This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa
File:                     ada9656c-30f4-4e44-894d-f0d706b08daa.roa (raw, json)
Hash identifier:          aSYjD4MmFhgXeFeaqv+y62goFjGNGMWj1Gyhewi3c0Q=
Subject key identifier:   DC:0E:9A:79:7F:F8:64:7E:8A:7E:A8:D0:85:86:7D:59:DE:F4:E5:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48D2439273C67304860F422365C0093220DE0C56
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa
Signing time:             Sat 06 Dec 2025 01:10:05 +0000
ROA not before:           Sat 06 Dec 2025 01:10:05 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:34c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d2:43:92:73:c6:73:04:86:0f:42:23:65:c0:09:32:20:de:0c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 01:10:05 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=4a8750656875a5f9810f4402c5f3a33e925639b8fcb7fcbfb9cf93a927d2ab93, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:c7:d6:e2:ad:4d:7e:21:3b:8b:9a:f0:ef:
                    4c:73:e2:83:52:54:e1:df:34:13:c8:2e:0d:0c:b5:
                    b0:5b:8f:b5:1d:89:45:23:5f:f8:39:e6:7d:3f:72:
                    24:5d:aa:12:78:f5:32:ae:65:6d:c5:f6:5d:2f:97:
                    46:77:f3:a8:80:76:cc:c7:de:f6:1f:70:b5:6c:51:
                    1f:0c:13:29:45:19:5b:1b:18:fb:07:c3:f0:53:95:
                    4c:80:69:5c:ab:23:e1:53:49:27:97:08:14:a2:38:
                    39:ed:eb:ac:36:91:9f:25:ff:0e:27:34:4b:11:38:
                    1d:0a:d2:9b:33:05:03:89:b0:a8:fa:f2:5c:63:a9:
                    da:45:d8:7f:9f:79:57:e8:c8:bf:d7:f5:24:99:1d:
                    be:7e:fd:ad:04:fc:1e:ef:d6:e7:fe:92:aa:3b:89:
                    f6:4d:9d:4c:22:82:4e:f5:38:e5:2c:66:ec:44:65:
                    ee:66:75:a2:7e:21:5a:fb:90:d9:e1:ec:4b:33:c6:
                    fa:df:77:42:bc:01:d9:1b:ca:d8:be:58:87:af:6c:
                    b9:8b:1c:4c:21:3b:57:4f:19:11:bf:6a:ea:c2:96:
                    92:69:05:9b:2c:80:ec:68:51:8b:7d:48:fe:3a:65:
                    dc:1b:7d:b6:1f:f7:b2:26:6a:d4:2c:96:b0:ab:d9:
                    eb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0E:9A:79:7F:F8:64:7E:8A:7E:A8:D0:85:86:7D:59:DE:F4:E5:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:34c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:46:05:5e:93:c6:91:a6:44:5c:d9:3e:9c:c0:43:e2:cc:b5:
         3b:e2:ae:59:95:6b:67:bd:d0:e4:9b:e4:59:57:0c:1c:d1:7a:
         4b:2c:55:4d:d2:7a:df:7f:bc:42:21:c6:cb:f3:fd:5c:d5:8a:
         bc:ed:7a:aa:6f:69:d7:97:75:03:5a:7a:77:2a:ef:6e:72:90:
         38:c5:7d:91:19:6c:31:e4:73:4b:08:9e:97:71:44:02:a3:c0:
         19:2e:8f:f8:2f:e2:60:58:93:ef:75:b9:73:d0:b0:ec:35:b8:
         4b:66:b9:ba:39:2d:04:19:a7:f1:25:81:33:c9:27:c1:62:42:
         49:dc:48:f3:31:f9:c8:a7:09:ed:1a:82:68:c3:05:8a:12:54:
         fb:83:46:ae:51:ea:41:c1:50:ec:2d:26:7f:34:32:f2:90:57:
         d1:76:c9:d5:89:ca:c8:e4:15:04:c3:d7:e6:e3:86:fc:10:af:
         6a:15:a6:ab:bf:c5:0e:36:cf:24:e0:5a:2c:e7:34:50:e9:38:
         df:01:13:fd:25:e6:a1:42:4f:a8:ec:21:5c:77:38:8f:e0:77:
         f0:d5:a9:52:8e:a9:1f:d2:17:1a:17:cd:f6:3f:92:19:7e:84:
         40:45:ea:40:2d:3c:ca:c2:7a:9f:4d:80:69:56:c7:26:d9:2d:
         5d:77:f9:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:32 2025 by rpki-client