This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
File:                     c636934a-c7cc-4c0f-acb1-a74b2500994d.roa (raw, json)
Hash identifier:          9OFC+31pDfj9Iho9aLQKPusZhumLpNBjzST3FXxiKew=
Subject key identifier:   9C:6A:18:26:53:7C:F1:D3:41:6C:9C:09:13:93:E7:FB:6C:BD:D3:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59BFEE5D1DC261DA9791F97036A0F3E65AF23A51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
Signing time:             Sat 06 Dec 2025 01:10:04 +0000
ROA not before:           Sat 06 Dec 2025 01:10:04 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:3480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bf:ee:5d:1d:c2:61:da:97:91:f9:70:36:a0:f3:e6:5a:f2:3a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 01:10:04 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=51f373cbf2c1504ef8fb324dcc0ca9174e37f1a7f331a7cd06077c94a89dde39, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:c0:e5:a7:1f:87:cb:b9:f9:b0:7f:13:43:
                    09:72:1a:0a:55:21:4f:44:47:a0:81:93:af:dc:b4:
                    4d:c7:62:89:c9:41:da:6e:f7:c4:ed:e0:fc:20:11:
                    a5:71:7c:21:a8:8e:3f:45:62:18:4f:da:56:8d:45:
                    ef:7a:1b:78:dd:46:f0:b5:6a:a5:83:1f:df:1d:86:
                    56:0c:25:36:5b:96:58:8d:74:19:3c:cb:c2:29:53:
                    bd:f3:7e:0b:34:f3:fc:21:1e:7f:a6:86:ca:d5:6a:
                    cf:21:48:b6:be:db:77:ce:19:1a:84:b6:ab:4d:d8:
                    4a:6a:23:2d:7f:67:81:45:88:3d:9f:d9:df:48:3f:
                    92:98:1b:44:c7:41:de:41:bb:32:db:a3:5d:33:39:
                    62:d0:62:9d:05:45:2c:d1:55:6f:22:42:ee:f2:a9:
                    1e:38:30:23:c0:7b:47:10:79:e7:f2:45:27:df:20:
                    d7:71:52:59:b5:e6:aa:76:91:08:2a:89:3f:2b:5f:
                    1f:eb:b7:62:0e:e1:29:dd:9e:30:d5:2d:2e:c6:40:
                    da:53:40:8d:bd:48:f6:c0:80:ed:27:54:f6:a0:33:
                    de:96:4f:bf:54:76:fa:31:87:a5:60:d4:cd:ea:50:
                    47:ff:c6:29:99:7a:ab:28:2b:cb:1e:85:c4:43:16:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:18:26:53:7C:F1:D3:41:6C:9C:09:13:93:E7:FB:6C:BD:D3:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:3480::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:94:30:6a:5c:31:fe:03:02:5f:71:91:e8:76:67:60:a5:da:
         4f:02:9b:10:a5:13:fd:0e:35:8d:6d:34:20:2f:82:af:3b:b3:
         ad:99:74:c0:a3:ea:36:3d:3a:1a:aa:a5:bf:91:66:f2:48:30:
         cb:09:5d:11:66:55:c4:24:0c:97:8d:94:98:90:f5:49:aa:ce:
         4e:4c:30:86:ff:2a:87:dd:6d:61:dc:d3:94:f9:bb:42:a3:1c:
         5d:eb:42:ae:1c:b1:23:8b:04:ec:34:1d:1b:3d:a2:c3:2e:f4:
         07:14:13:15:39:90:b9:fe:95:62:74:f9:77:02:1d:86:e3:dd:
         fe:ed:73:36:fd:78:07:5e:fd:e4:42:a2:00:8f:8d:27:cd:11:
         f4:da:cb:b8:97:f5:16:9d:53:5a:c2:bf:53:c6:6b:f4:29:a7:
         f9:26:bc:44:87:c8:52:ea:4a:4a:8b:b2:40:55:76:1d:13:24:
         08:ea:24:4d:62:a0:a1:da:e5:e7:1e:87:05:40:b4:f0:3e:9c:
         db:5e:6e:40:d9:af:62:28:57:3b:68:9b:eb:b6:69:ec:47:7a:
         d8:c0:49:c3:d6:d6:2c:e2:90:bd:61:ab:c6:be:f1:50:a9:fb:
         d3:2d:82:e2:a7:4b:ca:45:1d:e8:b2:2e:64:41:13:46:4b:f3:
         63:db:37:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:56:55 2025 by rpki-client