This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5dc397e-51ae-4560-83fe-dc18c680d062.roa
File:                     a5dc397e-51ae-4560-83fe-dc18c680d062.roa (raw, json)
Hash identifier:          8LPchkNjEERq+pXlehqh8nGOWXos1X3EHo06qZwx43o=
Subject key identifier:   ED:19:07:58:FD:B8:E4:D9:5F:5C:31:8D:AD:A4:F3:1E:42:07:2D:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       598D7247507270A4B4B836856B57E0CF8C041B6F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5dc397e-51ae-4560-83fe-dc18c680d062.roa
Signing time:             Sat 06 Dec 2025 01:01:33 +0000
ROA not before:           Sat 06 Dec 2025 01:01:33 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fff:81c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8d:72:47:50:72:70:a4:b4:b8:36:85:6b:57:e0:cf:8c:04:1b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 01:01:33 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=0de52eff947c7ebe7b161011172b7611b9e0af2db4988d2e7e7352af36bdd140, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:8c:4e:32:52:a6:e5:aa:3e:3f:ae:d3:9e:
                    72:ad:31:f5:b4:87:a9:e8:60:4d:fa:22:d1:75:a8:
                    74:a9:f1:2e:df:e9:a4:d5:f1:a1:e1:a1:0c:17:8e:
                    50:ab:2c:37:2c:88:ac:06:09:de:1f:c4:af:8b:fb:
                    a1:50:e6:98:2e:be:29:7e:10:7a:70:df:1b:d5:36:
                    41:13:74:41:53:b1:47:fa:e9:96:97:57:30:33:0e:
                    46:d4:35:a2:40:98:ad:c9:5e:05:96:fc:64:54:a1:
                    35:e8:fd:6e:97:bf:ff:45:a0:43:df:2e:fc:67:98:
                    af:60:69:47:05:b9:f5:05:7b:72:b8:dd:a7:33:ea:
                    fa:a7:96:9d:e4:16:2d:17:f4:fd:a7:40:17:77:49:
                    82:9b:b6:bf:75:ff:dc:04:b5:7b:2c:f0:bf:53:9f:
                    01:66:f2:f1:bb:94:11:f2:40:19:96:76:10:cb:4c:
                    6d:ac:b1:6e:32:1e:bb:84:68:70:3b:79:91:96:dc:
                    a4:99:d6:1d:d4:58:5d:f5:1b:c5:99:7b:f9:6b:38:
                    63:5a:95:71:61:42:f9:82:15:33:2f:0e:60:96:6c:
                    80:68:ce:a9:e4:7b:f5:1d:bc:45:fb:6b:aa:46:a0:
                    25:78:92:5b:06:99:fd:22:76:25:42:ef:99:53:e5:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:07:58:FD:B8:E4:D9:5F:5C:31:8D:AD:A4:F3:1E:42:07:2D:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5dc397e-51ae-4560-83fe-dc18c680d062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:63:b4:2c:52:32:63:f9:82:96:5b:64:27:23:3d:00:7d:99:
         6d:54:95:8c:a3:ce:10:8e:c7:7b:26:f0:07:c3:6a:27:8a:31:
         47:a2:72:ed:b6:55:7a:20:00:ed:c0:8b:f7:e4:1b:32:df:e2:
         a8:b5:d9:6c:0e:9a:4f:5c:23:8a:9e:d5:18:65:71:34:4e:c9:
         f7:53:46:33:2c:28:59:ec:04:2d:c1:be:ad:12:2b:4c:08:4a:
         45:6b:6d:6f:2e:14:89:08:d6:65:38:49:df:bb:6f:76:e5:eb:
         3a:63:9c:22:d2:77:8a:99:83:66:1a:93:8f:71:e3:20:57:df:
         b5:67:47:ae:9e:44:3b:94:dc:3c:c5:1c:00:3a:f1:62:26:09:
         9c:f7:2c:2d:b2:30:bb:54:53:13:9e:23:bf:b3:61:cb:6d:9c:
         59:90:a2:0c:28:b7:db:a4:e5:6f:80:8d:9c:99:ae:1f:aa:dd:
         97:f5:b8:cd:40:46:70:4e:9f:6c:58:50:fd:b7:79:f3:8b:9c:
         55:67:6a:97:95:01:38:73:ac:79:8d:b7:dd:1b:05:0a:fc:ac:
         6d:96:4a:07:a8:9c:f2:3c:7c:f8:e8:57:c0:3f:20:e6:7b:67:
         f3:d1:05:8a:db:a5:8a:ae:3a:76:31:33:47:91:24:f8:c8:06:
         8c:f9:36:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:22:45 2025 by rpki-client