This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa
File:                     89de9e52-4387-4a27-8ef0-f21212663bb4.roa (raw, json)
Hash identifier:          5erwEeWl3nVT1cbPS11+G0dNKtvXxGpXNMy/4PVafUo=
Subject key identifier:   C6:23:F1:C0:C0:C1:4E:39:07:AE:0A:F8:FA:5C:41:E9:24:7F:14:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       698F8A8BEEDDE079B98C437FD8789C6CDF03310D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa
Signing time:             Wed 12 Nov 2025 01:41:29 +0000
ROA not before:           Wed 12 Nov 2025 01:41:29 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f15::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8f:8a:8b:ee:dd:e0:79:b9:8c:43:7f:d8:78:9c:6c:df:03:31:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:41:29 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=aa4bae9f4c975bd8849b3d2ee999dcf066ae77c2f31498a3274440d01cad8a27, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:cb:96:27:d8:a0:a4:dc:59:a1:9c:33:5f:
                    3a:50:ef:bf:1b:27:00:82:36:d7:16:29:2d:74:f9:
                    5e:e1:b2:cf:20:e6:fa:6f:91:88:97:06:bc:23:99:
                    9f:2c:f2:91:c5:fd:6a:6b:52:b1:17:4f:1e:eb:5d:
                    09:fe:75:d0:8c:c8:7b:8e:7d:59:27:d5:ba:a1:5f:
                    e8:1f:f1:96:6a:5b:bd:0a:df:9b:42:88:0a:82:ab:
                    b9:59:70:12:d3:04:d8:65:79:d0:66:9c:89:10:63:
                    63:29:83:5d:17:e9:85:d7:a7:1d:d4:ef:b7:76:5e:
                    9a:de:c6:16:38:30:9a:36:32:a1:fc:59:8c:61:b3:
                    6f:f2:25:37:62:46:cf:52:0d:80:e7:f7:a4:33:dc:
                    f8:72:e1:78:9a:3a:1e:4b:0b:b3:69:8a:50:ef:d0:
                    09:0c:d2:2e:bf:d0:e7:41:20:b5:0e:2e:81:05:20:
                    95:b6:b3:21:84:42:6a:50:3f:43:8e:ee:5f:7d:7e:
                    40:22:fb:3b:3c:5e:9b:d2:52:2b:2b:a4:6d:b5:7f:
                    6a:a0:fa:35:b6:46:e1:64:c8:98:33:91:68:b6:36:
                    d0:50:2b:99:d5:62:25:1c:81:d2:ba:3b:ad:33:5e:
                    e4:bf:d9:77:a4:e9:0b:f9:b1:1c:69:8f:01:03:90:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:23:F1:C0:C0:C1:4E:39:07:AE:0A:F8:FA:5C:41:E9:24:7F:14:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:e1:d8:50:35:ba:74:93:a3:a1:45:ab:ee:15:4d:7c:e4:10:
         3f:7b:3e:7f:be:0a:cd:87:6c:9e:a7:fe:92:30:b0:74:ba:4c:
         2d:6b:be:54:e9:00:df:04:60:35:64:f7:e8:6b:79:d2:ba:0d:
         a9:45:30:04:b0:44:5e:b0:cb:1f:60:1e:12:52:13:6f:c3:d9:
         86:8f:12:4e:e1:04:0a:1c:fc:8f:4b:c7:2f:48:1e:d7:f9:1c:
         ed:8e:c8:d4:91:37:27:2f:71:50:c6:3e:47:a5:b6:a9:2b:cc:
         a1:0c:e2:9d:7c:be:bc:f8:95:70:81:ae:eb:d6:b2:f6:49:02:
         ad:4e:ff:e4:7f:40:cc:11:eb:6b:b9:48:ff:f2:84:ba:88:54:
         ba:a4:58:21:7a:a3:93:4a:c1:e4:40:4e:3f:46:11:2f:60:47:
         69:bc:e9:e6:b6:ae:6d:c7:8f:8d:29:a4:df:f6:24:50:23:ec:
         32:13:f4:00:13:00:cb:ea:70:0b:cc:46:c3:0c:72:24:8b:ad:
         08:e9:3e:5e:f0:4e:c4:b8:60:c9:ab:fd:94:9e:3d:83:4d:4c:
         f5:ef:56:11:07:f4:c7:5d:3d:cd:69:f1:b3:b8:48:8c:f0:17:
         cb:84:c8:60:90:5f:92:8e:fb:5d:51:60:40:aa:1c:9e:b7:3e:
         e4:e0:dd:43
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUaY+Ki+7d4Hm5jEN/2HicbN8DMQ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDE0MTI5WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYTRiYWU5ZjRjOTc1YmQ4ODQ5YjNkMmVlOTk5ZGNmMDY2
YWU3N2MyZjMxNDk4YTMyNzQ0NDBkMDFjYWQ4YTI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCf5MuWJ9igpNxZoZwzXzpQ778bJwCCNtcWKS10+V7hss8g
5vpvkYiXBrwjmZ8s8pHF/WprUrEXTx7rXQn+ddCMyHuOfVkn1bqhX+gf8ZZqW70K
35tCiAqCq7lZcBLTBNhledBmnIkQY2Mpg10X6YXXpx3U77d2XprexhY4MJo2MqH8
WYxhs2/yJTdiRs9SDYDn96Qz3Phy4XiaOh5LC7NpilDv0AkM0i6/0OdBILUOLoEF
IJW2syGEQmpQP0OO7l99fkAi+zs8XpvSUisrpG21f2qg+jW2RuFkyJgzkWi2NtBQ
K5nVYiUcgdK6O60zXuS/2Xek6Qv5sRxpjwEDkF2pAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUxiPxwMDBTjkHrgr4+lxB6SR/FLUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg5ZGU5ZTUyLTQzODctNGEyNy04ZWYwLWYyMTIxMjY2M2JiNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8VADANBgkqhkiG9w0BAQsFAAOCAQEABeHYUDW6dJOjoUWr7hVNfOQQ
P3s+f74KzYdsnqf+kjCwdLpMLWu+VOkA3wRgNWT36Gt50roNqUUwBLBEXrDLH2Ae
ElITb8PZho8STuEEChz8j0vHL0ge1/kc7Y7I1JE3Jy9xUMY+R6W2qSvMoQzinXy+
vPiVcIGu69ay9kkCrU7/5H9AzBHra7lI//KEuohUuqRYIXqjk0rB5EBOP0YRL2BH
abzp5raubcePjSmk3/YkUCPsMhP0ABMAy+pwC8xGwwxyJIutCOk+XvBOxLhgyav9
lJ49g01M9e9WEQf0x109zWnxs7hIjPAXy4TIYJBfko77XVFgQKocnrc+5ODdQw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:05:28 2025 by rpki-client