This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
File:                     e6538696-8c8b-4e22-8582-42e86ff86c5f.roa (raw, json)
Hash identifier:          sekrTPuWnfI7JI6Y8aQ5/B+0fNmt0s4xBeyVb8cGPbI=
Subject key identifier:   D0:5D:9F:9A:5F:0D:ED:B8:2A:FA:39:F2:A4:A9:CF:AC:30:C2:1B:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2066BB1AC3B9ED7EB007E10194013831A905F6B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
Signing time:             Sun 07 Dec 2025 01:01:11 +0000
ROA not before:           Sun 07 Dec 2025 01:01:11 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2f:4000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:66:bb:1a:c3:b9:ed:7e:b0:07:e1:01:94:01:38:31:a9:05:f6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:01:11 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=25265bb2e54e76a573f35b0c9176366691994e32d082d1a96f53cc16e8c05274, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:e1:58:1f:bc:13:c3:fd:25:d4:35:75:43:
                    05:42:93:be:02:d7:ce:cd:3e:c7:86:ca:1c:ae:34:
                    8d:f2:60:96:56:6d:fc:4f:52:e0:bc:35:25:f2:12:
                    13:4c:c1:81:1b:cc:6c:3c:ad:79:df:3f:d2:30:9c:
                    86:48:05:ec:2d:6e:2e:90:24:48:43:f7:d4:0e:40:
                    73:81:eb:13:70:62:66:49:fa:de:76:e1:02:e4:dc:
                    e4:cd:a1:b5:8c:34:67:ab:8d:73:60:0f:82:6a:d6:
                    a5:60:c9:99:8e:77:03:55:27:7e:b0:76:60:5c:68:
                    51:ad:a7:87:62:55:79:6f:f2:c0:60:68:22:df:36:
                    ab:d8:e2:d4:07:f5:1c:15:e4:9f:47:14:61:45:f4:
                    60:cb:4a:d9:50:a0:07:22:39:a8:39:26:b0:dd:ba:
                    e3:a5:4d:c9:fa:7d:2f:88:cd:10:08:86:99:b4:1b:
                    bd:3a:86:6b:f1:be:c2:4b:38:49:9e:a5:c6:11:92:
                    1a:ce:7e:59:44:64:d1:fa:ac:0d:71:26:09:89:49:
                    75:3b:69:1d:1e:cb:bc:40:02:6a:9c:26:83:f9:c8:
                    d9:24:02:b7:9f:d3:55:47:7c:6c:e2:c9:22:32:22:
                    55:42:20:26:27:c0:99:ea:2f:b2:13:ad:cb:fc:e2:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5D:9F:9A:5F:0D:ED:B8:2A:FA:39:F2:A4:A9:CF:AC:30:C2:1B:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2f:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         34:9b:ac:5f:b6:0d:41:52:d9:26:9a:3e:40:70:d7:22:c4:5f:
         60:8b:43:55:a3:99:67:57:22:7d:65:8d:03:6e:9a:34:a1:c8:
         27:d9:dd:83:88:ed:89:9d:21:cc:ad:13:7f:89:18:62:02:28:
         a4:c6:6a:5b:80:10:8f:3a:70:ac:b8:38:ff:56:1f:2c:e1:b6:
         e2:58:33:6b:ae:79:91:aa:f2:a0:f3:d2:a1:c9:0f:12:81:70:
         ff:22:ea:20:7f:65:5a:b2:04:70:bf:cf:97:25:22:3f:9b:0b:
         9b:0e:7b:e5:b2:13:65:5d:fc:b3:e8:7e:b5:22:8a:23:da:77:
         16:f9:54:fc:e8:f2:79:de:04:7b:2a:0b:7c:09:8f:21:00:ca:
         a3:8f:1b:e5:2a:a0:74:f4:32:f5:1a:58:ce:4f:87:5d:58:28:
         47:ed:11:f5:0f:f0:ca:58:9a:96:d4:5f:94:fb:e9:6f:8e:8c:
         21:11:38:33:98:6c:c8:7c:d0:ac:35:cb:74:16:99:14:e0:64:
         f0:28:84:7f:cc:71:77:28:28:5d:8c:37:87:ed:e9:1d:59:fc:
         fa:6f:66:8c:da:1b:4d:fd:b6:c5:6f:d9:39:b3:c4:16:2b:1a:
         90:e7:51:8a:11:6d:b2:21:24:31:d0:4b:58:bd:6c:d5:f1:02:
         41:08:08:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:49:50 2025 by rpki-client