDAZMF3vEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDA1MDQ5WhcNMjYwMzA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDVlZDBmYTM2OTgwNWNlM2NjOWE3NThlMzI3YTNkNzZh
MTVlNjJlYTk5ZDJiYzcxNTk5NzJhNTk1ZWI3ZTBkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChi70wb0GqLGPTrds21qg2mmvlZEJAgj8OAP+UTlv+e/Gu
JPrvc/9RIWUFFjqVpqzfEryLVCspNvJSoaBxh1MAPgzIYip6/tHYA9tMxavCx9qV
3eCPsp5YMSATHddGCIhhjbuO340LMJB6JGlo/sHt8k8rbDgTCixO4euhgAZiolU9
44FgyJM67lJK7K/qqSVnEXyIAjrROBFPteM/Cg4uU6lheFzCxzgahZ3/BoGvAJEt
6NpxyHdmKiFD275DTWFYskGM5R5bhbrMB9+e2QRuffJOm1/rRI7Gp4l5wfJb0GfF
7K4T1YVC9rnA+GxdgI4iFo9oC+Uq5Au3az9vVOl3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU9kANw4RUrCiOwI4SinNIAgzZbS8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMyODNhMTY4LTQ4OWUtNDlmZS04MzljLWQ1MThjZDVjMTY5OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AgLAwDQYJKoZIhvcNAQELBQADggEBAM/yC2iaZneMTaeoiwnoPiN4
qdF2u1mGsq3r3qfAZe6C7Ygv1+HqNqnLBijt0vDEaQFdDhx3e654Y4JPSFatvcQh
E1IG1SMhfLrhn9ZYPfFbgmhwU2hGzgR9qFgpG283n5GrJtCT68Nd6VtJCOb9wdfp
5kJtjvAz+8BWK/f49Ggd95YOfbx2NGUO/+Fo5HUsVbMeuMTw7kYm9joVIM9E2GwX
uCDbZxQg5bfLIw67h1ICqGYm4qJzmpiTRPIhXvgcHUqsRLNrdG/66x1MYYlYjAdE
+9bJfW8q/mDieeowvCYNlG2n1B5CJFjJ50Bocz7FUOFGSaxI0seOIFGIiEE6I94=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:50:10 2025 by rpki-client