This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7fd3545-77f1-4387-9569-710d9169bc6e.roa
File:                     f7fd3545-77f1-4387-9569-710d9169bc6e.roa (raw, json)
Hash identifier:          Z05bFdlJLM4ok4IEQji5VqHUYVT0xm6y/KGbNXxwI4o=
Subject key identifier:   45:36:AE:44:D4:28:80:F4:68:D4:65:C7:8D:FF:DB:AA:58:5E:FA:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       614F262EC83FA480B57930FA17DFBEEDFC26A446
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7fd3545-77f1-4387-9569-710d9169bc6e.roa
Signing time:             Tue 25 Nov 2025 01:00:04 +0000
ROA not before:           Tue 25 Nov 2025 01:00:04 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4f:26:2e:c8:3f:a4:80:b5:79:30:fa:17:df:be:ed:fc:26:a4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 01:00:04 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=bcbcfddd24a4dd5ea393bca6a0f7d8952a728087d547fbad95b508105ef01105, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:c4:3f:80:f5:f8:48:50:6f:ee:0d:b9:07:
                    93:f7:07:20:93:ad:3b:be:20:17:ee:d9:83:e8:96:
                    7d:a1:ef:1f:b6:f4:75:27:e3:4e:d1:17:b7:8a:a7:
                    25:89:04:d1:a3:ee:c8:fc:79:90:16:19:17:f1:72:
                    3e:62:f6:c1:e6:97:e2:73:34:cd:f4:aa:62:e2:a2:
                    a3:ff:4e:ff:c6:46:8d:ab:c7:21:44:47:6d:30:19:
                    99:0f:e6:3d:bd:3d:56:ac:34:5c:6e:8a:a3:fc:ba:
                    b7:cf:90:bf:2b:19:61:ad:a4:0c:b8:e5:19:d1:03:
                    1d:65:93:22:2c:b5:95:e2:52:1d:0b:e4:3b:2d:1f:
                    6a:51:4e:c7:f9:92:b1:69:5d:9e:de:d1:07:df:ef:
                    bd:28:ca:54:06:a4:76:75:e1:c2:2c:a8:b4:95:9e:
                    90:e7:db:6c:b6:86:5c:4d:82:78:49:31:82:2b:8c:
                    ae:a0:25:f5:ed:44:98:ab:e9:33:e9:01:38:97:37:
                    cd:55:bb:2f:0f:4b:2c:a7:61:0c:82:8f:9c:7d:7e:
                    0b:d9:ef:cd:9a:90:38:b7:35:b1:88:8a:90:0d:fd:
                    6e:92:97:41:68:eb:cf:95:f5:fb:40:32:f8:e7:22:
                    b9:5b:21:cc:6f:0b:93:95:d5:17:e8:50:a1:83:08:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:36:AE:44:D4:28:80:F4:68:D4:65:C7:8D:FF:DB:AA:58:5E:FA:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7fd3545-77f1-4387-9569-710d9169bc6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:60:06:39:25:82:87:b2:74:3f:e3:93:fe:3c:24:d5:5e:ae:
         a7:41:90:e6:8f:09:fe:fd:71:a9:dc:da:28:d7:18:85:59:c3:
         4c:f3:bc:a5:a5:e7:4b:b5:c4:97:3b:2d:1a:0b:af:b6:03:e2:
         a1:81:34:97:68:68:35:66:04:0c:18:d4:39:cc:f2:cb:50:ed:
         41:0e:95:8d:57:57:cb:9d:11:c4:06:16:f2:8d:8f:4e:6f:c2:
         e4:9c:f4:85:a1:c2:61:f3:f4:d8:c8:c0:f3:93:cb:27:1e:a4:
         dc:69:4c:46:3a:19:86:64:f3:67:14:6b:31:5f:5f:81:7c:88:
         c9:09:61:e7:10:3d:f1:c7:8e:75:cb:1e:3f:99:50:56:b1:5f:
         a7:f3:31:69:bd:14:99:14:df:e9:d4:e7:28:31:71:53:c4:89:
         75:bd:48:a0:1c:ce:0e:10:5a:01:ba:95:11:2e:bb:fb:f2:0b:
         29:e1:26:56:92:ae:c5:e0:fc:89:b9:94:85:28:6c:84:23:79:
         c5:34:66:c3:a2:76:d5:1d:d4:1f:66:10:49:79:a5:22:87:cd:
         38:2d:77:ff:9f:9c:96:1f:59:b1:9e:9b:f3:9a:aa:7b:9a:5a:
         d9:8a:b4:0f:8a:44:1d:dc:1e:ea:72:0d:f0:2a:a6:80:fd:cd:
         ba:64:13:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:40:02 2025 by rpki-client