This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e38c0ac9-7354-471e-a074-90a74b5b2052.roa
File:                     e38c0ac9-7354-471e-a074-90a74b5b2052.roa (raw, json)
Hash identifier:          Xh9/+DVii5fgo5wtJJ0uXwonsR0Er6DsVjAepmeWUR0=
Subject key identifier:   82:2F:D5:04:39:D5:D2:AC:82:99:9C:A7:CC:D5:D4:FC:09:A5:06:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D508F210465AB9945B43993FE92E2A980B518
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e38c0ac9-7354-471e-a074-90a74b5b2052.roa
Signing time:             Mon 08 Dec 2025 00:31:32 +0000
ROA not before:           Mon 08 Dec 2025 00:31:32 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fed:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:50:8f:21:04:65:ab:99:45:b4:39:93:fe:92:e2:a9:80:b5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:31:32 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=89ba6427d048bd7eecdd2916451c745864ded4215d27a04ccddb5f723b295cc8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:3e:57:0b:1b:40:b1:c4:ad:aa:4e:f2:4f:
                    a2:97:95:2d:7e:2b:f3:69:04:bf:82:52:75:d2:1a:
                    52:7d:e7:26:ac:15:66:90:a5:18:fa:33:4f:60:48:
                    da:04:55:17:34:af:78:9f:3f:91:73:4b:3c:69:af:
                    74:23:8a:dc:f9:dc:74:d0:95:e2:e6:95:9d:61:74:
                    a5:21:58:ba:67:df:63:e1:79:34:d1:2f:fb:a5:7f:
                    b2:8a:8e:10:f8:61:88:80:5f:b1:09:95:a8:f0:b2:
                    5e:73:08:57:cb:e7:26:1f:7c:c2:4f:8b:73:8e:7b:
                    68:0f:31:0a:df:f2:3b:26:c7:5c:e9:5d:86:da:25:
                    cd:0a:b7:de:c5:a2:9c:29:f6:1a:c0:4f:7c:e4:d6:
                    64:e8:8c:07:20:b8:0a:d9:99:76:f5:45:da:cb:a4:
                    ef:58:e7:e2:08:cb:50:f0:17:bf:77:4a:24:85:71:
                    06:97:da:b6:01:ee:2d:a1:04:0d:0c:20:00:1d:e4:
                    28:c8:47:0e:5d:81:01:68:98:1c:59:73:50:b1:95:
                    2a:33:84:2c:a5:05:ca:a3:66:49:ab:e5:d2:2b:8b:
                    ca:85:73:f5:f3:d9:71:f4:7b:ba:03:93:85:a4:ea:
                    19:28:1b:d0:5b:c8:8c:be:e6:34:94:46:d3:af:03:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2F:D5:04:39:D5:D2:AC:82:99:9C:A7:CC:D5:D4:FC:09:A5:06:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e38c0ac9-7354-471e-a074-90a74b5b2052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fed:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:30:90:17:2f:40:21:38:20:4c:5d:61:ca:ef:20:9c:8e:72:
         cd:a0:3d:41:97:c0:a8:1f:13:e3:6a:74:42:67:e5:eb:15:d1:
         09:49:5b:ea:27:35:ee:33:0d:b8:e3:aa:2b:c5:ba:95:c4:64:
         92:e0:70:92:88:d7:d6:c2:b9:c2:f2:27:58:65:0c:ba:83:66:
         39:24:9d:fe:5e:0c:16:d6:9c:a9:c6:fc:1a:ed:82:ec:45:74:
         65:b5:30:db:4c:b0:5e:f9:92:95:a6:29:a0:9a:81:91:79:7e:
         d6:bf:64:30:ed:17:af:ca:8d:34:d3:7b:f0:a1:85:f4:7b:9f:
         c3:ae:5e:5b:4b:74:5e:2a:a4:7d:dc:45:20:92:8a:98:ea:f2:
         00:19:30:14:96:65:f8:78:9c:5c:cb:19:f1:7d:9f:ae:53:ac:
         ec:78:01:43:c6:2c:f0:d2:d6:b1:31:db:d6:3f:fd:35:77:14:
         74:d5:b4:d6:9c:72:e2:b9:79:a4:1b:6d:9b:a4:c3:1b:a8:14:
         1f:23:ff:40:ae:8f:f6:2a:a6:2d:0b:b1:31:bf:63:35:00:48:
         87:d1:33:1a:e3:4f:ab:59:68:ae:be:64:c3:0f:41:09:f5:96:
         10:e3:39:e5:9a:e8:80:9c:bd:66:95:8e:3b:e7:df:e6:01:9f:
         97:de:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:57:56 2026 by rpki-client