This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fef2548-9b5f-420f-a7ec-7ccbae8efdbc.roa
File:                     9fef2548-9b5f-420f-a7ec-7ccbae8efdbc.roa (raw, json)
Hash identifier:          zQ8VEIZwIpLH+9B5nuzwxaoMaiqnVu37N/20oUcfI68=
Subject key identifier:   4A:58:FD:4A:BD:05:AF:D9:BB:02:F7:44:6E:76:77:E0:4C:4A:36:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01FCCF34AE8C7C74CE9313EBC95C2A9B24103C5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fef2548-9b5f-420f-a7ec-7ccbae8efdbc.roa
Signing time:             Sun 23 Nov 2025 01:01:22 +0000
ROA not before:           Sun 23 Nov 2025 01:01:22 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fea:8090::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fc:cf:34:ae:8c:7c:74:ce:93:13:eb:c9:5c:2a:9b:24:10:3c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 01:01:22 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=94543f894d218725b94e2d147cb8a08c6a5a989d8a425dcd929bc68168bf6d63, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:b2:6c:a7:19:5b:ef:2c:25:7d:d4:20:c8:
                    f4:98:d7:b0:6f:94:78:6e:99:66:38:e8:b3:c8:f9:
                    12:1c:ea:03:e6:c4:8e:f7:72:e4:99:53:8d:d2:52:
                    33:ce:64:2b:ba:e1:da:97:48:e0:3e:25:a5:53:93:
                    9d:fa:4d:2f:9b:3d:dd:c4:e6:a5:d2:85:64:1a:f8:
                    54:db:f1:b3:41:21:a7:a9:50:87:a7:5a:88:9c:a7:
                    a3:40:2c:1e:f3:11:94:3d:3c:e1:02:27:0a:8f:4d:
                    b0:f0:d3:a1:6d:19:77:31:a9:75:2b:1a:e2:3b:16:
                    0e:31:d6:d6:24:d7:ff:29:8e:06:8c:c9:8d:c0:71:
                    4e:2c:ea:c4:3e:fb:f0:84:ff:a5:bc:97:35:9d:fb:
                    69:23:af:00:10:ec:db:b8:60:b0:ca:ef:11:25:51:
                    44:59:39:f2:7c:4d:5d:b9:e3:05:85:dd:17:11:a2:
                    bd:e3:54:3b:dd:e5:5e:ef:c5:52:7a:be:a2:2e:c0:
                    65:9b:74:1e:36:0f:9f:00:98:40:a4:d3:53:80:41:
                    65:91:24:77:69:89:bc:da:d0:e6:90:6f:3a:0e:70:
                    1d:3f:dd:79:9c:72:52:43:c7:c1:61:77:1f:fb:a1:
                    d3:53:23:ac:44:4f:9f:9e:12:f9:45:57:82:00:55:
                    57:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:58:FD:4A:BD:05:AF:D9:BB:02:F7:44:6E:76:77:E0:4C:4A:36:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fef2548-9b5f-420f-a7ec-7ccbae8efdbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:8090::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:5b:46:85:9f:e1:08:93:08:bb:fd:72:49:2f:d4:fc:7e:aa:
         c5:55:f8:ad:89:7a:e8:41:fc:cf:5b:c0:49:3d:9c:24:71:35:
         c5:b1:a3:b0:a1:20:ae:9c:ab:e7:5a:4d:9d:8b:62:8f:0f:d4:
         a5:31:18:7f:72:72:06:7c:72:1d:08:15:07:55:b4:a0:11:2d:
         c3:f8:c5:88:d9:36:d5:1f:0b:a3:49:cc:a0:7b:72:33:7a:45:
         d1:8a:e7:91:4e:cd:83:1b:5d:6e:50:43:15:3a:a4:75:ab:4e:
         2e:15:c5:6f:be:e9:1c:c7:19:09:18:f6:51:46:ec:b9:98:c1:
         46:f7:0f:7e:42:69:8a:a2:da:a5:2b:6c:f4:b7:4e:f3:a6:21:
         19:0f:b8:d3:c4:85:25:d5:76:76:95:e5:ce:12:6b:a6:a2:e3:
         f9:46:95:15:54:70:e9:c2:4b:31:6f:56:c0:78:95:f8:fa:55:
         c6:f3:fa:02:e2:4e:63:e2:77:f8:06:02:b7:23:16:77:0d:5e:
         12:63:ac:79:03:8e:3b:14:63:c9:4a:ec:1e:2e:93:94:93:6d:
         6f:dc:1f:06:df:66:33:2b:7b:a4:d5:73:3b:a9:8a:3c:fe:05:
         43:4e:11:bf:5a:eb:d7:09:2b:13:76:df:bf:e6:d8:51:2d:c8:
         5c:8b:f5:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:11:45 2025 by rpki-client