This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa89ceec-7353-4213-a5c6-b7359deda91c.roa
File:                     fa89ceec-7353-4213-a5c6-b7359deda91c.roa (raw, json)
Hash identifier:          lyppAphNX9dwTeQw+GGRMCLPr0dAtKhHkGRpNHuR64Y=
Subject key identifier:   CE:38:44:A6:3A:A2:AE:A8:1A:0E:A4:18:6A:3B:5E:4F:50:6E:C5:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       626FC57C20F37105403F795E7BA19368E273DAA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa89ceec-7353-4213-a5c6-b7359deda91c.roa
Signing time:             Sat 06 Dec 2025 02:21:10 +0000
ROA not before:           Sat 06 Dec 2025 02:21:10 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8190::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6f:c5:7c:20:f3:71:05:40:3f:79:5e:7b:a1:93:68:e2:73:da:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 02:21:10 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=95021cb0d08f3b3e4b0f410f3c00f4af0d435859677b0ed1620493e1deb193d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:1d:e3:37:7c:11:6e:65:0d:4e:97:8e:ef:
                    44:85:a3:7c:28:2d:bc:07:0b:6a:a3:af:77:be:c7:
                    73:34:a7:75:a1:0f:41:2d:11:0e:2f:ba:20:44:70:
                    21:5c:74:08:57:b3:98:a7:b0:c6:65:2d:6f:47:d2:
                    50:70:57:fd:43:c2:3c:4a:ca:fa:bf:89:f3:f4:7d:
                    b2:5f:f2:b8:5e:30:75:a5:ef:57:37:ce:cd:95:c9:
                    03:6a:8a:e7:38:e6:cf:e8:6f:da:db:6f:ba:53:f0:
                    79:57:59:fb:94:bc:51:75:41:37:ff:a1:e2:78:0c:
                    61:af:f2:ea:92:f4:c9:8e:3b:17:43:00:5c:cb:ea:
                    ad:ca:55:1d:48:ec:04:c7:6f:a5:fe:52:c3:0d:13:
                    31:6e:ec:7e:17:cd:ec:38:64:f2:10:dd:f6:37:b7:
                    a8:14:4e:b2:22:2f:a6:aa:0a:23:c8:a7:a7:bf:2e:
                    9b:a2:4e:a8:6f:b0:3b:8d:23:86:5b:47:5b:14:fb:
                    62:ba:f1:b2:a6:4f:1d:cc:73:ab:63:8a:bd:c5:6c:
                    c2:bb:28:c9:5b:7c:98:6f:fc:0f:f8:6a:86:4d:a4:
                    9e:1a:15:fe:21:0f:af:c9:7a:a2:80:0a:a7:dc:22:
                    7b:d5:a4:bc:1f:4a:5d:01:86:5f:b1:c0:14:7c:e3:
                    87:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:38:44:A6:3A:A2:AE:A8:1A:0E:A4:18:6A:3B:5E:4F:50:6E:C5:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa89ceec-7353-4213-a5c6-b7359deda91c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8190::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:4b:ab:7c:c7:24:e2:d8:aa:96:90:b0:b2:56:c0:b5:9a:8d:
         4e:32:ff:b2:79:7b:13:d1:7e:15:8f:2c:bc:c0:52:a9:ca:5f:
         0d:c8:b7:71:bf:24:31:46:f5:cb:d7:ca:b0:ef:87:b6:78:b5:
         0f:8b:ec:19:ac:74:3e:66:7e:8e:b2:c4:71:76:f0:ee:b3:3f:
         57:f6:36:51:db:55:bb:2d:aa:67:27:ff:39:86:c8:eb:b9:d2:
         ff:74:c1:7f:ea:ab:2d:99:20:63:f7:a2:7f:e5:51:9c:dd:47:
         d9:12:00:d2:a0:a0:84:03:2e:b8:38:1d:a2:ae:f7:e8:d2:2e:
         c5:c9:f6:da:90:7a:98:cd:77:0c:20:e4:b5:80:32:67:7d:13:
         9f:45:4e:95:c0:4d:33:cf:c8:96:a1:e2:91:a4:c7:40:61:72:
         36:c9:0c:0f:2b:6b:03:9e:9a:c6:c6:e2:65:db:f3:83:5a:59:
         59:02:5b:72:8f:f9:e1:d5:61:c1:11:69:5c:53:85:57:68:57:
         6a:95:ba:3e:62:1c:0b:2a:a1:f9:87:98:d7:90:ca:4a:42:81:
         a3:e4:d8:93:18:52:f2:aa:d8:1e:de:7c:75:06:2c:2d:d0:ad:
         9f:cb:e3:14:30:48:df:c9:50:a7:1e:f3:eb:5d:ec:de:bf:d8:
         38:0c:20:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:36:44 2025 by rpki-client