This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ebb627b-d720-4375-b47a-2400c3db73e9.roa
File:                     8ebb627b-d720-4375-b47a-2400c3db73e9.roa (raw, json)
Hash identifier:          8QXXyr0SJtZ0hhizr8rfq446y3wG7oBqJcLHY5NGkcw=
Subject key identifier:   BC:82:8C:80:C9:78:2A:7C:D1:C6:89:19:4B:8D:31:25:C9:03:B2:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25780E4823A0BA80FC9DE53174BCA5B13E10B4C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ebb627b-d720-4375-b47a-2400c3db73e9.roa
Signing time:             Sat 06 Dec 2025 02:01:48 +0000
ROA not before:           Sat 06 Dec 2025 02:01:48 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:78:0e:48:23:a0:ba:80:fc:9d:e5:31:74:bc:a5:b1:3e:10:b4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 02:01:48 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=e6e21e5b29412c6d1e38af9aec488f50b47d9fd9dd2e669f3ff15b561a91e745, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:a1:b4:0a:8d:ef:46:78:75:9d:dd:28:8b:
                    ea:ef:27:81:bd:c0:7e:91:c0:9b:fc:78:9e:85:9e:
                    5d:33:a5:ca:13:a2:e8:c0:d5:23:b1:00:0d:e9:66:
                    9c:9d:9e:cf:87:90:b9:c5:55:4e:ca:eb:88:3d:72:
                    70:19:6e:91:0d:2d:51:ff:17:99:1b:06:3f:fc:ef:
                    ca:85:af:26:48:ba:6f:74:e7:7e:71:1c:b7:23:31:
                    d4:ea:49:fe:b4:d6:15:ba:dc:fa:8e:68:e3:57:7e:
                    34:72:0c:89:40:78:01:56:e8:d5:f6:7f:d3:02:92:
                    38:28:5f:5b:00:f9:c8:d7:df:72:24:74:f6:6d:9f:
                    df:94:33:31:ed:ca:23:6d:a4:4d:6e:1c:f2:7b:3e:
                    d3:20:2b:c4:89:30:dc:40:29:4a:a5:a0:62:ca:af:
                    94:17:ce:8a:52:e9:37:3f:57:d6:32:a3:a3:be:1f:
                    67:06:da:99:4f:90:c0:36:95:77:07:e2:e9:5a:86:
                    6b:81:66:32:e8:92:04:97:b6:ef:67:22:df:eb:b9:
                    2e:a8:3c:c7:4d:dd:ac:c7:ab:80:cf:5e:7b:4d:ae:
                    ce:87:57:27:4c:f9:59:7b:3e:fe:c6:61:51:43:ef:
                    a3:69:01:6f:62:0d:8e:fd:00:46:6d:03:ee:a8:0f:
                    b4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:82:8C:80:C9:78:2A:7C:D1:C6:89:19:4B:8D:31:25:C9:03:B2:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ebb627b-d720-4375-b47a-2400c3db73e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:a6:3a:3f:f5:a6:6b:8e:1d:ca:c2:cb:f4:5e:11:ce:58:
         e1:35:06:87:be:d6:2d:ea:2b:c6:94:0e:f3:99:73:bb:9b:77:
         95:08:6e:60:5a:1f:6e:a5:ee:f3:33:19:29:0e:16:82:74:14:
         e0:31:69:3c:39:79:97:30:37:9a:5f:16:31:79:0d:f1:ce:ad:
         a5:36:03:69:9f:01:30:6d:a2:07:e6:b0:46:b8:d8:d2:64:0c:
         2a:87:85:e7:0a:00:85:dd:4d:b6:83:51:14:b7:6c:4d:4b:14:
         bb:17:2b:73:2e:d5:6e:00:ad:0c:c5:ae:c4:e2:30:e0:0c:ba:
         0e:23:08:f5:c4:b4:2d:17:cf:a6:53:6a:c9:30:ce:a7:0f:75:
         34:d6:f0:03:e6:5b:4e:ac:2a:1b:66:3b:67:27:ea:13:ee:d7:
         34:bd:12:47:f5:b8:8f:a3:8f:fb:f9:81:41:52:32:0f:19:1f:
         34:96:0f:26:dd:e0:e0:0a:3b:fa:c9:7a:44:d4:d4:56:1d:16:
         fd:b9:f6:92:61:c7:bf:82:8d:0e:b1:62:c6:4d:ee:af:fb:3d:
         54:04:8e:2d:8a:88:bb:9c:b2:61:c8:20:2d:ca:ec:56:b0:3a:
         0d:db:63:8f:4a:bd:00:22:e6:63:4e:d2:e8:f9:45:41:4d:2b:
         d2:a8:17:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:36:30 2025 by rpki-client