This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fba6b008-4b15-445e-bf72-4181fbf88a82.roa
File:                     fba6b008-4b15-445e-bf72-4181fbf88a82.roa (raw, json)
Hash identifier:          IG83ZU6LGTh7wnSeeuJVfVB3H06p3JEb6TykYQReh8A=
Subject key identifier:   E2:63:81:79:B7:EE:C1:5F:18:D6:C1:8B:08:35:2F:BB:8F:BA:D8:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C2F8600A19CA7C096A73BA09CFF0E8731BE71F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fba6b008-4b15-445e-bf72-4181fbf88a82.roa
Signing time:             Sat 06 Dec 2025 02:00:12 +0000
ROA not before:           Sat 06 Dec 2025 02:00:12 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:6040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2f:86:00:a1:9c:a7:c0:96:a7:3b:a0:9c:ff:0e:87:31:be:71:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 02:00:12 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=31f6e86381d1204ea3d88d700677a7eab7579bc5e2ba8cf73d7fc427fedfb8c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:79:5f:0c:d5:97:40:c5:1b:19:73:31:4a:
                    cf:7e:b9:39:33:4c:34:7e:12:41:d2:2f:2b:76:33:
                    a4:0c:0d:35:46:06:f6:a1:1b:d5:6e:ef:ef:c0:ff:
                    a6:f8:61:60:a5:99:cb:d5:9e:09:23:37:88:b0:d7:
                    d2:b6:e3:b7:58:a5:05:87:da:66:4d:f4:c6:5d:e8:
                    7a:10:4d:b3:2f:23:8a:07:5b:18:12:23:6e:a7:f2:
                    07:45:c8:e6:85:d4:e8:fe:61:92:2c:1f:f3:6b:f2:
                    36:7f:38:09:84:d8:c5:c1:ea:91:52:68:a1:e4:b9:
                    53:19:70:d5:8f:85:92:88:a1:48:d9:de:90:12:99:
                    9f:1c:3e:f0:86:7d:f4:52:60:31:e2:40:98:47:40:
                    ca:12:8a:b4:05:34:08:04:9a:81:6c:be:0e:ee:60:
                    b9:30:70:8a:95:23:ca:03:ce:bd:50:69:bc:39:a5:
                    6b:ef:1f:31:ec:df:15:d4:ec:36:e3:8f:be:28:19:
                    4d:cc:44:a2:a8:fb:d1:c0:97:a2:e0:d8:c7:65:41:
                    f1:de:38:c8:21:75:dd:b2:48:e0:d9:aa:5b:f5:76:
                    ad:98:c8:b0:ca:d7:29:c6:17:5c:a8:1b:84:18:8f:
                    16:29:37:e0:b9:a2:8e:7c:46:02:35:72:49:05:83:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:63:81:79:B7:EE:C1:5F:18:D6:C1:8B:08:35:2F:BB:8F:BA:D8:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fba6b008-4b15-445e-bf72-4181fbf88a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:4f:fd:c1:36:a5:8b:15:fc:df:90:97:85:0b:36:35:53:2b:
         4b:e2:70:de:2d:ea:7f:49:f9:37:55:95:c6:de:4d:12:ea:73:
         d3:46:01:ad:54:ab:e3:3f:c3:74:71:bf:46:7b:c4:75:17:32:
         6c:0b:16:10:46:9b:5c:68:de:5a:87:65:c4:78:7b:e8:4f:98:
         fb:e6:89:c4:e6:f8:72:c9:4f:74:68:47:48:52:45:5a:ff:10:
         4e:3b:43:0f:f9:c3:7d:11:22:9b:b9:73:30:ed:40:e2:80:e2:
         1b:3b:44:53:a3:0e:21:de:96:a7:84:0a:ff:94:a3:69:8e:37:
         cc:4f:1a:f3:59:78:13:26:f2:4a:0c:95:0c:7b:45:85:82:56:
         c0:25:7a:77:d6:b6:89:90:b9:82:7e:64:dd:2b:c3:58:38:af:
         1f:56:9a:f1:ee:35:5c:c4:fe:78:66:6b:3c:36:22:cb:5d:b0:
         0d:b1:4e:af:89:d8:d9:7e:7e:b2:e7:9b:6c:c2:9e:c9:65:63:
         38:5b:34:4e:f2:d1:b6:d5:d2:b8:0f:30:eb:48:bf:99:b2:03:
         5b:8f:cb:b8:ca:fb:65:cb:f9:a6:a1:41:0c:64:b1:2f:51:09:
         61:c5:58:0f:61:ef:dd:52:8b:93:c1:30:56:34:a2:77:72:9f:
         1c:91:2a:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:56:40 2025 by rpki-client