This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76edce0f-a3b7-48c0-8e7e-ac02e387fb12.roa
File:                     76edce0f-a3b7-48c0-8e7e-ac02e387fb12.roa (raw, json)
Hash identifier:          /QIukczc8SwEoJ7dFXdiiwFWslwFF8E/wodtFm6DpA8=
Subject key identifier:   FE:8D:D4:29:ED:A2:4D:A8:B3:35:53:84:88:F6:51:99:E8:08:2F:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5BAB17C6879066D4D41BE938A1A647B75C6A31F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76edce0f-a3b7-48c0-8e7e-ac02e387fb12.roa
Signing time:             Sun 23 Nov 2025 01:00:07 +0000
ROA not before:           Sun 23 Nov 2025 01:00:07 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:40c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ab:17:c6:87:90:66:d4:d4:1b:e9:38:a1:a6:47:b7:5c:6a:31:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 01:00:07 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=0ed36946ba6e6708550e84d8e15429d10dd23c1a3d6200c2d7434f1d801058e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:48:3a:20:c3:18:1a:5a:99:a8:fc:89:1c:
                    50:d6:b6:1f:54:fb:11:47:02:59:c0:26:2b:d2:fd:
                    80:9b:df:74:81:42:c9:9c:41:96:4b:2f:93:ba:43:
                    5e:40:7e:44:15:27:54:c5:1b:bc:20:db:57:9b:ab:
                    13:c3:fc:a7:13:e1:e9:9f:73:3e:a4:78:7f:57:d3:
                    8f:e0:b1:4b:d6:e9:3f:96:4f:57:39:09:56:03:cd:
                    62:6d:8e:04:3f:2e:9d:96:19:c2:6a:79:8e:af:99:
                    e7:66:10:17:70:a5:84:74:9f:20:be:42:91:77:70:
                    e0:6e:88:5d:74:48:b5:a2:3f:ae:46:78:94:d6:6f:
                    d0:6d:9e:ff:e1:76:02:ed:70:08:4d:cd:7a:4a:c0:
                    ce:e8:0d:70:f0:03:f1:a9:d6:2b:1e:ea:4c:c9:ed:
                    f3:8d:33:1d:e3:a8:43:b5:aa:e8:96:09:88:50:b9:
                    ff:ea:62:fd:7f:da:31:08:07:03:f7:1c:bd:b7:56:
                    93:3d:98:ec:15:7c:66:8f:4e:d9:29:ee:51:ce:cc:
                    5d:61:15:c9:ba:91:f2:4e:1e:ad:d9:f4:9a:ce:7d:
                    9d:13:be:90:7b:09:90:0f:da:79:d7:ee:f1:8d:7c:
                    81:ca:f5:85:18:63:ec:08:13:83:33:05:b2:6b:0b:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:D4:29:ED:A2:4D:A8:B3:35:53:84:88:F6:51:99:E8:08:2F:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76edce0f-a3b7-48c0-8e7e-ac02e387fb12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:40c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         70:83:9e:5d:78:12:b5:17:74:8a:cf:62:a2:9b:ed:b6:39:1b:
         92:17:c1:58:89:d7:65:97:18:f3:03:5f:ef:1c:e1:cd:ab:da:
         1d:51:d8:df:8e:e6:fa:cf:6b:49:97:36:c7:9c:bc:c5:cb:0c:
         14:2d:fc:25:c3:64:b2:cf:17:36:ed:1d:9a:6c:88:94:c5:c4:
         3f:16:e5:9a:7e:59:23:e0:1e:d6:9a:e9:1c:70:65:e8:a9:96:
         36:34:d6:21:68:4c:29:37:73:84:b6:c2:fe:03:56:1b:66:9b:
         82:aa:39:8d:5d:fc:e1:2d:cf:d1:f2:83:eb:14:b0:f1:f1:1b:
         23:ae:b0:18:fe:00:bb:45:45:a3:12:e4:3a:fb:e1:da:bf:74:
         64:b9:af:c8:1e:2d:b0:40:11:0e:cc:9b:db:ac:59:05:7f:b4:
         f3:db:9a:27:ff:8c:0d:53:95:05:13:b1:72:d6:21:2f:e0:3f:
         9a:a7:a6:6d:d2:67:d1:02:9e:ce:01:c7:f4:df:53:8c:78:97:
         74:01:35:60:fb:ec:9e:56:68:fe:da:16:87:09:19:0b:88:8f:
         a8:3a:85:9b:1e:2f:a9:bd:78:46:9f:0c:6b:19:ff:87:2b:21:
         db:c6:ee:59:ce:08:7c:b8:b9:f8:3b:ff:bc:02:d3:49:86:29:
         dc:3b:51:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:04:37 2025 by rpki-client