This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa
File:                     faa66475-4425-4e85-b798-e003ebb71081.roa (raw, json)
Hash identifier:          DvtxeF7Jl+NyjH3Sw9X1qgRG5nmK8bttTcyXpf3dZwY=
Subject key identifier:   66:6F:DA:A9:49:D5:91:CE:FA:A5:1A:A0:93:25:DF:79:44:69:0F:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       226250AEC46F0D85B8A4EC67440B054C0908312B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa
Signing time:             Wed 03 Dec 2025 00:50:45 +0000
ROA not before:           Wed 03 Dec 2025 00:50:45 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:ac00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:62:50:ae:c4:6f:0d:85:b8:a4:ec:67:44:0b:05:4c:09:08:31:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 00:50:45 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=b25f1048bfd2f8cc56012cc237c6b751b62f713ecee6f260371ea6596c37aa09, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:a6:4a:c2:16:2a:e5:1e:86:3b:75:67:04:
                    ff:70:2c:a7:58:af:2d:98:72:2a:0a:36:1e:a4:d5:
                    1d:c4:c5:91:ec:ff:d9:db:09:8d:2e:83:44:19:8f:
                    ea:46:f8:72:72:21:45:c0:30:f6:9f:29:93:31:8f:
                    7c:7c:9a:f4:d4:ee:16:b0:a4:09:ce:28:81:be:6f:
                    c2:14:37:e1:60:c4:bb:4b:c1:be:6e:a0:14:e5:31:
                    22:5d:cc:94:72:ef:df:c2:03:7a:a9:0f:75:53:4b:
                    e1:1e:d7:7a:03:21:b3:7e:6c:ca:7c:f3:d6:5d:e3:
                    41:b4:f9:8c:d9:fd:f5:b7:b3:00:f3:35:87:57:7e:
                    23:a8:4f:a7:07:85:1f:c0:b8:f1:d2:d8:6c:07:83:
                    b7:1c:79:56:6f:0d:2e:2d:46:d7:90:e9:b4:cf:e4:
                    d6:e5:89:e5:71:1e:e7:58:62:c2:ca:dd:7e:ca:43:
                    3a:2a:b9:69:50:43:f1:fe:19:48:72:ae:a1:90:eb:
                    d9:bd:18:65:07:a6:2e:be:3a:6d:5c:b5:62:32:04:
                    32:a9:14:ba:5a:71:7d:47:75:a1:05:58:ca:b3:6c:
                    19:af:32:3b:fe:11:70:f1:80:c2:08:72:b6:79:54:
                    04:30:f6:a2:1a:9b:47:b8:08:f4:42:f8:53:70:a5:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6F:DA:A9:49:D5:91:CE:FA:A5:1A:A0:93:25:DF:79:44:69:0F:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:ac00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:3d:ce:80:a6:7f:a4:bc:00:49:22:5b:f1:af:7c:1f:40:6b:
         b2:35:12:bc:7f:4c:5c:88:26:d9:97:a3:c0:23:3b:2c:86:80:
         11:f4:5e:4d:80:ee:70:b7:40:14:13:b2:c9:16:56:f0:b0:57:
         98:2c:f8:82:ae:3e:a2:dd:b6:9b:70:6b:91:8a:62:99:d6:4a:
         01:88:03:b4:d1:b0:fa:ba:07:98:92:a9:a4:d7:14:5e:aa:c6:
         0b:b6:bd:33:a2:7a:b7:c1:27:48:e7:0f:45:a2:3c:b8:35:b2:
         81:5e:81:f6:bf:a7:c8:5b:14:24:c4:23:02:07:fc:bb:92:ac:
         ef:cf:02:bb:21:ef:86:8e:e7:e3:c7:ea:46:f7:b3:7e:87:44:
         24:06:5c:8d:36:55:7b:80:10:09:6d:68:6a:2d:7d:05:ac:48:
         2a:27:aa:03:84:e4:c4:de:54:1f:a1:83:f0:38:c9:84:0a:ca:
         51:ce:97:17:7e:2d:43:27:65:17:ca:f9:cb:1c:a2:c4:93:cb:
         3d:19:22:a4:d8:21:3f:f0:4f:ac:e2:cc:bf:94:9b:16:e4:5e:
         e5:5a:da:be:95:03:3d:d7:34:30:e0:c2:21:51:6b:2c:34:87:
         fd:9c:2b:a8:ff:cf:d2:31:80:61:9a:7e:11:7f:bf:9a:c9:cd:
         57:f8:19:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:02:05 2025 by rpki-client