This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ea082-f64c-4325-91ed-bd9c47f259c2.roa
File:                     6c4ea082-f64c-4325-91ed-bd9c47f259c2.roa (raw, json)
Hash identifier:          XtdlnqYZT/t84W797L1rcbdoMXn2xmQmH35Jh2Sxt4A=
Subject key identifier:   14:2F:F3:00:74:B8:7A:C2:31:56:88:51:2A:56:44:BE:28:A0:49:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F44A5950B06B2835F915BC3175BA215C81810
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ea082-f64c-4325-91ed-bd9c47f259c2.roa
Signing time:             Sat 15 Nov 2025 00:50:08 +0000
ROA not before:           Sat 15 Nov 2025 00:50:08 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16:c000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:44:a5:95:0b:06:b2:83:5f:91:5b:c3:17:5b:a2:15:c8:18:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:50:08 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=1e5b4e68d74980585ea396e20039e53855fcab04ff5643d3191500fd96c2325a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:f5:c5:c7:8e:ec:24:5d:eb:90:2e:c0:bb:
                    8e:b7:91:af:80:c8:df:af:65:5c:27:f4:e4:91:7d:
                    d2:9b:03:03:bf:fb:4a:06:c9:77:8d:b5:d5:ca:f3:
                    68:99:d9:0d:49:d4:b4:24:02:62:dc:0b:09:c7:e1:
                    d9:64:a4:ad:22:47:c9:72:78:82:08:a9:51:e7:9c:
                    11:ca:57:3a:cb:ef:a2:d2:85:87:a9:84:88:c0:c6:
                    31:f3:41:7b:dc:9a:66:15:b8:42:3e:91:30:73:89:
                    36:09:85:6a:7e:05:2f:4b:94:06:14:c3:21:1c:73:
                    76:f0:e8:1f:8e:80:0d:c9:d4:01:96:db:03:aa:72:
                    5e:fa:dc:b3:3e:d8:9b:77:e5:51:9e:36:c2:ef:4c:
                    60:1c:b4:d3:2a:5b:d5:8f:24:02:91:fd:45:68:a7:
                    41:23:47:f1:2b:16:71:59:5f:d0:7f:2e:8c:9c:6a:
                    15:34:23:20:c1:8e:73:b2:3c:21:9a:08:19:2c:76:
                    af:81:0a:fa:44:d3:93:5d:07:e8:70:8a:22:bb:3c:
                    b2:e5:fb:eb:ba:ce:01:b8:63:0f:4c:68:09:b6:97:
                    b1:ac:9e:16:d4:ea:ba:60:21:a9:df:55:40:7c:90:
                    b8:56:52:ff:33:a6:ad:f3:1f:3b:d8:82:3b:bc:ce:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2F:F3:00:74:B8:7A:C2:31:56:88:51:2A:56:44:BE:28:A0:49:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ea082-f64c-4325-91ed-bd9c47f259c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         b2:d5:05:f7:ac:08:83:e8:52:34:95:9a:ae:a2:69:b7:66:74:
         80:b1:02:09:b5:d4:e8:11:a3:e3:53:61:ad:d6:65:fc:30:cc:
         6b:15:7c:88:be:cb:6b:c8:57:ae:73:16:d9:79:5a:a9:a6:52:
         42:5f:92:fb:15:10:6a:ce:a6:1e:45:3d:97:83:3b:18:7d:b6:
         cd:a5:c7:12:42:47:4b:fb:dd:17:94:32:c1:47:32:1c:a3:3b:
         e0:7b:a6:13:b0:a0:83:52:74:48:0b:97:fc:8f:30:d7:34:c4:
         e1:47:56:85:ac:c1:d8:bd:f6:f6:97:af:c7:5a:9a:51:74:e0:
         ed:e3:76:6e:b8:28:3c:6b:26:90:35:ee:da:09:0f:42:f2:22:
         fa:94:e6:6e:71:3f:13:f4:fb:f3:01:b8:70:0e:c0:f2:35:82:
         e8:73:35:f6:da:c1:86:d7:01:89:9f:7f:4d:8e:2b:3f:be:3d:
         d0:11:03:1c:fd:ab:e9:50:a3:1b:0e:f2:ac:ff:df:4b:f2:28:
         3e:e2:e4:9b:c1:fb:5e:be:fa:55:e5:23:43:ad:c7:58:14:1a:
         09:3c:e2:74:11:d4:99:75:94:fc:cb:3a:cc:10:f3:8a:2e:6e:
         12:f7:3c:34:d9:57:cb:69:b9:3b:86:70:de:7b:28:39:7e:e2:
         e2:db:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:08:38 2025 by rpki-client