This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a6bf746-3e70-4571-a889-64c235596675.roa
File:                     5a6bf746-3e70-4571-a889-64c235596675.roa (raw, json)
Hash identifier:          1+qjNcqrS8nvXAWvE2Ke1jsOKgtjji6ZgUTGLK2nFFQ=
Subject key identifier:   1E:EC:B5:FB:D2:43:AC:D0:87:90:9E:55:4E:92:D7:2D:43:99:C9:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A95FD974C51AFCD30F62E1CCCBAE56145E1143D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a6bf746-3e70-4571-a889-64c235596675.roa
Signing time:             Wed 03 Dec 2025 01:31:25 +0000
ROA not before:           Wed 03 Dec 2025 01:31:25 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:d800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:95:fd:97:4c:51:af:cd:30:f6:2e:1c:cc:ba:e5:61:45:e1:14:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:31:25 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=915622c6d311f51ee0756df562355c198d42dd2d0486a5c68ed73b7ce8e21b4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:2b:b5:2d:ee:4e:16:33:c1:a5:a2:c4:49:
                    17:e7:3c:01:8e:4d:92:64:91:b5:c6:49:9d:a9:79:
                    58:82:4e:fc:5f:19:b0:15:c7:43:83:b8:b1:7a:29:
                    02:8b:51:fd:91:f9:42:4e:89:b2:45:ed:72:55:d9:
                    a9:69:46:e4:44:97:bf:63:95:bb:bf:2d:77:73:43:
                    e0:4f:a4:4b:27:36:13:18:1b:d9:2c:9f:62:e1:82:
                    04:bc:da:5e:f0:be:0d:67:e1:d1:2e:29:4c:65:58:
                    7b:a3:ff:83:5e:3e:34:ba:8b:2d:53:e4:35:3e:05:
                    13:fb:e9:0e:c4:b3:7c:b8:b4:89:af:99:ac:7f:31:
                    52:63:aa:30:33:11:bc:b1:f4:d9:88:e7:c7:88:0b:
                    3c:31:af:8a:54:eb:23:82:dc:d4:49:9d:32:7e:01:
                    a0:ff:16:2d:f0:46:86:d4:3e:02:13:7d:79:7f:3e:
                    f7:ae:95:6f:0c:68:96:91:52:0e:ea:f7:e9:23:e6:
                    2c:4f:19:e7:75:6b:6c:66:5e:86:a2:52:e1:d7:67:
                    98:14:3e:68:91:f6:68:27:e4:9d:d1:39:ee:3c:44:
                    b7:0c:83:c4:07:06:10:8d:26:75:33:16:21:36:e3:
                    fd:44:bc:f0:6f:d3:4f:db:04:e0:e7:f2:aa:16:9c:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EC:B5:FB:D2:43:AC:D0:87:90:9E:55:4E:92:D7:2D:43:99:C9:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a6bf746-3e70-4571-a889-64c235596675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:87:af:6d:54:d4:79:bc:7b:bf:97:96:8b:f8:07:b8:3e:9e:
         9f:74:5e:95:62:f3:fe:98:8f:45:31:8d:a5:96:c4:16:5b:a4:
         98:1a:dd:1e:27:f3:5a:56:27:99:47:c3:5a:a3:6c:86:85:3f:
         c3:b5:00:1b:ab:34:57:74:01:b4:e4:90:7f:99:b3:6d:c7:4b:
         72:8a:06:cd:05:61:e4:d0:fa:a3:a9:dd:df:8e:0e:de:fd:46:
         40:2f:d6:01:c6:fe:b2:a8:12:db:88:5e:02:8c:ea:29:e2:ba:
         22:bc:51:cb:cb:5d:c8:02:83:02:3f:3b:e9:e8:74:2a:69:93:
         29:b1:05:e8:8a:14:3c:0b:af:81:ae:89:04:5c:39:e5:50:7e:
         ca:ae:fc:9b:58:41:60:84:ff:8e:e0:a3:05:07:03:7a:92:1b:
         17:b3:3d:ae:77:5d:90:40:12:a0:62:cc:77:ea:2b:44:b6:08:
         5b:04:64:9f:a9:60:93:d4:c6:43:78:59:78:ce:78:79:26:b4:
         08:c0:47:d8:1c:c2:f0:93:43:22:c3:56:fd:8b:e4:32:a4:23:
         5f:74:d2:0c:85:1b:1e:e9:cf:1e:28:3a:8d:92:52:2d:d2:88:
         1c:9e:20:ea:37:23:4d:34:42:ed:15:ca:41:c3:a9:db:b3:1f:
         35:ce:ce:0f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUapX9l0xRr80w9i4czLrlYUXhFD0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDEzMTI1WhcNMjYwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MTU2MjJjNmQzMTFmNTFlZTA3NTZkZjU2MjM1NWMxOThk
NDJkZDJkMDQ4NmE1YzY4ZWQ3M2I3Y2U4ZTIxYjRlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1Ziu1Le5OFjPBpaLESRfnPAGOTZJkkbXGSZ2peViCTvxf
GbAVx0ODuLF6KQKLUf2R+UJOibJF7XJV2alpRuREl79jlbu/LXdzQ+BPpEsnNhMY
G9ksn2LhggS82l7wvg1n4dEuKUxlWHuj/4NePjS6iy1T5DU+BRP76Q7Es3y4tImv
max/MVJjqjAzEbyx9NmI58eICzwxr4pU6yOC3NRJnTJ+AaD/Fi3wRobUPgITfXl/
PveulW8MaJaRUg7q9+kj5ixPGed1a2xmXoaiUuHXZ5gUPmiR9mgn5J3ROe48RLcM
g8QHBhCNJnUzFiE24/1EvPBv00/bBODn8qoWnJt1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUHuy1+9JDrNCHkJ5VTpLXLUOZyQYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVhNmJmNzQ2LTNlNzAtNDU3MS1hODg5LTY0YzIzNTU5NjY3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/s2AAwDQYJKoZIhvcNAQELBQADggEBAMyHr21U1Hm8e7+Xlov4B7g+
np90XpVi8/6Yj0UxjaWWxBZbpJga3R4n81pWJ5lHw1qjbIaFP8O1ABurNFd0AbTk
kH+Zs23HS3KKBs0FYeTQ+qOp3d+ODt79RkAv1gHG/rKoEtuIXgKM6iniuiK8UcvL
XcgCgwI/O+nodCppkymxBeiKFDwLr4GuiQRcOeVQfsqu/JtYQWCE/47gowUHA3qS
GxezPa53XZBAEqBizHfqK0S2CFsEZJ+pYJPUxkN4WXjOeHkmtAjAR9gcwvCTQyLD
Vv2L5DKkI1900gyFGx7pzx4oOo2SUi3SiByeIOo3I000Qu0VykHDqduzHzXOzg8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:55 2025 by rpki-client