This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b056f708-d274-4e3c-9049-7e08347e7a90.roa
File:                     b056f708-d274-4e3c-9049-7e08347e7a90.roa (raw, json)
Hash identifier:          ua9JXYqSkpGJW3spnSOEB/HEsM+/NMqdTx3hVd+i8Q4=
Subject key identifier:   5C:B8:05:E6:C8:CB:2C:34:88:C9:CF:C1:54:F9:34:77:35:AE:45:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C2972EE405687249333D93ABBCAB3660B28CB56
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b056f708-d274-4e3c-9049-7e08347e7a90.roa
Signing time:             Sat 29 Nov 2025 00:21:20 +0000
ROA not before:           Sat 29 Nov 2025 00:21:20 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:29:72:ee:40:56:87:24:93:33:d9:3a:bb:ca:b3:66:0b:28:cb:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 29 00:21:20 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=daded23fd361cc314363fce57a3e6ea447e4808bde78cab7843fe55f5d1d1f6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:04:27:e6:5f:db:a2:c0:5b:59:b0:45:5a:
                    ad:3d:17:c1:fe:08:b2:f7:39:11:b3:93:b4:1b:37:
                    13:d3:cf:db:dc:10:a0:f3:50:e0:37:f9:cb:0a:24:
                    df:56:f5:8f:8d:2c:8f:9c:59:95:01:b4:5d:24:af:
                    45:69:37:6b:f8:fd:f1:df:51:7c:ba:c1:6b:9f:7e:
                    ef:61:a0:55:64:dd:40:99:f2:23:97:82:1c:b7:59:
                    d5:aa:13:68:ec:b3:a8:66:0c:7a:c5:d0:99:7e:5b:
                    ab:fd:7c:26:14:7b:f5:77:49:97:16:d4:e0:47:f8:
                    e7:2e:b2:cb:b4:17:7e:8a:94:48:8b:16:eb:75:e9:
                    ba:10:6d:cf:00:3a:5a:05:31:e7:25:6f:42:e6:3c:
                    a9:12:61:25:b2:57:db:bb:b9:82:d2:18:00:43:d6:
                    3d:39:3f:eb:41:1d:2f:ec:84:ef:c5:05:38:5c:4e:
                    d6:c4:5d:cc:3d:fb:bd:50:47:75:a2:c7:82:5a:39:
                    d4:e8:0d:91:b3:57:90:5d:47:fb:2a:5e:80:59:21:
                    dd:14:40:a4:bb:ae:e2:cd:9a:f8:5a:46:2c:fa:25:
                    7c:37:d9:44:78:b7:94:4e:ca:7a:c9:b3:82:b7:ec:
                    b3:e4:82:b6:8f:b2:63:b5:de:7a:16:e1:2b:27:e3:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B8:05:E6:C8:CB:2C:34:88:C9:CF:C1:54:F9:34:77:35:AE:45:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b056f708-d274-4e3c-9049-7e08347e7a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:54:0a:d5:74:fc:72:d3:c5:91:69:64:0c:03:cc:32:d6:17:
         3d:78:48:24:92:4e:81:2a:31:dc:cf:25:c3:a0:c2:fc:91:3f:
         fe:1a:78:fb:80:78:80:c8:18:99:18:45:d7:66:1f:2f:95:86:
         e1:d1:6e:7c:d4:da:29:12:47:47:b8:68:fa:a1:9a:e2:7e:e3:
         5e:c6:f3:ea:c6:f0:8a:0a:14:12:1e:d7:e1:b6:64:09:c7:1d:
         3e:41:5e:a7:68:90:82:4c:07:75:28:4e:97:f4:33:48:ba:b2:
         4e:00:11:ea:8c:ba:78:20:e0:cc:30:df:73:7c:bd:2d:43:88:
         2d:c3:ad:72:b2:8e:9e:36:c6:86:7d:2b:5e:b6:31:8b:f4:c9:
         67:5c:52:af:3f:9e:f8:e5:63:d6:a5:90:39:52:b0:e5:d2:f6:
         b6:f4:b9:85:f1:03:ca:f0:a3:1b:c6:50:e7:6f:23:27:73:30:
         9f:47:6e:93:aa:88:8f:b8:dc:82:a8:23:54:83:37:15:56:fd:
         8a:91:10:3a:e6:a2:79:f3:43:ef:21:51:61:29:2c:83:5a:fd:
         8e:1a:9b:1b:73:b0:25:ee:07:5f:88:bd:15:07:30:a7:46:2a:
         fb:a3:cd:97:26:34:b1:d5:7a:46:74:85:66:10:42:94:05:d2:
         06:0e:7f:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:08:04 2025 by rpki-client