This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c25ef44-3167-44c2-ac44-ade2a435e00c.roa
File:                     6c25ef44-3167-44c2-ac44-ade2a435e00c.roa (raw, json)
Hash identifier:          jdD0ZedVkLL//YxcOGBrVU48KJByXId9HUD0ZG/FkoM=
Subject key identifier:   B4:FF:1A:5F:51:19:3D:72:3F:BB:1D:E1:DB:EB:2C:B0:ED:F8:FC:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B7C8CFA7D275154E4C645F996797F187298D967
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c25ef44-3167-44c2-ac44-ade2a435e00c.roa
Signing time:             Sat 15 Nov 2025 00:11:03 +0000
ROA not before:           Sat 15 Nov 2025 00:11:03 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1a:c000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7c:8c:fa:7d:27:51:54:e4:c6:45:f9:96:79:7f:18:72:98:d9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:11:03 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=74feae2d84fbe0e85e2d9c07a9849c2caec9a8eb656542d3e21bec8941601973, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:8c:7c:74:3a:32:03:bf:3f:c6:0e:97:bd:
                    98:2c:c7:9e:a0:4b:6b:34:ab:02:6e:4c:cc:7a:25:
                    32:ec:30:60:60:70:27:3c:d4:14:7f:6c:2f:ed:8e:
                    12:b6:40:7b:77:16:bb:a7:2b:b7:6c:ea:0b:73:77:
                    1f:53:eb:f3:85:02:58:ce:ca:94:4c:65:aa:5e:76:
                    46:7d:6a:f0:9e:24:a0:d6:9a:5e:b5:1d:1a:a1:3c:
                    9f:c9:cf:f6:92:a4:2f:5c:a0:3d:31:3c:9c:0b:1e:
                    38:97:29:ff:f9:6b:29:01:56:55:ef:04:97:af:3d:
                    d4:a9:b4:59:e4:01:49:1c:13:76:f0:07:1c:61:26:
                    01:3d:50:ea:ce:3b:86:69:58:d1:ab:aa:97:10:d0:
                    68:a6:c0:f3:7a:6d:8a:90:af:17:15:3f:e0:3b:18:
                    8e:a3:a3:a5:1c:9c:13:69:c2:22:7f:89:cc:a7:8a:
                    f7:a9:b6:bd:c1:80:53:4f:8e:97:cd:7e:cc:a3:32:
                    5a:c5:1f:7b:75:0c:02:c1:76:26:ad:9e:8d:b9:31:
                    3d:a8:e9:19:71:82:0f:ad:04:59:d8:c6:60:a6:f2:
                    71:8c:d5:10:ab:5c:e4:92:26:ac:45:44:26:d3:58:
                    39:4f:1e:d0:fb:8d:5b:bd:9c:b6:d8:70:62:29:2f:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FF:1A:5F:51:19:3D:72:3F:BB:1D:E1:DB:EB:2C:B0:ED:F8:FC:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c25ef44-3167-44c2-ac44-ade2a435e00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         86:66:86:c9:7a:33:1d:48:30:37:7e:5a:bc:d5:32:0b:c9:19:
         08:76:23:08:2b:21:ab:d5:1b:a6:39:30:05:f3:df:1d:32:56:
         ec:ea:98:fb:60:f1:04:91:68:55:c1:82:44:76:05:1e:97:90:
         da:12:c8:87:6c:2b:e1:6e:a0:d9:f6:0d:a0:b8:38:3e:3f:5f:
         cb:0f:45:8e:1e:78:be:52:0a:06:01:2b:bb:8b:63:a3:5f:06:
         30:52:c5:bc:68:f4:46:61:e1:09:0f:ce:9c:83:e2:c7:d0:90:
         cf:12:c9:04:f8:fe:8f:c0:8a:a1:dc:2d:e6:d4:d7:f2:a8:7a:
         1b:83:dd:15:ed:1a:77:ff:91:f4:d2:bf:2e:ba:2c:f8:78:28:
         c4:a7:43:bd:ed:da:9d:6e:a6:12:f0:7f:c2:09:ae:c7:a6:35:
         b6:e3:a1:a9:4c:35:28:d1:a1:b3:e5:1f:2b:d9:49:34:ee:a5:
         c2:82:25:45:3d:08:f4:6f:0f:5a:46:ca:03:60:6b:9c:18:0b:
         b1:95:f3:29:96:62:b3:2f:0a:ea:65:97:7c:28:02:e6:7c:ee:
         8d:9f:e2:ce:ed:6d:3c:9d:9b:5b:7c:0d:2b:b2:39:89:6e:0b:
         5f:b0:1e:b0:8c:eb:71:6c:5f:59:ac:2b:a1:82:e0:d5:09:e1:
         61:44:af:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:55:33 2025 by rpki-client