This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa
File:                     3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa (raw, json)
Hash identifier:          vOB/R1b6xjzKVZE99rmUZ/7qTm2G4soYJW88jhPy3hc=
Subject key identifier:   D9:4F:7A:95:60:57:AE:F5:EE:A1:C4:13:9F:1C:A0:E4:58:F0:03:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       634B3119673318D1EA0BA18F12BADAD1FFDA6FCC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa
Signing time:             Thu 13 Nov 2025 00:10:45 +0000
ROA not before:           Thu 13 Nov 2025 00:10:45 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:8060::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4b:31:19:67:33:18:d1:ea:0b:a1:8f:12:ba:da:d1:ff:da:6f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:10:45 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=6aa8a4f66fb051ba181f0a61a73774f04f6ef3527c543304c41f2f627bd9c34e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:e1:ea:09:72:d8:e3:c8:ea:07:fa:60:fe:
                    4e:03:68:4c:75:d8:19:33:db:5d:1a:ac:3f:f1:79:
                    4f:6d:eb:ea:2d:e7:45:13:7a:47:00:fc:fe:78:d2:
                    b5:4d:02:fc:eb:b7:ff:6f:38:0a:f2:22:8c:db:59:
                    10:15:c6:f0:9a:31:ba:b3:18:f5:c5:b8:7a:e6:22:
                    5b:58:ed:41:77:02:fa:21:3e:af:49:77:9f:0a:f5:
                    6b:17:e8:04:2b:08:21:88:84:55:fd:31:b0:99:15:
                    b1:15:13:82:cc:51:b3:1e:d0:31:51:e6:64:17:94:
                    e6:4a:9b:a1:62:bd:6b:99:fb:87:f4:55:be:5a:ab:
                    e4:46:cf:2d:68:fc:5b:88:e3:b9:ce:4e:b8:e1:3c:
                    ee:88:36:2d:f9:24:b0:bb:f9:88:78:b4:48:03:87:
                    d7:7e:0e:35:49:1f:5e:b6:5b:3e:24:1a:f7:14:2e:
                    47:ff:7f:48:a0:7b:4e:ad:29:04:f4:34:09:ef:c4:
                    71:55:0c:bc:59:2a:3b:48:29:13:e0:f5:74:1a:3a:
                    e5:cf:06:14:46:8a:97:f4:02:e0:8a:44:c2:72:1a:
                    a0:1e:c0:cd:a2:58:56:cb:f1:a7:7b:0c:89:cf:e2:
                    4e:8b:48:b4:5e:72:44:c4:84:a6:b3:e2:e4:b4:f8:
                    3e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:7A:95:60:57:AE:F5:EE:A1:C4:13:9F:1C:A0:E4:58:F0:03:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8060::/46

    Signature Algorithm: sha256WithRSAEncryption
         d6:1c:a1:f8:9c:fa:9a:43:9c:a1:bb:6b:28:61:5f:ce:e1:bd:
         5f:b4:c3:08:ed:58:a9:0a:0c:04:e5:0e:43:1b:87:dd:bc:e9:
         4b:64:01:9d:b1:5b:19:d6:ec:4b:e2:91:f0:d4:44:98:e0:0b:
         3e:e9:57:06:88:8b:45:b6:7e:99:c9:14:d3:83:22:ae:f8:48:
         f6:f1:4a:15:63:fe:e8:09:5b:aa:77:3b:d2:7f:78:e7:72:c5:
         40:59:ac:41:e5:d8:27:89:98:32:ad:60:13:4e:25:6d:c1:f7:
         9b:42:10:ac:32:55:cf:78:f8:7a:ec:26:bd:a5:b2:63:be:59:
         8d:ca:dc:5d:b5:89:be:69:b0:cd:13:c7:f2:1c:40:2a:cf:a8:
         de:8b:61:f3:5b:1d:34:0f:1c:32:06:5b:8d:d4:69:eb:9f:ca:
         32:41:71:10:6f:16:8f:a0:f3:0f:c4:ba:96:13:bb:fe:1d:6b:
         54:d7:01:b6:29:aa:51:01:5e:f9:07:00:d4:2a:ff:f9:c8:e7:
         c1:8a:06:6f:a6:ae:96:9b:bb:65:af:7b:13:38:cb:4d:43:30:
         ba:53:2d:db:76:4e:da:ed:58:e6:95:c5:1c:e8:b9:04:85:37:
         dc:de:64:8d:5e:ac:b8:61:f7:dc:e0:36:70:05:16:b2:67:ab:
         a0:11:74:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:11:49 2025 by rpki-client