This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3414ea9-02c3-4da9-9f8f-25c69cfc68b2.roa
File:                     d3414ea9-02c3-4da9-9f8f-25c69cfc68b2.roa (raw, json)
Hash identifier:          btimkkRWgvGO2PSBPJCvD5oRB1EdJUdEFOxPkgPwVpo=
Subject key identifier:   E8:93:8A:50:C0:20:DF:8D:5B:B6:AD:F0:24:85:06:61:5E:2C:EF:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41C17AD69E203614DC4643711F2C4DA07865BF5B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3414ea9-02c3-4da9-9f8f-25c69cfc68b2.roa
Signing time:             Sun 23 Nov 2025 01:21:04 +0000
ROA not before:           Sun 23 Nov 2025 01:21:04 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:a440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c1:7a:d6:9e:20:36:14:dc:46:43:71:1f:2c:4d:a0:78:65:bf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 01:21:04 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=51f746bd20a9146a061803f9a7120c57e5dd7db2f0369dc1ba0b1529965c8c16, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:30:10:9d:3e:8c:aa:88:a4:9f:62:f7:c2:
                    ba:6d:b0:0b:97:05:8d:5c:22:c9:60:56:8b:b3:b7:
                    d9:61:65:70:f7:57:e6:be:f0:80:46:b8:74:c0:f4:
                    2e:f9:fa:bb:7d:b0:4a:bd:dc:e0:f2:f7:bf:0b:34:
                    5f:d3:ec:43:e6:6d:b3:1e:be:c2:4a:f6:01:33:98:
                    ef:db:44:41:f7:03:b4:07:93:5f:60:7f:51:d9:cb:
                    0e:0b:b9:85:e1:96:91:e2:82:80:77:bb:3c:cb:65:
                    83:d6:0e:82:59:eb:58:c3:1c:42:ca:7b:68:68:a3:
                    5d:87:8a:41:05:62:a3:8e:db:a9:37:59:04:c3:fb:
                    46:b6:c3:3c:11:f3:2d:02:a3:53:c1:9e:89:31:a6:
                    41:d8:77:2f:17:23:4c:12:64:b7:4b:ef:48:d0:c5:
                    9f:bc:5d:06:7a:af:a3:9b:b4:0b:15:07:3f:4b:94:
                    bd:8d:9a:13:7b:14:28:05:cd:cf:0e:fb:94:57:f2:
                    f5:76:3d:c3:63:d1:c2:8b:15:e1:59:7b:c2:10:5b:
                    d5:4d:df:73:a9:ac:f6:82:20:75:6d:f2:e6:7d:86:
                    6a:c4:46:96:c3:0e:44:b1:11:58:e1:f6:52:5c:cc:
                    ea:bc:c1:b9:33:3b:e0:16:38:5a:5b:71:98:98:8f:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:93:8A:50:C0:20:DF:8D:5B:B6:AD:F0:24:85:06:61:5E:2C:EF:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3414ea9-02c3-4da9-9f8f-25c69cfc68b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:a440::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:04:f6:86:cd:03:7b:82:19:ed:29:6e:3b:57:2d:6c:6d:4d:
         56:f6:aa:09:20:e0:99:ea:35:ca:60:fc:69:62:00:89:2a:26:
         c4:f1:41:15:a1:bb:60:cf:62:46:22:5e:86:37:d6:0d:e9:ee:
         66:6a:0e:05:fe:e5:02:58:c7:d8:ef:f1:5c:c1:0f:4f:a8:00:
         48:c3:cf:90:51:86:19:07:cf:81:33:40:74:7c:a6:c9:4f:06:
         92:fb:86:d6:72:1b:af:85:19:6d:8f:e8:dd:01:ef:0b:d4:a4:
         33:7a:eb:0c:1a:f3:ea:d6:ce:cb:60:5f:2b:a4:b7:3b:4e:03:
         08:5f:63:8c:cc:f4:30:77:13:d5:f4:b9:45:0c:39:b3:54:83:
         0b:db:7d:d2:12:de:7b:a3:ab:1d:9a:0d:d7:9a:f4:e4:35:c2:
         84:21:25:27:06:84:f1:53:0a:1d:72:6d:00:65:10:26:1a:d2:
         44:e3:91:7b:22:c9:e9:25:18:51:af:5b:c9:80:81:45:1d:06:
         cd:90:80:79:35:8e:9f:11:fa:bb:a5:60:05:ef:b1:de:6b:b0:
         e2:2e:a1:c9:80:66:fc:c4:6e:05:f9:e8:d0:5e:c7:e1:a1:66:
         ee:8e:96:51:33:d5:97:3e:49:b1:6f:57:43:0f:41:09:f5:8d:
         de:48:ad:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:59 2025 by rpki-client