This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce4f6fb5-9c8f-40a2-ba65-57ed341b323c.roa
File:                     ce4f6fb5-9c8f-40a2-ba65-57ed341b323c.roa (raw, json)
Hash identifier:          RtmkEX9SH9bc+6fHlg/gBxN0J3pNLGTEz8WMP6l+nZc=
Subject key identifier:   32:8D:AA:7E:03:BE:62:24:3B:21:4E:6A:1E:BD:28:4F:3B:44:14:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37E850235C3AA7A0BEFEEBD4E192429741775430
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce4f6fb5-9c8f-40a2-ba65-57ed341b323c.roa
Signing time:             Wed 26 Nov 2025 00:40:59 +0000
ROA not before:           Wed 26 Nov 2025 00:40:59 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e8:50:23:5c:3a:a7:a0:be:fe:eb:d4:e1:92:42:97:41:77:54:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:40:59 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=cb72449a59c7190628e17f7de89627a6141b4da8263211afcfe9784932d832b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:b7:86:f5:a2:5e:04:11:26:5e:a4:7b:f3:
                    a4:11:08:d6:31:4a:a3:7a:9e:58:b9:99:14:4b:0e:
                    06:31:b7:ce:76:92:30:76:de:d8:5b:df:92:8d:9d:
                    b7:39:10:70:4b:24:fa:13:1d:c1:23:53:ee:c5:4e:
                    0f:9e:66:1b:fe:e5:01:cf:81:fa:d4:08:bf:3e:d1:
                    0b:b4:7d:1f:d4:69:61:64:1d:2b:2c:6f:1a:f5:7a:
                    e0:f6:51:ef:c0:70:a6:e0:d8:85:65:73:ed:c1:7f:
                    66:e5:59:f1:c8:8d:b1:5e:a1:92:90:43:cb:a0:be:
                    f3:a6:01:cc:f7:d2:2f:ad:dd:94:67:5b:da:f0:54:
                    e9:a5:72:06:f0:a9:aa:68:80:95:c2:86:9f:d7:c4:
                    6b:c6:62:14:cf:d4:de:05:57:6c:08:71:0a:15:05:
                    21:48:1f:43:70:5d:94:47:1f:a5:86:3a:94:a9:75:
                    b5:70:df:c9:5c:35:64:ce:93:6e:c3:f3:de:07:7c:
                    82:fe:8c:27:d5:96:73:6d:24:2c:04:9f:5c:14:27:
                    a7:3b:81:4e:61:5b:c7:08:50:78:b2:c3:be:50:05:
                    95:48:bd:0f:53:00:86:24:e0:32:21:08:24:f3:b8:
                    95:7b:03:35:13:64:49:00:c5:02:dd:ed:dc:c0:66:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:AA:7E:03:BE:62:24:3B:21:4E:6A:1E:BD:28:4F:3B:44:14:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce4f6fb5-9c8f-40a2-ba65-57ed341b323c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:db:71:2c:b3:f8:d8:bc:8e:b7:5b:c0:a6:2b:04:bc:b4:61:
         ad:60:70:0e:25:3d:7b:f9:09:09:6c:78:94:9e:72:86:63:6d:
         8b:e5:35:ec:55:4d:65:04:eb:37:83:d9:41:b6:83:0d:66:ed:
         ef:fe:8e:31:8e:24:c2:5a:6b:9b:c9:bd:9e:c4:58:3e:58:ba:
         1b:5a:53:4b:b0:ee:c4:b2:84:d3:42:74:81:5e:90:2d:6c:ea:
         65:be:87:7b:9d:99:03:ec:22:c6:0c:60:99:c5:12:3a:c4:c4:
         97:72:0d:fa:ba:e4:ae:ce:98:77:d4:47:d4:a3:ed:99:bc:ec:
         45:35:e3:15:3a:e0:31:52:6a:4f:d3:20:e0:92:1c:7f:d5:3b:
         a0:4e:54:16:4a:21:aa:7a:7a:d4:50:d4:ce:d2:9f:39:d7:08:
         2b:81:00:71:c5:68:ef:e3:cc:79:65:48:6a:fe:ca:c2:dc:9b:
         b7:09:86:f6:f4:96:c5:4f:d7:ec:c6:a8:a0:b3:cd:9f:62:bd:
         2d:d2:7b:0f:0f:7a:21:55:77:a8:f8:93:ba:69:8b:24:db:0b:
         9b:d7:ff:e3:cb:32:8d:ac:59:7e:71:ca:78:e5:55:4e:47:4d:
         61:f7:01:6f:0d:b9:7f:62:45:47:c5:0a:35:e0:7c:4b:5d:46:
         54:fe:0a:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:23:36 2025 by rpki-client