This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa
File:                     0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa (raw, json)
Hash identifier:          OAXCMXja4XXH0Zg7sVcewvjsl/gQf6QmXbZZ8p5I/Io=
Subject key identifier:   82:BF:58:E4:50:4E:3D:34:A4:53:C2:1B:8B:3D:37:AE:CF:8D:62:5C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7028E0309AEA6BA6460F8B8A333A01D174CA9018
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa
Signing time:             Sat 15 Nov 2025 05:10:43 +0000
ROA not before:           Sat 15 Nov 2025 05:10:43 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:28:e0:30:9a:ea:6b:a6:46:0f:8b:8a:33:3a:01:d1:74:ca:90:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:10:43 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=a2ef54ac55e7a2349c0a8b16614c9bc60eb6f3ffce39577e27287a9c82ffd63a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:31:b3:b5:40:b2:a5:97:db:d2:d0:53:63:
                    0f:b9:a2:ac:cb:7a:00:08:78:b9:bb:c9:c7:fe:9a:
                    73:fb:fe:f3:bc:06:48:76:56:d0:61:40:e0:28:ac:
                    02:51:66:4f:9a:ed:1d:6d:f5:36:ad:af:23:4b:5a:
                    b1:8a:6f:66:1b:de:7d:b8:fa:b6:62:17:23:7e:e4:
                    0d:dc:fb:80:2f:2b:88:a1:c6:76:df:26:df:30:ac:
                    54:c7:05:5e:49:b0:9e:ff:ed:cb:d9:33:48:e1:14:
                    2a:97:2c:f6:d0:f1:c7:cd:a1:62:5d:96:c2:fd:85:
                    e7:86:49:fe:81:7d:82:a2:ef:d6:41:e7:ed:f6:8d:
                    bd:67:67:96:da:57:13:da:fd:df:30:62:8b:0f:10:
                    b9:81:09:f8:a9:90:f3:85:cc:85:7f:a4:21:7b:e5:
                    37:5b:4f:99:20:b1:ad:e1:ff:33:77:df:cf:00:e2:
                    34:3b:a7:34:a7:4d:41:fb:db:99:5a:a0:ae:79:1b:
                    b5:e7:41:98:47:6d:b4:47:93:b4:87:1c:bf:f9:92:
                    e2:8f:38:0b:26:75:47:5b:14:1d:5d:0f:b4:a3:82:
                    c7:05:41:c2:88:63:fc:2b:ff:51:51:8e:7d:4a:50:
                    a8:0a:d7:22:e8:da:22:f6:c1:67:88:1f:43:19:78:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:58:E4:50:4E:3D:34:A4:53:C2:1B:8B:3D:37:AE:CF:8D:62:5C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:43:0a:9a:cd:7f:ee:be:91:f7:66:01:8d:81:e1:12:a7:89:
         70:4d:9b:48:3c:6d:8c:09:5e:6e:82:b7:bf:a7:e0:e9:6d:bb:
         d5:fe:8d:95:ee:40:24:db:9f:33:7b:9f:07:67:37:c2:c0:25:
         a1:a1:53:88:cb:05:4e:cd:40:04:05:6b:da:7a:36:9f:4b:82:
         bb:38:ea:98:e8:7e:90:b4:fc:d1:87:18:e9:77:5a:49:1f:64:
         1a:41:94:7f:c4:10:39:2f:fa:40:1e:2a:b2:02:97:41:d3:c8:
         41:40:d4:28:8c:87:a8:c5:fc:af:e7:cb:5e:75:73:f4:fa:9e:
         a4:37:ff:fb:2e:1e:b9:25:0e:be:3b:c3:0a:99:6f:b9:26:e4:
         df:f1:22:18:32:e9:a6:fe:92:a8:3b:08:82:2c:3a:20:c7:f5:
         14:59:f4:f9:22:ba:c1:b0:93:82:ec:02:c5:4e:f7:1e:38:bf:
         db:4c:4a:e5:22:26:11:90:af:3e:1e:8b:1d:75:28:3e:27:61:
         09:c6:14:fb:c5:91:dc:c1:56:c0:78:88:c4:c6:03:af:a1:aa:
         ad:30:a2:e0:72:15:af:87:8f:70:d9:1f:c0:49:f5:01:14:1d:
         2b:41:ec:94:1b:0b:fa:79:42:31:cd:0b:c0:2c:94:df:b2:ef:
         18:6a:06:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:58:11 2025 by rpki-client