This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/038bfc14-70d0-4845-80d9-ef20d84714c7.roa
File:                     038bfc14-70d0-4845-80d9-ef20d84714c7.roa (raw, json)
Hash identifier:          YpEsJsAFAkMw+4nbCpgMcIUhJ1NYbTR2z+GJXHdwWZE=
Subject key identifier:   2B:24:6A:C3:01:97:ED:4F:01:67:03:69:D4:25:90:9B:8E:6A:AD:3A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7F005BFA86F01569F7391BDE08CD8018337AB138
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/038bfc14-70d0-4845-80d9-ef20d84714c7.roa
Signing time:             Sun 16 Nov 2025 00:50:04 +0000
ROA not before:           Sun 16 Nov 2025 00:50:04 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f10f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:00:5b:fa:86:f0:15:69:f7:39:1b:de:08:cd:80:18:33:7a:b1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 16 00:50:04 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=23563087ee1b84cae210b49e884c4bf3a1f254b2dfa7257976f956ead50c06e3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:4b:6e:71:c0:e8:ec:40:25:a3:77:b8:d3:
                    3c:df:df:23:74:08:6e:ba:56:3c:82:1b:c5:fc:0f:
                    78:4a:34:88:0b:d4:7e:a1:79:5f:59:81:d2:c2:56:
                    f6:ce:76:8f:82:42:a6:48:2d:cc:fa:72:39:6a:41:
                    cd:be:21:8e:5c:41:bf:30:d6:35:62:2d:32:ce:3d:
                    bb:ad:57:ad:fc:26:4b:29:6b:e5:d4:af:fd:8b:cf:
                    41:6f:bf:57:b2:c6:01:9f:f8:ca:68:80:38:5c:03:
                    7a:2c:1b:3d:df:31:7c:06:93:7c:b2:29:b4:28:56:
                    77:57:1f:bc:cd:c5:60:2b:70:cc:c2:28:cc:11:ce:
                    9d:f1:3b:91:99:75:85:32:35:85:c7:5d:0a:20:78:
                    20:47:e8:74:d0:6a:2a:d3:49:91:71:ba:b9:11:78:
                    be:2f:07:b0:83:74:9c:29:38:6e:98:8b:ab:ce:ca:
                    84:4e:66:be:75:79:3d:f5:5a:ce:2a:27:13:8f:b3:
                    d4:55:4c:ac:1c:2e:47:13:cd:4d:09:c5:27:d7:d1:
                    68:1b:cf:3d:c9:d3:76:8e:50:c6:4d:92:aa:ba:64:
                    db:4d:d4:7b:5d:c6:65:76:a8:66:2a:03:21:1b:1f:
                    8e:a5:3d:96:d1:3d:08:17:6f:5a:f6:83:37:4e:fc:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:24:6A:C3:01:97:ED:4F:01:67:03:69:D4:25:90:9B:8E:6A:AD:3A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/038bfc14-70d0-4845-80d9-ef20d84714c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f10f::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:51:2b:55:ab:32:30:90:46:8c:68:1e:e1:b0:09:3b:94:
         49:08:ab:8a:5e:41:5c:be:a5:d5:92:0e:97:0a:67:f0:8b:22:
         0c:ed:4e:06:8b:23:18:0f:65:38:d3:f0:28:75:cf:4f:19:33:
         91:ea:35:a4:c5:cf:17:38:83:8c:2d:f6:5e:0b:04:e9:64:b9:
         3e:0e:49:98:d8:6a:5b:2f:ed:ab:f0:27:c0:bc:00:c6:9f:ad:
         46:44:dc:27:c7:56:01:2b:80:c6:54:b3:21:30:2d:aa:38:47:
         e3:01:89:c8:ed:8d:80:11:41:9a:72:79:3f:de:e8:8f:66:56:
         15:6a:af:27:78:52:54:6f:5f:98:f5:65:15:57:7a:c2:66:0a:
         b0:ea:9b:12:04:7c:7b:77:89:a6:a3:44:84:a5:0f:c7:dd:51:
         cc:86:26:cd:66:e9:55:1a:0d:de:1b:53:d9:0f:2c:55:08:1b:
         28:96:8e:2f:07:86:34:c6:10:c8:9f:77:17:82:c4:dd:47:42:
         81:96:b6:32:ee:fd:ca:52:d2:c6:11:27:bb:7c:81:0e:b3:c0:
         ac:6a:40:bb:95:44:b8:59:1f:96:5b:c4:8a:81:e5:eb:4c:5d:
         da:94:6f:db:a5:01:30:0c:79:1f:a6:f2:06:d1:f5:a9:fe:61:
         56:85:ae:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:43:51 2025 by rpki-client