This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45f5c9b9-6c4d-4a58-8ece-7eda954cdf74.roa
File:                     45f5c9b9-6c4d-4a58-8ece-7eda954cdf74.roa (raw, json)
Hash identifier:          rX8t69zbqzyFGDcHK4A5dpEqUnVv8yNAjhOxyyfHDXQ=
Subject key identifier:   4A:25:D6:90:A5:D2:13:F5:AF:22:FB:BC:25:C9:D7:97:B9:3E:B3:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19FD1689EC9B2DE362166511A821C107117721E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45f5c9b9-6c4d-4a58-8ece-7eda954cdf74.roa
Signing time:             Wed 03 Dec 2025 00:41:04 +0000
ROA not before:           Wed 03 Dec 2025 00:41:04 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fd:16:89:ec:9b:2d:e3:62:16:65:11:a8:21:c1:07:11:77:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 00:41:04 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=78ab9d1333450cd4dd008f1c5c289416e08b18e3ca7305faf8cb1812eee888f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:a7:50:8a:ab:d2:3a:32:b3:ce:3d:dd:e5:
                    22:c1:5a:ac:51:ad:f8:e3:09:4c:84:39:d1:e0:32:
                    24:6a:5f:61:9d:ba:fd:e1:ec:ab:f8:e6:05:d2:89:
                    c1:82:90:8b:77:6e:6b:41:68:06:7e:92:25:14:11:
                    9b:39:bd:15:92:1f:f2:0e:e4:86:2c:41:d6:8c:e4:
                    fe:b3:7c:75:c9:15:e1:4a:f3:29:2f:9f:e3:48:b9:
                    50:16:db:4e:8b:31:6f:44:52:cc:f5:34:7a:4a:d1:
                    9f:71:be:22:d7:e5:bd:0f:f7:a2:9a:09:df:06:76:
                    ac:c8:66:19:81:b9:c6:16:f1:f8:5f:f0:72:48:3e:
                    bd:a3:47:6f:30:a3:65:11:00:ba:e8:2c:e1:38:48:
                    33:66:fd:3f:b6:54:12:76:b0:1d:10:b9:1e:f1:9f:
                    56:04:d6:58:bb:a7:94:fc:e9:a8:b1:ef:fd:c1:8c:
                    a5:9b:4e:ca:70:9b:2a:9e:10:db:d3:ee:0d:fc:2c:
                    ec:d3:3d:90:0c:8e:85:97:5e:66:3e:69:73:37:2c:
                    35:15:28:eb:5b:6d:46:df:60:25:b6:a4:d2:58:5f:
                    e2:12:47:ba:07:a2:3a:f2:0e:42:7f:52:26:c5:ac:
                    eb:70:8a:0a:52:cf:c4:63:72:5f:40:e7:97:18:23:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:D6:90:A5:D2:13:F5:AF:22:FB:BC:25:C9:D7:97:B9:3E:B3:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45f5c9b9-6c4d-4a58-8ece-7eda954cdf74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         95:be:c2:62:53:78:61:96:ea:30:6f:01:de:1c:1b:0c:5a:46:
         b4:d8:93:61:6f:5f:db:51:47:d4:69:35:81:a2:13:9d:15:ab:
         01:02:a9:92:17:46:4c:f7:c3:7b:f4:72:a1:b6:5c:0b:21:7d:
         ab:8a:cb:dc:08:a5:82:ce:be:dc:75:ef:3d:4e:09:2a:54:53:
         80:47:01:42:f2:8d:66:13:14:87:e3:ed:81:44:f3:f3:61:4a:
         8e:8d:41:c8:89:a4:45:1e:a7:0f:e8:99:e5:df:e8:59:7b:be:
         3b:f1:8e:7a:3a:e8:09:77:a8:29:58:e1:ec:27:52:15:d1:e6:
         89:e8:c9:41:32:e6:37:69:03:75:f7:9f:e7:36:f0:d8:ec:fd:
         e9:7d:62:ae:3d:63:ab:32:6d:fd:81:dc:3e:9a:d1:28:b2:86:
         1c:31:c7:af:ad:b5:b3:88:27:86:e7:98:ed:b3:77:45:81:ac:
         96:2f:9b:8a:c3:f2:4f:90:6b:aa:80:d0:91:a1:52:94:b2:d4:
         1f:31:31:93:e9:73:d7:aa:33:fb:83:c0:ff:24:0a:b1:a8:0b:
         2c:e1:8f:4e:01:35:78:ab:2b:8a:70:0e:c0:9d:cd:10:97:92:
         58:2f:44:97:3c:80:9d:77:17:f8:74:bd:92:31:23:49:f7:1a:
         af:cc:47:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:31:59 2025 by rpki-client