This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a9c1ab1-49ce-487d-9702-dc4efc450447.roa
File:                     0a9c1ab1-49ce-487d-9702-dc4efc450447.roa (raw, json)
Hash identifier:          OwL+TNSyEo92Ka7GVsFzpHLQEXXY5PJInwurcV9reeg=
Subject key identifier:   BA:E7:92:87:FC:1B:68:E8:D5:33:90:28:DB:0D:52:A2:B5:8E:7E:46
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5B0B16D362F5E7CB5F7047431D267B3BE780B66C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a9c1ab1-49ce-487d-9702-dc4efc450447.roa
Signing time:             Tue 25 Nov 2025 20:00:08 +0000
ROA not before:           Tue 25 Nov 2025 20:00:08 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6118::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0b:16:d3:62:f5:e7:cb:5f:70:47:43:1d:26:7b:3b:e7:80:b6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 20:00:08 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=5622449aacc54a97f6c1639caeb4f7796519ad5bf114701c73080ad412664590, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:8b:b8:e3:1b:6f:6a:fd:06:ed:1e:82:2d:
                    10:2b:50:0a:15:e0:4c:6a:cb:62:36:f7:10:46:29:
                    e6:9c:4b:f0:f0:65:6c:0e:20:58:77:2b:97:fa:56:
                    ea:f5:54:33:32:7d:67:0a:ec:63:be:96:e4:ec:86:
                    b0:07:90:c8:2e:f5:f1:98:a0:30:af:cd:13:9c:df:
                    5b:37:cb:e9:a2:62:da:25:0b:1d:52:22:81:96:39:
                    1f:d1:1e:b6:8c:67:60:47:c8:01:ab:d5:c8:d1:5d:
                    47:86:e1:20:f6:1d:d7:b1:63:a0:0d:ee:6b:27:b9:
                    20:1d:73:9c:81:5b:3c:e4:e5:03:8c:dd:c7:2d:48:
                    7f:40:e0:b4:c8:c1:7e:2f:67:9b:c5:da:c3:12:44:
                    51:a4:30:43:92:59:87:28:9b:66:7d:d9:97:cd:a9:
                    0c:96:92:96:c2:51:0b:d9:90:5c:4b:da:3c:2e:74:
                    be:15:43:f9:96:45:7c:c1:92:95:a7:4d:17:71:06:
                    7a:a3:47:cc:62:c8:8f:63:3d:74:f3:c5:1f:a1:90:
                    c7:50:c2:64:1e:73:d8:a8:30:d8:be:8e:20:b9:e8:
                    e9:62:3a:48:40:1e:3d:82:3c:0f:e8:54:9f:28:c6:
                    ae:7c:cd:4d:e7:3c:03:e4:79:7a:a6:0d:a8:86:97:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E7:92:87:FC:1B:68:E8:D5:33:90:28:DB:0D:52:A2:B5:8E:7E:46
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a9c1ab1-49ce-487d-9702-dc4efc450447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6118::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:db:5e:72:ca:bc:50:cd:78:1c:20:30:e6:d9:3e:84:99:87:
         76:02:a8:3f:27:ec:01:fe:ba:af:cf:a5:47:44:3d:e6:04:16:
         d2:8c:1f:d4:e4:22:80:00:df:f3:fc:71:ea:48:1e:68:6c:13:
         77:28:1e:81:f3:e3:89:c8:70:4b:01:b9:35:61:71:67:7c:a2:
         cc:0f:ea:d3:c2:f4:39:cf:49:1c:16:2f:a9:33:5a:3f:ce:9e:
         73:a8:4d:8f:61:11:a7:87:b0:0a:8a:81:4e:79:6e:e0:eb:e7:
         4d:71:bc:97:e7:35:09:af:55:13:78:31:76:65:b2:5b:08:a4:
         78:18:e7:58:29:4a:52:f8:ad:69:18:cc:2f:bc:50:fb:29:96:
         3a:03:46:ca:1d:3f:f0:22:f6:84:fa:06:b8:33:b1:70:73:d9:
         c8:1b:63:d6:ea:44:63:f5:98:07:64:ac:5c:21:fd:b5:66:3c:
         a5:5f:ad:54:fe:d7:77:97:7f:46:88:96:d5:20:cb:ba:b7:68:
         b3:e3:5f:7f:f3:cb:9d:75:d4:76:4b:4d:20:6a:c0:d0:fc:5f:
         db:d6:b9:dc:d5:c5:6c:35:3f:0c:d0:ee:dc:e4:b2:6f:cd:ca:
         74:b0:b1:0d:10:7a:00:51:f4:c0:d0:06:be:5b:29:23:70:d7:
         03:06:9f:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:28:00 2025 by rpki-client