This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/491ab89d-79f7-400c-8d78-f03d5fec9c77.roa
File:                     491ab89d-79f7-400c-8d78-f03d5fec9c77.roa (raw, json)
Hash identifier:          CNMoEyrH6va63hByev9A5zzal3LkG3Fo5SWlGeONsD0=
Subject key identifier:   1F:27:C4:B7:9A:9A:FA:33:2C:3C:A7:36:0F:1E:08:D1:9E:32:C8:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D71BDBF63A1F0B4C0E0DF0C6AF7DA5CC1809D4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/491ab89d-79f7-400c-8d78-f03d5fec9c77.roa
Signing time:             Sat 06 Dec 2025 00:51:17 +0000
ROA not before:           Sat 06 Dec 2025 00:51:17 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:71:bd:bf:63:a1:f0:b4:c0:e0:df:0c:6a:f7:da:5c:c1:80:9d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 00:51:17 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=2e9754b053301ddb1d793fdce6f01ef572c011e0c2233a28be2a3d616670a8ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:34:61:83:64:dd:39:0e:53:91:30:6a:a0:
                    46:22:0b:31:88:f7:9a:54:32:22:19:f9:4f:b8:03:
                    5d:f5:ed:fc:42:90:34:b0:a6:51:3d:db:2f:7d:e4:
                    c1:5d:5d:1d:bc:96:14:7e:75:c9:2f:97:65:10:05:
                    fd:a6:32:27:9a:59:ca:3f:39:04:ee:36:86:12:bc:
                    07:50:86:37:30:e8:4a:72:06:98:19:52:59:95:46:
                    f9:ed:c1:5d:8a:ab:4f:c1:3f:5a:0e:4c:76:13:5a:
                    6f:9d:9c:8f:41:f0:ff:89:db:c0:29:8d:2e:69:94:
                    a6:71:53:aa:64:40:6a:09:60:5f:a8:7f:cd:27:93:
                    cd:e0:d1:21:5c:aa:c5:e8:64:78:65:84:74:af:54:
                    67:43:7a:71:54:eb:25:f3:4c:34:3e:56:d3:ec:68:
                    b9:ee:00:cf:68:98:32:53:e0:d8:2a:22:3d:6c:b6:
                    e9:8a:15:fe:b4:57:d7:97:0b:f5:31:3a:55:c0:fe:
                    7e:5f:6c:30:b7:28:c1:54:cb:d2:61:e3:18:49:bc:
                    12:31:71:49:70:66:c3:bd:cf:88:fc:93:b2:af:b3:
                    a7:06:69:18:f7:df:c9:a7:15:c6:63:3d:a8:de:40:
                    56:04:83:bf:15:7d:27:75:91:8c:ad:ff:7c:6b:96:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:27:C4:B7:9A:9A:FA:33:2C:3C:A7:36:0F:1E:08:D1:9E:32:C8:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/491ab89d-79f7-400c-8d78-f03d5fec9c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:74:0a:0c:09:ae:73:8e:3c:65:7c:c2:cb:1c:30:18:e4:e2:
         1c:e9:68:69:87:68:1d:79:05:40:6a:11:5b:22:f3:a4:44:45:
         9e:c8:1b:ed:f9:c8:66:a2:bd:f8:b0:4b:31:03:ec:87:6d:f0:
         4e:68:d4:de:6f:c2:45:63:96:6c:4f:d4:b9:0e:89:2c:36:2e:
         c4:c6:af:f8:15:fa:d7:d6:1b:6b:c3:20:44:1a:0c:54:85:2a:
         d9:ac:d3:65:ca:db:32:05:5c:87:90:c8:84:2d:ab:56:92:d3:
         4b:e2:57:3d:4a:50:df:10:83:63:c7:a3:c1:2d:e8:de:64:af:
         30:d0:5d:12:43:4f:60:e0:31:87:29:e7:00:aa:e7:aa:e5:73:
         46:94:9f:69:2c:41:b9:17:87:31:89:17:a6:13:17:cd:65:c3:
         0b:cd:14:41:f0:3f:4d:ce:7a:d0:cb:1c:80:54:b6:77:f3:d2:
         9f:04:2e:1c:96:27:3f:e3:72:f3:03:24:49:4a:fd:9a:3e:ec:
         5a:eb:60:9e:fc:fc:6b:fd:d6:e7:15:9e:09:44:74:b1:c8:c1:
         0c:6e:d9:d3:06:f0:f7:d1:0b:89:23:ff:d0:92:f6:bb:8f:d5:
         39:5c:e8:46:11:f9:79:3f:6c:ef:c8:fd:bd:09:f7:62:e6:b8:
         d6:13:10:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:26:14 2025 by rpki-client