This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46911f37-9bdc-41b4-a459-8cf84f957313.roa
File:                     46911f37-9bdc-41b4-a459-8cf84f957313.roa (raw, json)
Hash identifier:          4rkZZGUgMnoHC5UQJU5YKSLf5jdxwQm0VJCLY98wkMA=
Subject key identifier:   4A:CE:8A:A7:D4:5A:0E:BE:9F:28:97:45:9A:AC:49:BA:00:60:71:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DF2FCCC4F65190327F12F898879FA17C2BDD73F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46911f37-9bdc-41b4-a459-8cf84f957313.roa
Signing time:             Sun 23 Nov 2025 01:20:07 +0000
ROA not before:           Sun 23 Nov 2025 01:20:07 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f2:fc:cc:4f:65:19:03:27:f1:2f:89:88:79:fa:17:c2:bd:d7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 01:20:07 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=3134f6714d02039cd52ae503c02bd6f50b389eff78459a296096ee462b280d3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:b3:f4:1f:47:84:e8:18:8a:e6:22:64:0a:
                    9c:61:df:00:43:bb:b7:62:67:25:bd:9e:86:78:f3:
                    c5:c1:c8:fb:80:c3:48:75:45:3a:44:ec:dc:27:d8:
                    6b:23:3f:3f:32:bf:74:00:92:73:b5:53:c8:c4:2d:
                    37:90:f6:34:3c:83:14:84:aa:16:c7:bf:08:8f:d2:
                    8b:39:1c:92:80:e4:04:11:9c:d0:f2:86:09:7b:e4:
                    3f:67:f6:6f:cf:2d:b9:17:fe:20:85:a4:2a:a0:22:
                    a5:05:6d:a8:c3:89:65:38:42:05:13:aa:d3:2a:ca:
                    3a:ab:ae:78:a7:06:8b:84:6c:e5:6c:db:09:2f:fa:
                    99:f0:2e:a5:07:f2:aa:04:88:04:72:17:1d:79:bd:
                    0c:a0:16:e2:3d:df:a2:09:99:8f:4d:78:4d:fd:9c:
                    65:a0:85:07:63:8c:ad:e3:10:7d:f9:11:e6:5a:8f:
                    a4:d4:a9:3f:ef:44:53:41:90:45:c9:2d:d0:3a:4f:
                    2d:5d:c8:26:d1:08:00:e9:0e:32:66:36:cf:42:af:
                    99:b4:2e:03:18:5d:80:e3:cf:f9:1a:9d:21:f8:4c:
                    c2:4e:0e:86:5d:ac:15:77:d0:59:42:8e:97:b6:e1:
                    cb:2c:43:c3:1b:62:4c:ae:17:22:29:5b:19:8f:96:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CE:8A:A7:D4:5A:0E:BE:9F:28:97:45:9A:AC:49:BA:00:60:71:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46911f37-9bdc-41b4-a459-8cf84f957313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:a9:5a:1d:8a:8c:bf:b8:8d:b3:74:ba:b6:66:47:f7:c8:89:
         9f:85:71:f2:b0:2c:9e:9d:db:37:fb:44:6b:85:86:45:d7:2a:
         4a:16:c0:f1:87:09:57:c2:40:2a:ec:2c:e7:3a:c3:72:fc:24:
         f6:eb:8b:a4:82:0c:20:fe:93:77:26:9c:c3:c8:8f:4f:9a:c1:
         fe:21:5d:57:b9:d2:b4:7d:97:b7:2c:88:21:94:eb:ff:56:3a:
         97:ac:74:cc:25:e9:95:b4:29:6b:ca:20:43:90:8b:48:25:6a:
         1b:46:dd:30:74:59:ea:8c:b4:7b:5d:ea:94:7e:96:17:e5:5d:
         94:5e:9e:8e:09:ca:c2:68:63:5a:e9:b7:b2:0c:91:8f:60:07:
         3b:a4:ae:4e:32:6c:06:a4:1e:54:99:43:7d:d8:5f:49:dd:3f:
         84:ff:48:39:47:cb:61:0b:46:8b:f3:ca:6a:08:78:6a:54:ae:
         cd:be:63:88:48:b3:d0:33:d2:9c:d0:4d:96:5b:c4:f4:18:20:
         03:ac:3e:9f:35:9c:c1:4f:b5:74:ea:9c:ec:c7:5b:59:70:ba:
         08:d1:e8:35:77:3e:eb:50:1f:77:a2:e4:d3:4d:65:5f:43:7c:
         19:d5:1a:97:75:80:9b:fd:17:f2:f7:ea:e7:85:d5:c6:61:17:
         e8:f0:ad:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:14 2025 by rpki-client