This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa
File:                     6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa (raw, json)
Hash identifier:          n2xH9LCnS0Ity5f73w1K6sPcT96M6J3OaMYYoqPDPIw=
Subject key identifier:   CC:0C:67:7B:21:9F:9A:A7:8E:96:DD:A5:26:9D:BD:93:4E:05:B8:A9
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       310383478C81F7976E66738F89602B744BAD5694
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa
Signing time:             Tue 25 Nov 2025 00:10:05 +0000
ROA not before:           Tue 25 Nov 2025 00:10:05 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:03:83:47:8c:81:f7:97:6e:66:73:8f:89:60:2b:74:4b:ad:56:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Nov 25 00:10:05 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=12be412c06ba0098640bdbcafc933482560261dab4b35a2b07cd64a00fc60493, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:7a:7a:65:78:52:36:02:63:fe:c2:cb:7d:
                    16:c7:15:97:bb:76:ec:3c:18:0d:fa:12:a2:27:88:
                    03:da:90:b6:a6:4a:81:15:22:46:1f:ac:36:f8:1f:
                    69:a1:d2:06:ff:b5:e7:07:8c:0b:ac:d0:d3:f7:df:
                    2e:80:2b:64:c5:58:9c:61:31:8b:61:9c:55:16:ff:
                    b0:2e:c0:1a:30:3b:6f:a8:be:07:30:15:45:d5:33:
                    71:78:a2:22:b9:22:59:40:60:d0:c1:47:75:9d:a1:
                    74:96:18:70:04:fe:e0:21:25:d9:92:14:de:5c:a1:
                    23:18:b2:68:a2:59:d8:18:30:c6:90:df:0d:c7:dd:
                    ea:73:66:c1:a4:c5:38:49:db:ee:36:3d:82:8a:c7:
                    68:c8:23:43:d7:49:46:7d:85:09:61:cc:99:01:49:
                    c6:f1:f4:27:7f:6d:82:8b:99:32:6f:08:99:d3:03:
                    80:2a:22:8f:fe:ed:aa:2a:c7:21:ae:94:1b:5e:f8:
                    5c:85:8e:aa:ca:0b:35:62:af:db:be:86:1b:d1:b2:
                    6a:3b:4d:ba:c9:cd:69:98:b0:6f:16:b8:67:4c:68:
                    56:b6:dc:d4:b9:c6:c4:79:2d:5a:39:bf:c7:f6:2e:
                    ce:8d:4c:1c:d3:77:24:3f:c3:fa:eb:e9:ad:ee:c5:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0C:67:7B:21:9F:9A:A7:8E:96:DD:A5:26:9D:BD:93:4E:05:B8:A9
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:35:d0:77:93:f5:55:4e:cb:1a:c5:12:5a:6d:66:9c:66:de:
         18:1a:81:e6:af:f4:8a:8d:70:1a:8c:5d:a7:70:65:7e:ab:1e:
         37:fd:34:dc:09:29:ac:8c:32:55:17:a3:97:70:51:28:4d:a1:
         2c:26:18:c2:dc:f3:8d:3b:52:b3:77:15:8b:93:ef:00:7b:f3:
         67:27:82:f5:dd:d1:2e:2e:69:ee:c5:82:1d:61:be:02:bb:2e:
         9e:85:7a:99:99:ff:57:89:63:d0:55:4e:02:df:c0:00:aa:9f:
         98:ca:a5:f5:13:68:03:e1:4e:2c:ea:2e:51:f5:d6:44:8e:ec:
         1f:8b:a0:df:38:c5:d5:6e:87:8a:31:32:5b:d8:4d:2a:0d:13:
         2e:39:70:b7:f0:50:d8:a2:1d:bf:b9:6f:5d:7e:45:90:5b:cc:
         65:ce:16:56:9c:74:41:66:ac:c0:69:0d:26:41:2f:77:e3:6a:
         09:9c:f6:3a:2a:02:30:f4:f8:24:b6:df:66:90:43:fa:79:7e:
         b0:b7:25:50:ea:0a:d5:74:77:66:b2:f2:e3:ed:e9:49:09:9e:
         90:0a:13:e8:11:fb:2f:39:a8:fb:6a:e7:f1:bc:d0:b8:2c:b1:
         af:96:41:9a:83:0f:0f:f3:ed:8e:ed:93:7c:4f:4e:0a:c3:05:
         1f:18:e6:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:59:08 2025 by rpki-client