This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/add77e04-b465-4ecc-a23d-6fbdefc2af34.roa
File:                     add77e04-b465-4ecc-a23d-6fbdefc2af34.roa (raw, json)
Hash identifier:          rqoRBhybsxqKE/teh9/CE5Nyl/LDt1BO3uy3QU7ifqc=
Subject key identifier:   DB:60:92:4A:63:07:83:E2:03:DE:A0:79:FB:46:DB:80:8C:BD:06:20
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54D201CD5F3443DC46AA663B9BBC3B6D54730D38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/add77e04-b465-4ecc-a23d-6fbdefc2af34.roa
Signing time:             Wed 03 Dec 2025 00:20:44 +0000
ROA not before:           Wed 03 Dec 2025 00:20:44 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d2:01:cd:5f:34:43:dc:46:aa:66:3b:9b:bc:3b:6d:54:73:0d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 00:20:44 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=44edadac4699a54a948dcf264c096f75c846c02ed427c615793bb1ab92875161, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:8e:ae:eb:1a:4b:cc:99:26:01:90:67:b0:
                    5f:24:91:89:38:6a:21:fc:1b:39:21:69:3e:8e:c0:
                    08:7f:b1:83:50:9b:84:f7:07:28:7a:b0:b9:88:8b:
                    4b:d6:b9:25:39:e1:9a:d9:7f:50:4e:ef:9c:1b:36:
                    80:1a:99:59:9d:4a:c7:ee:99:e2:ae:f5:c8:9e:a1:
                    a0:5e:25:fe:32:9c:9e:55:e1:2d:aa:3a:89:9c:04:
                    46:20:33:a8:e7:28:85:e3:a1:61:86:0c:b2:ad:13:
                    c2:58:68:df:eb:75:25:c2:ab:5e:cc:f5:9b:0d:94:
                    f0:13:05:46:20:51:87:c6:ca:6b:9c:aa:6c:83:3d:
                    7f:6d:78:a2:48:eb:e7:2a:a6:b0:72:5f:bf:66:79:
                    fd:34:5e:6d:06:95:69:ec:e2:75:07:50:50:7f:71:
                    68:33:4b:7e:ce:59:d6:4e:a0:0f:e3:b7:38:27:87:
                    aa:91:42:01:b0:0b:7b:8d:9f:ab:5f:ba:93:6b:fd:
                    e5:be:53:63:7a:b5:dd:60:cb:d0:85:0f:fc:38:2a:
                    c3:d1:54:be:19:45:01:c6:36:3b:41:e0:5f:14:b8:
                    6c:47:8d:d0:30:b6:62:58:54:fd:77:1f:da:9b:f7:
                    25:90:36:cf:0e:ce:c7:2f:59:10:ee:c9:07:7f:db:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:60:92:4A:63:07:83:E2:03:DE:A0:79:FB:46:DB:80:8C:BD:06:20
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/add77e04-b465-4ecc-a23d-6fbdefc2af34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:e8:6b:90:a9:c2:0b:8b:be:6e:34:92:83:c5:96:e1:33:
         2b:75:88:ef:22:24:76:a7:22:35:ac:6c:3a:38:27:58:37:e7:
         2c:11:ee:9c:1b:91:4f:e9:d1:8f:c1:72:74:d2:68:c8:e6:69:
         de:80:24:82:d4:70:5c:16:63:0e:2c:35:87:34:84:a6:2c:94:
         3f:48:9d:8c:88:bc:3d:70:43:53:bf:e4:d2:03:1e:2e:52:e0:
         e3:d7:ae:77:43:90:79:c1:c1:e9:58:eb:c2:84:a1:b5:8e:4b:
         c3:8c:e7:da:b8:65:f2:05:d4:0d:c0:e8:be:ba:15:d7:35:30:
         e3:dc:2c:34:49:cd:f5:82:c6:b6:ca:80:b6:ca:64:45:ae:34:
         67:f1:39:4e:e1:c0:85:5c:1a:f1:7f:49:24:8d:95:9c:56:ce:
         7a:90:d1:2a:9c:5f:9b:da:eb:e0:72:df:21:98:c5:11:4c:07:
         16:99:fc:f1:b2:e8:bb:02:ed:7b:cf:ca:bb:c1:56:68:d8:f0:
         ca:cd:99:38:f3:a0:66:2f:f4:81:a7:20:0d:40:22:10:5c:7a:
         9a:ed:d3:c7:75:37:43:3b:d3:63:94:2d:a2:f2:83:de:43:93:
         e0:52:42:ec:6b:3a:93:c4:03:5b:7b:3d:fa:08:e0:95:6b:fe:
         d2:11:43:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:55:30 2025 by rpki-client