This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79d28be-5bba-476b-9604-8f30b9f88553.roa
File:                     c79d28be-5bba-476b-9604-8f30b9f88553.roa (raw, json)
Hash identifier:          9NoGp1yDYhsNPIUKjzIOT2JX59BuFONqtpmJm8v5d+I=
Subject key identifier:   E8:7B:5A:CD:1A:9A:7B:7E:41:BC:B1:79:75:B1:FB:29:F1:93:69:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A3BBFA686F77BF04259999CFD05E06AC291E774
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79d28be-5bba-476b-9604-8f30b9f88553.roa
Signing time:             Sat 06 Dec 2025 01:20:12 +0000
ROA not before:           Sat 06 Dec 2025 01:20:12 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f00:50c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3b:bf:a6:86:f7:7b:f0:42:59:99:9c:fd:05:e0:6a:c2:91:e7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 01:20:12 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=3df3c550714780eca22e9cf0491776b112d112017253e5b20a4509fbafecffdf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:bd:db:d5:8b:6a:ea:39:27:8c:25:5e:cd:
                    b3:1c:55:70:c4:c4:71:66:c9:5b:87:e4:71:39:15:
                    ac:12:3e:04:39:a5:35:cb:71:cd:23:0e:0a:ff:f0:
                    e5:43:77:0f:26:c8:4a:d4:1a:92:f0:66:9d:ec:8f:
                    95:16:a5:da:9b:11:f8:9f:d5:b3:49:69:8d:c9:9d:
                    56:2f:2b:09:4f:e2:db:fb:ad:9c:f2:d9:f8:08:d1:
                    7e:8f:45:aa:42:d0:ad:6e:11:d6:31:3f:d8:12:85:
                    20:98:ec:6a:1c:f3:81:7b:e1:9e:b7:0d:36:e3:9f:
                    25:08:8e:2c:d3:08:4d:9a:6d:3b:20:01:44:3c:2d:
                    89:e4:f3:72:6f:4a:d0:4f:61:e6:ef:83:c9:cc:57:
                    20:32:41:63:10:3b:15:0a:92:80:86:01:65:4e:bb:
                    99:40:61:4d:ff:84:1b:a1:a3:6a:94:dc:28:2b:6f:
                    6c:69:fc:20:cb:ca:ac:37:b8:c6:17:86:1e:fc:19:
                    79:eb:1c:83:33:06:7f:79:ae:11:a4:58:c5:14:1e:
                    dc:43:50:76:a1:b5:6a:f3:8d:67:b3:d6:3e:99:1f:
                    76:de:ad:ce:d0:bb:c9:42:54:a8:21:fd:cf:39:fa:
                    84:3d:72:dd:78:d9:44:70:f1:fe:88:67:88:ab:55:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7B:5A:CD:1A:9A:7B:7E:41:BC:B1:79:75:B1:FB:29:F1:93:69:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79d28be-5bba-476b-9604-8f30b9f88553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:9f:bb:a8:60:a3:ad:55:73:e4:d6:d1:27:b6:6a:1a:4c:f1:
         b4:4a:0e:06:40:1b:1b:0f:93:86:69:1d:9c:b7:cd:95:5a:e6:
         70:16:1c:57:47:ae:62:b0:2d:f1:81:d4:e7:f7:9c:a3:6d:34:
         0b:bb:bd:9f:91:9e:3b:9d:74:e8:16:0c:72:69:31:0f:78:9b:
         ee:90:18:b4:b7:bf:5d:f8:7b:12:72:a9:1c:3e:ae:43:c6:05:
         11:88:bf:40:20:08:7a:79:70:a7:89:0c:e8:27:f1:da:72:b6:
         6d:34:af:56:02:d0:35:c9:ed:86:38:76:49:ee:df:e9:f5:36:
         56:85:4a:85:49:7f:ac:98:c6:77:55:f5:1c:51:21:39:3a:e5:
         b3:6d:e0:dd:7b:14:e3:4f:7c:de:ad:cb:44:e1:43:44:d4:bb:
         61:1b:0e:07:06:c0:ed:a5:f6:9d:9e:79:ee:7f:d9:52:4c:5d:
         89:74:5e:27:e9:4b:0a:f9:e0:ec:bc:42:9f:e1:e0:fa:f4:06:
         e1:17:81:9b:84:47:d3:84:c6:a6:37:02:fa:ee:16:a0:3e:b8:
         34:02:0e:0c:e3:43:98:f8:c0:b4:b5:6e:36:cc:97:91:06:90:
         a3:be:a8:79:15:70:03:a6:ed:20:98:26:3b:1c:80:c3:a6:e4:
         c3:b3:f0:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:50:05 2025 by rpki-client