This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2073c98-9081-4019-b45b-32c099875805.roa
File:                     b2073c98-9081-4019-b45b-32c099875805.roa (raw, json)
Hash identifier:          SYCj+iN1+1w7SK6kyPG6qUVcLsxOzMi0L6/umMq1Vmk=
Subject key identifier:   9F:C8:B8:68:53:E0:C2:26:4C:74:3F:46:D2:8D:2C:66:B3:B8:72:B7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F1DFA11B407C963D38DB95F8BF8893351A46032
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2073c98-9081-4019-b45b-32c099875805.roa
Signing time:             Sun 23 Nov 2025 01:11:05 +0000
ROA not before:           Sun 23 Nov 2025 01:11:05 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:34c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1d:fa:11:b4:07:c9:63:d3:8d:b9:5f:8b:f8:89:33:51:a4:60:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 01:11:05 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=f9b57548a0d4c2e2c13fcd8a2b11ef874b1567c9b5356d57023dd61536190d42, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:b5:14:1f:60:e1:d6:36:96:e5:bc:c8:01:
                    88:f6:07:7d:12:1a:0f:78:86:20:13:0b:60:6c:ec:
                    4f:2b:f5:5d:5d:3e:33:41:3d:36:d7:63:da:ca:c9:
                    ab:e7:5d:ac:14:3a:a7:a2:98:4e:a7:c2:f2:84:f0:
                    0b:52:88:8e:ee:49:aa:20:d0:23:d8:80:f8:88:3a:
                    dc:13:34:bf:5c:8b:8c:85:07:fb:2f:60:fc:42:b5:
                    89:a9:03:47:9b:ce:a5:9a:fe:29:be:34:b1:4a:c9:
                    27:9d:44:6f:e8:8c:51:5e:2c:08:0d:9f:ed:58:75:
                    56:45:65:b2:58:7c:ee:2b:39:4a:bb:59:20:c7:19:
                    d1:29:22:46:31:89:80:ab:c3:56:19:bb:9c:60:ee:
                    cf:e4:fd:bf:29:5d:81:c7:4a:4d:b6:05:1a:e4:14:
                    4c:f9:07:d5:20:1c:51:a5:11:6b:c6:27:ca:8f:ab:
                    1e:a5:ca:f6:4b:43:4e:7c:00:29:0b:38:60:03:25:
                    46:27:e9:b8:ab:b5:b6:1f:2b:4c:f2:82:ad:8a:1c:
                    e8:17:79:cd:0d:0c:67:8c:29:80:55:48:6b:8e:3c:
                    b0:d5:f9:31:2b:54:38:56:1b:2c:46:35:d2:7a:27:
                    c8:f0:4e:2e:55:77:9e:07:a1:39:10:3f:06:05:7b:
                    e7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C8:B8:68:53:E0:C2:26:4C:74:3F:46:D2:8D:2C:66:B3:B8:72:B7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2073c98-9081-4019-b45b-32c099875805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:34c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:aa:61:ac:d0:fe:50:90:a2:2e:fa:77:d9:4f:42:a4:ef:97:
         09:b3:77:15:5e:1c:c9:6d:34:13:7e:bf:13:c5:89:26:91:23:
         c7:8c:25:b2:65:d3:ff:bd:c3:a7:09:d8:37:f3:fb:0c:53:8b:
         27:e5:89:9e:95:54:4d:ec:4f:60:56:b9:17:53:55:e3:56:94:
         8f:15:e0:1c:19:a1:be:76:f9:10:ab:af:de:09:f3:94:0b:3f:
         7f:7b:82:2f:b8:ab:13:87:48:2f:67:bf:fc:61:2c:7b:10:2c:
         29:55:1c:c6:8b:83:bf:02:9e:70:d3:9d:7e:95:46:9f:37:47:
         4e:7a:48:82:69:24:5e:1a:a6:42:86:b8:2c:a2:9f:3d:cc:14:
         4e:1d:b1:be:63:b7:84:ff:5f:72:d5:54:1d:77:0c:b3:d8:9b:
         a3:ae:ce:a7:e4:26:43:5a:07:9f:88:ad:f1:d2:25:ca:bf:05:
         28:db:1a:c5:57:35:43:18:61:31:a1:f1:13:44:10:2e:fc:2c:
         14:14:50:ac:ea:ca:c5:68:8a:29:7f:bb:4d:c8:41:b1:b9:c7:
         70:6b:ad:cb:5e:7d:d5:37:17:8a:7e:bc:7c:45:a7:80:7c:20:
         c1:ef:86:15:f2:bf:45:cc:ec:37:ad:1a:f6:bb:05:a2:0a:cc:
         95:29:7c:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:15 2025 by rpki-client