This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79a6de0-97ae-40ed-8709-dde0285d7bef.roa
File:                     c79a6de0-97ae-40ed-8709-dde0285d7bef.roa (raw, json)
Hash identifier:          JyhNfCNEYmF2nkDL8PmZ4phkax5Vr92woLZBFP3NLVo=
Subject key identifier:   B2:71:2C:56:B4:CE:A7:0D:1F:62:94:67:E1:F0:1E:92:E7:24:7D:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       634CBD909FD4FC3988CC895D7AC1C242CDF37867
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79a6de0-97ae-40ed-8709-dde0285d7bef.roa
Signing time:             Tue 25 Nov 2025 00:10:45 +0000
ROA not before:           Tue 25 Nov 2025 00:10:45 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:ec00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4c:bd:90:9f:d4:fc:39:88:cc:89:5d:7a:c1:c2:42:cd:f3:78:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:10:45 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=0c1b2e746319edbb3bc58134fbf0b053b36d7e242cc6ef52acab048d45957b0c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:df:f6:ff:36:83:c4:ea:33:55:77:75:af:
                    3d:5a:56:58:95:43:09:07:40:1b:2c:7c:c6:79:0a:
                    b8:90:f8:12:34:29:d7:53:12:2b:f9:0f:df:3c:b7:
                    2c:c0:1f:95:8f:af:c9:5b:0c:7f:a6:fd:eb:fc:4e:
                    6a:05:80:92:8e:a8:c4:97:62:a3:8c:cb:25:e8:8c:
                    2c:a4:00:63:46:21:dd:97:78:7c:cc:63:b9:92:d7:
                    b7:8a:e2:10:f6:cb:d5:af:d5:c6:f5:a4:c1:ff:f6:
                    b2:24:fb:28:c9:b7:da:d1:58:5b:82:8f:ab:31:db:
                    52:6c:a4:32:21:82:09:d5:01:01:1a:55:14:1a:8f:
                    6a:bb:39:77:a1:c6:43:c9:47:5b:e8:49:fc:39:c8:
                    8b:37:34:93:15:b9:d1:7e:f4:e2:6a:63:7d:7d:75:
                    1c:29:11:87:5c:49:a4:1e:25:6d:a8:dc:df:8d:be:
                    95:f1:06:17:29:cd:a8:c6:f3:60:80:57:88:81:0c:
                    a7:15:c3:d5:57:65:76:89:16:73:53:e5:a2:7e:1a:
                    c4:51:ed:ae:52:29:a0:de:bb:c4:11:e4:63:a4:fa:
                    98:b7:a0:84:7a:f9:7f:ab:26:69:f7:cb:11:f5:ca:
                    bf:de:52:b6:6a:1a:24:6f:f7:3e:aa:7a:ef:32:9f:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:71:2C:56:B4:CE:A7:0D:1F:62:94:67:E1:F0:1E:92:E7:24:7D:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79a6de0-97ae-40ed-8709-dde0285d7bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:aa:9e:37:df:3c:1a:54:bf:d8:bf:35:67:cd:47:c4:a5:
         2f:58:3a:44:5f:73:fc:4b:73:b1:e5:2d:60:65:78:9c:b4:7d:
         4c:da:5a:c8:8e:a1:3a:28:85:7c:6c:36:af:db:d5:76:3b:10:
         d8:2a:bb:5a:b4:b0:18:0c:20:08:a5:cc:dc:45:bb:32:f9:29:
         f6:00:36:33:c5:7d:27:d3:42:e5:fd:64:aa:7b:c5:d8:c8:49:
         9e:46:f6:9b:31:1c:03:d0:47:c3:95:22:bb:40:f0:6c:a7:91:
         3e:7f:b7:0b:c2:4d:96:82:de:f9:08:81:b0:f9:fc:1d:ee:91:
         e3:16:f2:86:2b:ba:a3:04:2e:c4:cf:37:98:78:4e:77:66:56:
         cd:55:c2:15:64:3f:52:c1:0b:bf:7f:e0:00:8e:32:4b:a3:42:
         02:8a:fa:9b:89:9f:21:27:8a:15:67:5b:46:9a:be:7d:8c:47:
         d2:6c:ba:d4:ff:c9:3c:12:54:ae:95:50:36:57:5f:eb:56:52:
         68:23:40:f7:1d:e6:45:ec:62:3a:3f:4f:66:52:04:26:08:44:
         9b:4f:d9:94:7b:49:83:7f:55:16:83:7d:73:94:03:ba:87:47:
         3e:b8:b1:6f:0b:39:1e:81:b4:3a:88:fb:53:09:bd:94:15:39:
         94:0a:f0:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:54:14 2025 by rpki-client