This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa
File:                     0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa (raw, json)
Hash identifier:          9truibXu1cUbaXqnJZ1y0l5ZtD2uw41JmeWADtNysac=
Subject key identifier:   82:9D:60:08:A7:74:45:D6:0B:51:0D:8C:E7:D8:F6:AD:75:4F:A7:AB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5F8F8CA0559DFE002B0E577BF753B3CC1DCC39A8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa
Signing time:             Tue 25 Nov 2025 19:40:07 +0000
ROA not before:           Tue 25 Nov 2025 19:40:07 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:610d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8f:8c:a0:55:9d:fe:00:2b:0e:57:7b:f7:53:b3:cc:1d:cc:39:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 19:40:07 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a1459b604365550ba1e78d311e7705464f08703e8b4ea7b595b3b73bdd01d61b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:77:8d:40:31:0f:3b:cb:b7:88:a5:93:00:
                    79:be:92:6f:b9:38:9e:c3:32:40:a8:7b:5a:27:b8:
                    dd:3d:8e:90:b5:52:40:9a:f1:f4:71:ec:aa:20:03:
                    10:a3:b0:d8:03:52:7f:3b:8f:0d:4a:d5:12:1a:5d:
                    5c:93:45:3a:bf:83:83:24:84:4e:32:ff:60:2d:9d:
                    de:78:51:90:57:e8:06:db:f1:03:d5:a0:80:a9:9c:
                    63:84:c1:13:58:96:9f:e6:c9:63:c9:1b:d9:00:00:
                    05:2f:39:ba:56:dc:98:e0:a3:5c:84:f7:d1:bc:58:
                    5b:17:dd:15:2b:90:ec:9e:9c:d4:b0:c3:db:2e:d0:
                    79:10:a9:01:40:26:9f:2c:f8:ef:7e:26:1f:91:43:
                    a6:52:92:cb:18:1f:37:88:0d:83:23:04:c0:2a:b9:
                    35:b8:74:53:6c:a7:2d:cf:23:98:cf:c8:d3:24:ca:
                    5a:72:f6:4e:95:5a:67:e4:b2:4a:ad:cc:92:44:67:
                    b8:0d:4e:04:88:bb:0d:d7:3f:56:de:7f:12:2f:b1:
                    f7:1d:35:62:9b:47:93:69:44:7b:17:e8:16:5a:2c:
                    3b:2f:38:e1:b5:55:bb:71:6c:c7:53:b8:59:9d:e3:
                    a2:85:eb:02:02:77:65:ae:92:d5:99:52:0e:07:5b:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9D:60:08:A7:74:45:D6:0B:51:0D:8C:E7:D8:F6:AD:75:4F:A7:AB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:610d::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:1f:07:5f:63:d1:96:04:d3:20:c3:d3:ff:b6:80:60:11:06:
         46:10:b4:5d:30:26:0d:28:64:c8:fe:65:68:d6:25:bf:0b:18:
         77:4a:93:94:9d:a0:df:c9:01:4e:36:db:8f:da:ca:7b:d4:48:
         0c:6f:5b:ca:2c:8d:62:ff:8c:27:b0:e8:9d:30:33:5a:be:15:
         d5:c1:ab:7d:b6:b1:a0:0f:cd:d4:4d:1c:7c:94:39:ec:16:8b:
         70:07:68:9a:24:ad:7f:10:a9:5e:41:e4:87:c1:ff:ed:d2:99:
         cb:f6:f9:0f:3f:1c:4b:a5:1c:f4:0a:ae:aa:b7:6e:d9:64:f3:
         89:a7:e2:e3:5a:44:bb:b1:62:c1:79:3c:0a:0e:07:c6:e5:af:
         8d:ab:c1:96:13:21:a0:12:fa:8b:b2:c8:bd:60:41:eb:e2:2c:
         d1:00:ca:e6:29:56:e4:07:61:51:25:15:f7:91:b2:15:e9:ca:
         e8:5d:69:64:bf:1e:e4:19:d4:49:25:c2:e6:b0:3a:a3:15:b9:
         61:58:03:22:05:28:5e:56:00:19:a0:eb:08:e5:72:a4:bd:ea:
         42:eb:8a:c8:72:52:7e:10:8c:e5:da:d5:75:91:34:16:89:1a:
         24:45:71:88:96:d9:22:45:a5:09:df:0c:c0:ea:7a:e5:19:9a:
         73:ae:7a:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:22:32 2025 by rpki-client