This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ebb896a-e109-4475-8163-601351e497b3.roa
File:                     7ebb896a-e109-4475-8163-601351e497b3.roa (raw, json)
Hash identifier:          kTjG9HSFUpYjEg6mm4nV602W6hpci12TaNdU1YoqZa8=
Subject key identifier:   D8:C7:4D:4D:72:50:CC:B8:79:B1:6F:B1:23:48:F8:FA:39:07:65:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       101ECA39B531E2F892619259B4B3359DE50FA9E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ebb896a-e109-4475-8163-601351e497b3.roa
Signing time:             Tue 25 Nov 2025 00:50:58 +0000
ROA not before:           Tue 25 Nov 2025 00:50:58 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffe:ec00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1e:ca:39:b5:31:e2:f8:92:61:92:59:b4:b3:35:9d:e5:0f:a9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:50:58 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=ba9bb08bb6767e15f7f8ea79f41955e6af4768bb9614b1d36dbe68374c82fc87, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:db:2e:13:7d:4d:d3:b9:1d:48:10:03:20:
                    e6:0e:eb:d0:0d:46:95:29:c6:11:5b:1c:4b:ed:4d:
                    3c:ac:e5:31:bd:9f:56:f9:e1:3b:22:7a:a8:36:5c:
                    da:b6:64:d5:04:39:e0:2e:93:43:bf:7e:15:83:4f:
                    79:70:77:f3:48:ae:84:d0:6c:6c:91:48:a5:54:bc:
                    64:49:45:76:1c:cc:cd:41:f0:d4:32:29:d4:7c:0d:
                    64:de:ed:b7:39:83:74:18:5c:53:d9:a0:7f:a1:47:
                    fe:eb:50:4c:93:9d:16:b1:77:e6:98:cf:f1:94:14:
                    ae:c8:5d:8f:8c:b3:89:86:5e:c2:c2:0d:50:72:59:
                    3e:f6:90:db:57:ec:ec:c1:b4:b4:bf:65:48:2c:2e:
                    a0:68:b9:92:4e:d7:c9:ba:fe:65:79:1d:86:1a:d1:
                    1c:17:89:dc:c9:25:76:24:c2:0e:6b:3b:78:75:7b:
                    3e:30:35:a6:c5:a1:45:c6:8d:53:ba:10:53:36:a7:
                    23:4b:f5:6f:56:ff:fe:3b:04:32:8e:b3:7e:b4:81:
                    91:a9:bd:1c:1c:b3:a0:b4:70:ff:7b:18:df:b8:de:
                    a0:25:9c:d6:1d:3f:8b:4e:88:e1:a7:c5:5e:2b:3e:
                    87:14:f7:6c:6b:e5:b5:3b:41:bb:6a:4b:e5:4e:90:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C7:4D:4D:72:50:CC:B8:79:B1:6F:B1:23:48:F8:FA:39:07:65:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ebb896a-e109-4475-8163-601351e497b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffe:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:65:33:70:a0:40:2d:ee:67:2e:97:c4:80:5a:04:c0:d8:be:
         7b:87:3c:cc:cc:23:39:d2:de:23:5f:f1:f4:d3:78:5c:41:a1:
         26:a2:92:ab:af:64:d1:4e:33:0d:db:51:fc:9b:a1:a9:56:19:
         a5:fb:96:a2:e2:da:3a:b2:b2:c3:6e:48:6d:2b:06:09:96:83:
         35:7b:7f:6b:a0:b8:25:0f:2e:86:69:a4:77:e9:07:3d:60:3b:
         88:85:b5:e8:79:28:47:17:3e:13:eb:ee:4b:7b:1e:bf:d9:d1:
         18:78:bf:3d:54:aa:07:68:cd:65:43:ba:ea:97:66:c7:20:b5:
         32:20:1d:a9:f3:c1:41:4c:d8:c1:2e:85:6a:1a:24:92:a1:c0:
         c0:69:31:6a:04:67:8a:5d:3b:1b:28:80:db:cb:a0:68:b7:40:
         eb:80:24:be:60:21:df:e2:66:bf:84:7a:92:16:17:f9:22:7b:
         2f:3b:7b:34:9d:e1:86:4d:a6:f1:79:66:16:82:18:08:9b:a5:
         cb:4d:7f:83:e2:69:30:e7:81:31:4e:74:20:39:d2:e6:83:77:
         ab:88:e2:b3:18:86:3f:1c:e1:2b:7b:bd:b1:60:03:21:f0:e3:
         15:30:63:87:bc:80:d7:e2:2f:ca:ad:ab:95:7d:80:23:1f:15:
         d0:cf:84:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:26 2025 by rpki-client