This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76bc385e-05d0-4b6c-a48b-d5ca6a29b110.roa
File:                     76bc385e-05d0-4b6c-a48b-d5ca6a29b110.roa (raw, json)
Hash identifier:          DkGN++IwzmoIJ0f8Uu93uvgk+Imj9ty6gZdke82F+Uo=
Subject key identifier:   8C:4C:90:02:6B:1B:D9:A1:05:A8:B2:AF:E1:6A:DA:AA:51:FF:CA:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35D945ED395F329ACB1F1919BB3E81C507DDAC93
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76bc385e-05d0-4b6c-a48b-d5ca6a29b110.roa
Signing time:             Sat 29 Nov 2025 00:10:36 +0000
ROA not before:           Sat 29 Nov 2025 00:10:36 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d9:45:ed:39:5f:32:9a:cb:1f:19:19:bb:3e:81:c5:07:dd:ac:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 29 00:10:36 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=3b95c7e2556558ec6adbb553296c2b1ea61b9118130e933ae521262407ec7c65, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:e2:bf:bf:a8:63:fe:00:91:a6:6f:7d:da:
                    67:83:51:c0:23:3b:e8:a6:1c:1c:45:5e:23:40:30:
                    c5:03:8e:07:f2:c3:da:f0:c5:4d:de:2f:fa:7d:93:
                    be:b4:96:aa:3a:31:00:84:fa:cf:a3:8e:2b:bc:1a:
                    f9:a2:f9:79:a2:68:61:22:ff:ff:03:74:60:f1:e2:
                    b4:94:64:96:3d:42:d7:d7:e2:4e:be:20:56:40:de:
                    b7:95:e1:92:93:6b:2a:22:74:18:5a:a0:07:01:05:
                    58:c7:f0:84:dc:bc:32:0a:7e:2c:61:8c:b1:5f:31:
                    2d:f0:26:1e:79:a6:ac:bc:0e:af:1e:0d:0f:c8:ad:
                    42:fd:27:c0:f8:15:f5:a0:f9:56:04:a7:68:b3:5c:
                    4f:20:ad:a6:bf:67:85:53:62:f1:57:e9:e1:15:63:
                    5e:be:7b:e1:a2:f0:75:a3:e6:1c:62:aa:96:62:a9:
                    05:8c:c6:2f:7c:b3:46:47:df:23:4c:8f:05:e8:c1:
                    4e:04:d0:fb:9e:5c:05:47:b0:13:dd:9a:9b:77:34:
                    26:70:2e:88:20:64:f5:ae:59:85:f1:7b:dc:01:fa:
                    62:73:12:ac:2b:51:9a:de:5b:37:eb:79:a3:76:3b:
                    85:cc:9f:cb:de:7c:17:32:80:13:b3:f6:39:22:08:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:90:02:6B:1B:D9:A1:05:A8:B2:AF:E1:6A:DA:AA:51:FF:CA:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76bc385e-05d0-4b6c-a48b-d5ca6a29b110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:c1:96:c1:39:4d:80:de:25:4b:60:07:13:fc:7e:dd:fc:
         69:38:c1:1d:6b:44:9e:d4:c2:d5:85:81:ba:1b:9a:ee:bd:c1:
         bc:35:84:35:f6:43:0b:f7:d4:30:73:c4:8e:82:24:09:69:fe:
         dd:80:2e:a5:85:4a:f6:b4:74:7f:12:72:4b:5f:e5:80:23:75:
         d3:19:51:86:3f:f1:cf:6a:a7:29:aa:8d:dc:79:32:c5:63:1a:
         49:1b:fb:23:74:c9:4f:88:ed:53:ff:ef:bd:16:50:8d:72:dd:
         a9:3f:09:54:67:b9:92:0b:bf:30:86:f5:e6:25:29:98:80:05:
         b5:56:c7:19:01:2a:51:ea:71:cc:e4:65:27:71:06:a1:13:a4:
         2d:fa:52:bb:fa:05:07:d3:2a:3c:b1:ce:5f:5a:be:31:31:cb:
         e0:fa:99:30:16:74:10:a7:47:57:6d:e3:42:f2:dc:82:2c:8c:
         48:85:0a:8d:66:8b:58:c5:00:ce:28:cd:78:04:91:dc:e8:1d:
         ba:57:24:94:8d:4a:c0:4a:63:fc:2b:e6:7b:17:87:fe:39:96:
         63:cf:48:68:c5:06:0e:83:26:06:e9:eb:a7:8c:d1:e4:0b:35:
         f8:d9:d5:93:46:3a:1a:be:13:ae:0b:8a:5a:9b:6c:93:de:9d:
         84:8c:f0:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:41 2025 by rpki-client