This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa
File:                     7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa (raw, json)
Hash identifier:          otJRX/N+F7O37XqNkda8KHHFeiUBMc93Hr6uE1JqxNk=
Subject key identifier:   58:7E:E0:5D:3C:8F:C8:EE:86:12:AE:6F:39:D3:B0:68:73:C9:67:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2AC1EDA9F5D3E40D7122FAB8BA5668A8DF1105E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa
Signing time:             Sat 06 Dec 2025 00:50:12 +0000
ROA not before:           Sat 06 Dec 2025 00:50:12 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f38:20c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c1:ed:a9:f5:d3:e4:0d:71:22:fa:b8:ba:56:68:a8:df:11:05:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 00:50:12 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=e08e30fffd86d513f04e701afbd6cf684707baebffd129fcdbed343aeadad2cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:2f:bf:15:34:76:a2:f4:48:43:19:58:96:
                    ee:3f:92:f8:cd:41:7e:b6:51:4a:e9:de:61:a3:37:
                    50:b6:be:c4:7f:26:aa:49:0a:46:f2:b9:ac:20:b4:
                    7a:63:f2:23:56:d5:b6:e9:f4:ef:f1:46:98:bd:55:
                    7b:c1:ea:98:f6:ff:d2:91:51:c0:cc:6b:1d:d6:a5:
                    bf:66:4c:0f:fc:ae:d5:c9:c9:e1:cd:34:78:20:26:
                    b0:e5:2e:61:c4:b0:d1:4f:b6:2a:89:01:80:13:2a:
                    2d:24:35:48:7c:19:16:5a:d7:1f:a4:c6:00:e6:04:
                    40:04:ca:f2:04:ac:a2:72:e5:85:c7:57:6a:da:60:
                    b9:ac:88:ed:cc:aa:51:87:1c:4a:c7:2b:8d:06:b9:
                    86:d1:05:14:90:a6:16:df:ac:36:6c:d2:b7:d1:bb:
                    fd:f7:1e:99:2e:fe:1c:95:22:a5:af:61:57:d1:53:
                    b9:a5:f6:a1:c9:84:81:69:0c:51:db:ba:a4:ba:41:
                    23:c5:02:9d:cf:ab:0e:c0:c7:6b:2c:4c:c1:99:6f:
                    d4:62:8a:c6:57:d2:ca:44:e2:a6:49:9a:9d:72:b5:
                    21:07:0b:5d:5b:24:3f:64:c8:21:b9:ab:b4:7f:e0:
                    4a:e9:ce:18:6f:2e:e6:65:e4:2b:6a:8e:93:bd:9a:
                    30:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7E:E0:5D:3C:8F:C8:EE:86:12:AE:6F:39:D3:B0:68:73:C9:67:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:3f:70:e3:f8:dc:ad:9c:0d:87:06:f3:2e:75:47:d8:60:1a:
         7d:43:ab:7b:a7:ef:5d:de:93:a1:17:74:ba:0e:af:23:bc:5e:
         e6:7f:c2:ea:dd:d7:0c:b1:99:08:2e:f0:48:19:6f:ca:6b:f6:
         40:dd:39:37:43:f6:5e:79:b1:81:0c:9f:11:54:f0:5d:bb:67:
         08:fa:87:78:0c:83:de:58:ce:d7:61:95:8c:7d:a0:81:8d:e8:
         2a:1a:be:5e:a8:af:40:65:67:c4:da:ea:8e:b5:0d:d4:be:64:
         a8:1b:1f:7d:a0:f7:bb:79:5a:eb:11:1c:20:09:75:cd:a9:49:
         86:6c:da:6b:b4:75:61:50:70:af:3e:ef:2d:f6:62:e4:2a:ed:
         f0:be:81:69:46:5b:34:18:fb:b2:d0:97:c3:c4:ba:67:09:b9:
         cc:9b:e6:94:5a:59:b0:c3:a1:94:7d:33:60:bb:ff:ce:b9:80:
         0f:0d:10:19:47:be:ed:0a:09:93:41:22:02:49:2b:53:28:d5:
         e7:1c:11:8c:c0:16:02:6b:6c:b5:b0:5f:b4:ed:82:5c:c7:c8:
         24:f3:29:26:a8:69:e4:4d:c8:c9:28:de:e9:3f:ef:a7:30:b1:
         5e:c1:c8:6d:38:4e:49:91:05:e0:ce:75:2a:47:c1:2b:f0:b2:
         c9:c3:e8:b6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKsHtqfXT5A1xIvq4ulZoqN8RBeUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDA1MDEyWhcNMjYwMzA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMDhlMzBmZmZkODZkNTEzZjA0ZTcwMWFmYmQ2Y2Y2ODQ3
MDdiYWViZmZkMTI5ZmNkYmVkMzQzYWVhZGFkMmNjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPNi+/FTR2ovRIQxlYlu4/kvjNQX62UUrp3mGjN1C2vsR/
JqpJCkbyuawgtHpj8iNW1bbp9O/xRpi9VXvB6pj2/9KRUcDMax3Wpb9mTA/8rtXJ
yeHNNHggJrDlLmHEsNFPtiqJAYATKi0kNUh8GRZa1x+kxgDmBEAEyvIErKJy5YXH
V2raYLmsiO3MqlGHHErHK40GuYbRBRSQphbfrDZs0rfRu/33Hpku/hyVIqWvYVfR
U7ml9qHJhIFpDFHbuqS6QSPFAp3Pqw7Ax2ssTMGZb9RiisZX0spE4qZJmp1ytSEH
C11bJD9kyCG5q7R/4ErpzhhvLuZl5CtqjpO9mjCZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUWH7gXTyPyO6GEq5vOdOwaHPJZ6kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdjNzg0MDc4LWI5YWMtNDBiMy1hOWI3LWY3N2M2MTRiZThmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84IMAwDQYJKoZIhvcNAQELBQADggEBAAY/cOP43K2cDYcG8y51R9hg
Gn1Dq3un713ek6EXdLoOryO8XuZ/wurd1wyxmQgu8EgZb8pr9kDdOTdD9l55sYEM
nxFU8F27Zwj6h3gMg95YztdhlYx9oIGN6Coavl6or0BlZ8Ta6o61DdS+ZKgbH32g
97t5WusRHCAJdc2pSYZs2mu0dWFQcK8+7y32YuQq7fC+gWlGWzQY+7LQl8PEumcJ
ucyb5pRaWbDDoZR9M2C7/865gA8NEBlHvu0KCZNBIgJJK1Mo1eccEYzAFgJrbLWw
X7TtglzHyCTzKSaoaeRNyMko3uk/76cwsV7ByG04TkmRBeDOdSpHwSvwssnD6LY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:36:40 2025 by rpki-client