This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa
File:                     7c163596-3504-4d1c-ac66-c039ee66cb59.roa (raw, json)
Hash identifier:          U6lkOulrOa0+BxebjgZAhFOgPoP3qf2wE0qQsOI0ke4=
Subject key identifier:   38:7E:CD:0A:FE:73:63:89:82:4A:4A:B9:32:22:6A:97:1D:BB:A3:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BEB3FFDD2A6B84D428F5E6514B382E68D81C69E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa
Signing time:             Thu 20 Nov 2025 00:31:30 +0000
ROA not before:           Thu 20 Nov 2025 00:31:30 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2e:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:eb:3f:fd:d2:a6:b8:4d:42:8f:5e:65:14:b3:82:e6:8d:81:c6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:31:30 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=8452b120c0333b1762befde65e443a2a13995f08378fce5329103f93361dda82, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:52:36:31:26:31:fc:2d:ae:cc:9f:3a:c2:
                    02:f1:11:2f:d7:72:c8:89:cd:5c:47:2d:79:a8:25:
                    74:7e:c3:c4:fc:2c:71:b7:d1:09:c3:ec:be:ee:fe:
                    f8:6e:3a:2b:a4:74:07:62:52:53:99:5f:86:f2:54:
                    2c:23:9e:b6:d7:13:2c:e4:a4:11:ca:bb:7d:bc:0d:
                    7f:18:44:56:2a:8f:c0:12:08:45:b9:7f:fa:f2:06:
                    61:b8:49:79:83:fb:00:07:6f:b7:0b:56:16:36:a2:
                    29:c8:30:e6:72:f6:f6:76:f4:10:6a:f2:67:d7:a5:
                    ba:33:17:b4:22:1d:d6:14:3b:6a:f3:fb:78:33:c2:
                    fc:1c:4f:de:c5:d7:11:76:04:83:62:35:66:04:4f:
                    15:b3:e9:ba:50:b3:a1:6b:aa:a8:6a:ea:09:8b:4b:
                    42:04:f2:48:b8:bb:f0:04:3f:64:63:68:03:91:23:
                    b2:9c:25:ce:5f:9e:53:53:cc:b8:b9:71:f0:25:55:
                    34:5e:55:1d:4e:53:b8:e2:b0:d8:27:23:b6:95:66:
                    d9:d1:90:2d:fa:ce:75:7a:31:5a:c1:17:e0:20:15:
                    5f:4c:b2:6f:e4:e4:62:b3:14:00:4a:02:3e:1d:23:
                    7a:6b:24:03:84:43:c0:d4:d0:fe:da:68:0e:5b:8b:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:CD:0A:FE:73:63:89:82:4A:4A:B9:32:22:6A:97:1D:BB:A3:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2e:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cd:a5:ad:cb:30:d2:6b:7b:4c:f7:95:aa:0a:0d:22:b5:2c:56:
         69:d0:c4:30:db:45:09:21:a4:48:86:12:dd:51:a5:4c:ec:51:
         25:46:de:8b:e2:0c:3f:63:7a:0e:22:ff:e1:63:73:c0:68:e8:
         08:d6:6f:53:51:82:17:be:fe:d8:12:1a:32:82:58:db:b1:0c:
         89:18:10:fb:5f:ca:dd:f5:f6:df:3d:e4:f9:ac:df:9f:cd:ca:
         5c:5a:9c:b1:0b:77:7c:73:bd:f9:4d:a5:65:cc:7a:b5:0f:cc:
         10:03:b8:6b:2a:7a:0a:1d:cf:93:91:42:6a:ac:bb:e3:89:ba:
         8c:5d:e5:1e:da:08:75:b8:19:ca:7f:39:a1:0e:a3:48:e7:86:
         c3:cf:21:7e:fd:36:af:d3:ae:c0:f4:3b:af:b4:bf:56:28:bb:
         d3:b0:0c:8b:bb:94:f9:6e:88:e4:ad:c0:b9:6e:94:4c:f4:c1:
         32:ad:06:40:03:2f:4d:2a:2f:53:c0:18:87:c1:a7:c9:46:6e:
         c7:fc:70:14:37:64:28:05:bc:78:fe:f8:1b:de:f8:46:33:9a:
         91:fe:95:f0:98:e2:65:94:f0:e4:88:0d:e3:46:0f:f0:76:75:
         bd:47:fa:85:80:4d:72:5a:63:71:4b:2e:44:a0:88:01:27:ae:
         6a:2d:2d:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:39:03 2025 by rpki-client