This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5b2853e-a8ed-4b26-b6c5-fde579facaa2.roa
File:                     c5b2853e-a8ed-4b26-b6c5-fde579facaa2.roa (raw, json)
Hash identifier:          aSp9s3E3Uf/jz+vlUNzyfkUUKCxJZPLlGznVzmtD8gk=
Subject key identifier:   E9:EE:7E:04:4E:89:E0:AF:81:B4:9D:5E:04:92:26:D3:26:EC:69:1F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       691C1A37AA1A403E13211F0A91A02843FE56FE36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5b2853e-a8ed-4b26-b6c5-fde579facaa2.roa
Signing time:             Thu 11 Dec 2025 00:01:20 +0000
ROA not before:           Thu 11 Dec 2025 00:01:20 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f25::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1c:1a:37:aa:1a:40:3e:13:21:1f:0a:91:a0:28:43:fe:56:fe:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:01:20 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=bd16efd13d40d5be04909baea8866cd0ebf4bb05cdc550ed968a0028ebd22253, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:c9:99:33:2b:cc:17:4c:43:3c:27:18:a5:
                    62:7b:6a:b1:ca:e8:c6:11:60:ab:bb:70:1e:14:ea:
                    b6:e2:2f:07:7d:07:ab:47:c6:41:65:02:77:99:21:
                    10:a8:d6:c9:2e:89:ef:92:6b:03:f8:c5:a1:da:91:
                    d3:a3:f2:a2:f6:c7:46:f5:1a:93:f1:5c:3f:11:07:
                    e6:5f:58:44:be:7c:36:3c:97:19:0a:ba:2f:af:ad:
                    b4:e0:70:92:d5:ab:2e:0d:f0:10:29:44:fa:76:d0:
                    e5:fb:92:c8:65:43:6a:a8:1c:23:49:eb:cd:39:b0:
                    1a:67:64:b1:34:bc:ef:8b:ce:43:13:3a:0c:1a:fd:
                    e4:92:8d:ff:6a:7b:ed:19:8d:51:cc:49:cf:df:29:
                    91:e8:f9:7d:bb:61:e1:ba:d2:04:24:08:cf:c7:80:
                    b1:03:ed:e1:98:77:97:fe:4e:92:cc:1f:6e:f1:ed:
                    f6:26:6d:50:63:35:c4:e3:f0:a0:4f:7a:3a:37:e2:
                    28:7e:81:83:d8:6c:ad:5a:e4:24:64:15:98:87:b9:
                    16:25:e4:c2:e3:b1:b6:5f:b4:03:d6:c1:7b:5a:9a:
                    30:37:d6:ec:f7:e0:e4:3b:58:3c:ef:85:13:26:03:
                    62:ab:19:72:26:35:82:e1:ee:9d:df:1a:7a:f7:db:
                    1e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EE:7E:04:4E:89:E0:AF:81:B4:9D:5E:04:92:26:D3:26:EC:69:1F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5b2853e-a8ed-4b26-b6c5-fde579facaa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f25::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:fb:39:cc:43:ba:f7:fb:3d:79:c2:08:72:e9:25:1e:85:
         64:50:b9:e3:0b:9c:f3:2c:c2:87:c2:30:c5:63:58:d0:d2:e6:
         a6:f6:69:c3:54:cc:0c:91:26:77:47:9c:06:1b:c6:03:f2:5f:
         a8:7d:4b:45:29:99:97:15:24:01:bf:97:91:d7:5f:b5:a4:0e:
         59:e5:be:9e:f4:2a:75:bf:93:e6:77:89:39:f3:10:48:f4:f5:
         73:8f:fa:78:ab:8b:46:c8:7e:4f:c3:8e:f3:84:1c:8c:cd:5e:
         5f:66:b4:b7:6e:c0:6f:37:a4:2d:84:ca:cb:ca:54:5d:d1:84:
         57:ce:7e:f3:c8:4f:fb:40:45:d3:9c:d2:f3:1f:e7:88:05:1a:
         ba:12:8d:c0:e9:c6:8b:b7:4a:45:75:8f:68:71:3a:88:4c:e0:
         10:f6:68:a0:c9:38:6d:3f:a1:c5:51:38:3e:9a:e6:5c:a4:49:
         2e:78:d7:72:a0:1f:48:b2:68:be:a3:74:ba:3d:a1:72:48:c6:
         6f:43:94:88:cd:38:8f:f6:79:64:15:d3:74:d6:4c:06:bd:01:
         b4:d7:d2:fa:b9:6c:69:fd:9a:22:2d:7c:1e:62:e3:eb:72:ab:
         78:86:35:ae:bd:61:58:ce:70:ac:42:d5:57:10:d9:f4:d7:c5:
         0f:bc:45:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 07:38:26 2025 by rpki-client