This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e122f150-4433-49fd-8d03-e561b732c146.roa
File:                     e122f150-4433-49fd-8d03-e561b732c146.roa (raw, json)
Hash identifier:          IKK1lPvinP3ylnptNyUKEW9sp3o/+hK57cP2S5Lq2G4=
Subject key identifier:   CC:55:E7:52:64:91:17:F9:29:2D:3E:4A:6F:E5:37:91:FB:FB:17:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0597D6F1DBAEFCD9BED72FB2DC0CF006001A1B83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e122f150-4433-49fd-8d03-e561b732c146.roa
Signing time:             Wed 03 Dec 2025 00:20:05 +0000
ROA not before:           Wed 03 Dec 2025 00:20:05 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fec:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:97:d6:f1:db:ae:fc:d9:be:d7:2f:b2:dc:0c:f0:06:00:1a:1b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 00:20:05 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=fd875c8dcf7c17f2cbc6b575321df9509c906c1d4dcc67fbe3fee02aea7bc3eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:d7:b3:16:7f:cd:43:cf:25:62:09:70:6d:
                    91:07:7a:bd:ec:d6:8d:3d:ea:13:6e:9b:af:e7:cf:
                    1f:7c:19:a0:94:8a:b9:07:c2:3a:97:dd:99:40:44:
                    67:32:aa:74:9f:35:7f:27:2d:48:51:9d:42:59:48:
                    52:a9:09:e7:34:e8:e9:3c:ba:b9:8d:17:10:1a:fa:
                    bd:55:68:13:0d:40:4f:3f:1a:ee:f1:15:03:cf:01:
                    85:4c:1e:40:c8:c4:36:b3:93:f7:62:9e:d2:24:c0:
                    c4:41:dd:3f:39:01:b9:a9:f4:ff:35:31:a0:47:39:
                    76:d1:19:28:1c:81:29:81:74:b7:3c:e4:b0:4b:fd:
                    30:87:06:95:49:17:f5:c6:15:69:18:f7:b0:05:fd:
                    48:87:bb:a9:56:9d:ae:47:e2:17:7f:91:25:20:5f:
                    f9:f5:fc:63:64:5f:bd:71:c9:9d:66:64:42:81:1d:
                    35:5d:79:fc:80:4a:ba:51:2a:39:ba:a8:cb:fa:c2:
                    9d:e4:8c:5d:0d:d2:b4:80:28:34:c9:60:dc:5a:f8:
                    c7:df:d2:ad:ad:b0:c9:fe:20:6e:da:56:59:d1:5b:
                    c2:c2:ab:57:d6:b4:1b:c7:d7:9a:10:34:f5:f9:ae:
                    c4:98:ba:3e:ab:c3:34:ff:02:5f:92:75:0a:e2:14:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:55:E7:52:64:91:17:F9:29:2D:3E:4A:6F:E5:37:91:FB:FB:17:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e122f150-4433-49fd-8d03-e561b732c146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:da:74:5b:f1:18:f1:86:7f:b3:dc:4c:d3:2b:d8:94:5c:da:
         19:d2:1f:51:1f:7a:13:54:3d:b4:71:38:2b:3b:28:42:31:01:
         6c:15:1c:9d:be:d5:88:49:ef:c5:5b:af:08:7f:03:94:36:2d:
         36:db:13:37:76:2e:8c:3e:e7:7c:78:ef:48:6c:10:6c:f7:9f:
         02:f0:fa:45:18:cd:a2:e8:9f:6c:da:8c:d0:15:de:71:43:a1:
         71:6f:68:3e:d3:67:20:fd:d0:58:28:ce:01:31:96:9a:e5:30:
         13:96:1e:cb:e9:3f:9b:cc:1e:56:b2:04:c8:72:a2:45:69:6f:
         97:b2:4e:13:68:ba:cf:83:7c:3c:a3:ab:7a:40:f0:03:7f:f5:
         17:22:bb:8d:ea:66:a7:b2:db:c1:dc:1e:c7:78:09:64:4c:ed:
         fe:9c:8a:cf:82:ea:05:61:f7:76:a9:6c:77:70:d8:44:9c:84:
         55:f2:b2:21:da:df:ca:eb:c9:12:e8:06:aa:bb:ed:03:9f:d3:
         d2:9b:66:0c:29:28:bf:ce:bf:1e:19:57:6d:e0:05:50:0a:59:
         35:b8:29:2d:01:5c:48:40:13:2f:10:80:76:89:00:81:6d:15:
         a1:4d:67:ad:09:62:94:bb:4d:d3:5e:af:79:71:df:ae:36:9b:
         1e:a1:86:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:09 2025 by rpki-client