This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/0c492edd-c347-4b97-a816-01566f9d097b.roa
File:                     0c492edd-c347-4b97-a816-01566f9d097b.roa (raw, json)
Hash identifier:          UpJKY2N5j2ZhiZj+N2gP8+1CMmlA3+wjTn2w6y9XJKY=
Subject key identifier:   71:17:8B:B1:DF:0F:A8:D8:17:0D:91:5B:ED:0B:AE:3A:CD:C3:FD:D5
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       18B343F1CC686A2712F4DBE3EC2B1171E705D040
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/0c492edd-c347-4b97-a816-01566f9d097b.roa
Signing time:             Sat 29 Nov 2025 00:00:07 +0000
ROA not before:           Sat 29 Nov 2025 00:00:07 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b3:43:f1:cc:68:6a:27:12:f4:db:e3:ec:2b:11:71:e7:05:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Nov 29 00:00:07 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=9b16c6a20c3a1c4319086e696975102bf2a6944692bcc6ee32ad2c137ce94f57, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:53:a2:3e:fa:00:cc:69:20:4a:a8:63:08:
                    8d:84:08:3b:20:a8:f7:9a:31:99:0d:d5:97:f9:90:
                    2f:43:b5:b3:76:38:d2:5f:4c:47:bf:00:0d:30:ce:
                    f5:82:9b:5d:b4:88:40:c0:19:55:4e:f8:b3:6a:a5:
                    eb:ed:96:73:d5:63:49:9f:2b:e4:61:b2:ee:53:78:
                    a6:f2:f8:b0:bb:1e:9e:0b:b6:eb:e8:f5:99:71:0a:
                    40:62:eb:e1:41:a9:37:34:fc:b8:f1:60:08:f6:06:
                    8e:d9:45:e8:ee:fa:5b:5b:18:29:5c:64:9f:ff:d0:
                    f3:f9:71:45:b5:50:51:f1:21:9e:43:de:d4:b2:a7:
                    62:50:48:98:29:33:80:84:88:0c:b8:09:ab:bc:85:
                    fd:1a:aa:61:b8:60:ad:7d:d1:0b:5b:c4:77:9d:24:
                    6d:ff:2d:e7:db:25:2c:8c:db:5f:fa:ef:2a:1c:cd:
                    f0:20:ac:18:5a:8f:e8:0f:45:f5:57:24:4e:87:67:
                    7e:80:d2:e7:af:7b:a7:54:7b:1c:a9:e7:64:90:46:
                    e3:2b:65:79:75:a9:88:2c:71:6f:08:cb:f1:73:cb:
                    95:6e:65:14:87:95:e0:76:41:0a:96:1c:ab:b1:69:
                    ca:a5:62:ab:44:ab:71:c6:61:6c:da:f5:a8:63:d2:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:8B:B1:DF:0F:A8:D8:17:0D:91:5B:ED:0B:AE:3A:CD:C3:FD:D5
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/0c492edd-c347-4b97-a816-01566f9d097b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         01:78:c0:0d:dc:1a:8d:ef:52:bb:14:84:6c:61:59:63:d5:b3:
         00:a2:02:ea:02:a1:c9:87:fc:32:80:f7:59:6f:a8:cb:8f:90:
         4f:3c:01:c3:9d:4e:1e:26:2f:f8:d2:0a:98:40:bc:93:ec:1f:
         b5:c8:3a:fe:b3:7c:83:2d:47:20:46:97:0a:bf:e9:72:31:66:
         6d:bb:58:18:ab:33:5b:d7:e9:be:22:39:4d:50:c3:e1:bf:1d:
         eb:23:e8:1a:a1:11:85:fc:04:98:ef:24:68:2d:d9:bc:72:a1:
         d1:22:eb:fc:e0:f3:4e:9a:9f:11:23:a3:c2:31:80:f2:92:72:
         06:70:3f:34:8e:a3:78:f2:56:de:d4:71:b8:56:b1:09:b0:83:
         1d:45:8a:df:8a:7f:39:00:63:ff:7d:5c:71:27:a4:18:00:e8:
         96:10:8a:de:37:cb:cb:d8:72:5a:a1:18:73:74:6c:20:87:d0:
         f0:2e:09:dc:b0:a3:18:36:a6:4a:88:5f:81:08:9a:be:9a:8b:
         6e:a8:b4:8d:c9:5d:35:7d:40:c3:0f:44:a8:ce:71:fc:0f:dc:
         23:3f:b3:b3:61:69:b6:a4:d6:41:61:13:4d:85:46:c3:f0:36:
         39:1a:d4:ef:e0:55:91:04:a6:ae:fa:e6:47:f9:99:75:2a:95:
         06:58:0f:2d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUGLND8cxoaicS9Nvj7CsRcecF0EAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4
NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjUxMTI5MDAwMDA3WhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjE2YzZhMjBjM2ExYzQzMTkwODZlNjk2OTc1MTAyYmYy
YTY5NDQ2OTJiY2M2ZWUzMmFkMmMxMzdjZTk0ZjU3MS0wKwYDVQQDEyQ4Zjk1ZTRk
MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDD/FOiPvoAzGkgSqhjCI2ECDsgqPeaMZkN1Zf5kC9DtbN2
ONJfTEe/AA0wzvWCm120iEDAGVVO+LNqpevtlnPVY0mfK+Rhsu5TeKby+LC7Hp4L
tuvo9ZlxCkBi6+FBqTc0/LjxYAj2Bo7ZReju+ltbGClcZJ//0PP5cUW1UFHxIZ5D
3tSyp2JQSJgpM4CEiAy4Cau8hf0aqmG4YK190QtbxHedJG3/LefbJSyM21/67yoc
zfAgrBhaj+gPRfVXJE6HZ36A0ueve6dUexyp52SQRuMrZXl1qYgscW8Iy/Fzy5Vu
ZRSHleB2QQqWHKuxacqlYqtEq3HGYWza9ahj0vrbAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUcReLsd8PqNgXDZFb7QuuOs3D/dUwHwYDVR0jBBgwFoAUHl8tYvha0oTU
0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05
Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm
NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh
MzhjMzJmZDRjLzBjNDkyZWRkLWMzNDctNGI5Ny1hODE2LTAxNTY2ZjlkMDk3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl
LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmBg9AgDANBgkqhkiG9w0BAQsFAAOCAQEAAXjADdwaje9SuxSEbGFZY9Wz
AKIC6gKhyYf8MoD3WW+oy4+QTzwBw51OHiYv+NIKmEC8k+wftcg6/rN8gy1HIEaX
Cr/pcjFmbbtYGKszW9fpviI5TVDD4b8d6yPoGqERhfwEmO8kaC3ZvHKh0SLr/ODz
TpqfESOjwjGA8pJyBnA/NI6jePJW3tRxuFaxCbCDHUWK34p/OQBj/31ccSekGADo
lhCK3jfLy9hyWqEYc3RsIIfQ8C4J3LCjGDamSohfgQiavpqLbqi0jcldNX1Aww9E
qM5x/A/cIz+zs2FptqTWQWETTYVGw/A2ORrU7+BVkQSmrvrmR/mZdSqVBlgPLQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:34:55 2025 by rpki-client