This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa
File:                     16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa (raw, json)
Hash identifier:          44tS9k/frd4fOpA6s9JRyElTRbY2G1FZ+ut75S8fSV8=
Subject key identifier:   B5:26:1C:85:ED:F1:E0:10:F5:12:C7:75:F3:F1:A3:59:88:1B:9B:94
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       305FBD0E41B3D9F7A00C9F2A37DEFC0AC30461DC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa
Signing time:             Sun 16 Nov 2025 00:50:08 +0000
ROA not before:           Sun 16 Nov 2025 00:50:08 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f3:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5f:bd:0e:41:b3:d9:f7:a0:0c:9f:2a:37:de:fc:0a:c3:04:61:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 16 00:50:08 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=9452ca875d78218b43cded74f8e6406fd4dae642f1764c8538a8475ec6913dd5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:43:c4:68:18:0e:f9:c5:d1:ed:be:d3:61:
                    c6:b9:3d:b0:4d:45:ca:79:88:10:fc:df:fd:33:42:
                    f6:1b:ff:6a:c5:5a:30:c7:72:f3:22:86:78:0a:29:
                    a5:16:7f:e5:97:5d:5d:13:2c:e8:c2:b1:c7:3f:16:
                    1c:0d:ea:fc:da:94:31:3f:19:1e:14:41:60:91:30:
                    97:c8:fe:a9:16:ff:4a:63:99:d3:9c:73:cd:07:ba:
                    2d:f6:eb:1e:9f:81:1a:67:81:25:9a:ec:c3:2d:fa:
                    53:51:3e:9e:5b:cf:f8:03:45:57:f7:6c:39:94:8e:
                    13:ea:48:5a:98:f7:f7:44:02:66:9c:b4:4b:0a:07:
                    14:ed:7e:ca:dc:e6:da:ed:21:99:0b:20:37:8b:c2:
                    d4:d3:0c:c1:20:6f:a2:d2:e8:c8:b7:0e:ed:63:f6:
                    cc:60:7d:34:6c:37:47:94:ac:f1:05:ce:62:96:d4:
                    b8:19:e5:a6:7a:5b:c7:52:88:0d:ea:89:1d:cd:0a:
                    ba:c1:da:16:3f:c5:77:76:25:3b:13:cc:e8:b6:74:
                    4e:be:9e:26:8a:b4:39:94:20:3a:85:30:2b:7b:2d:
                    15:1f:23:95:00:06:8d:47:1f:1d:07:d5:db:dd:51:
                    8f:8e:97:7d:43:8d:86:12:b2:92:08:2a:51:4a:f0:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:26:1C:85:ED:F1:E0:10:F5:12:C7:75:F3:F1:A3:59:88:1B:9B:94
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f3:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:8e:54:91:70:62:da:09:ab:2d:d1:0b:b0:81:02:11:c6:
         4b:20:79:71:a3:1f:99:2e:f6:1d:4e:54:29:b4:e1:6a:bc:7b:
         f7:27:92:42:05:94:14:dc:02:66:dd:6e:2d:2c:4e:6e:35:1c:
         46:49:97:de:e2:5d:d7:cd:3e:31:da:1f:b3:9f:ca:6a:e6:e8:
         0a:ec:af:e7:a1:77:7d:e7:52:4d:6e:53:93:90:b6:d8:ae:e1:
         a7:c7:cb:6d:ea:22:13:97:90:3b:57:19:92:26:38:ec:1f:ae:
         60:33:ef:7e:d8:c2:6d:1a:4d:7a:3c:7d:1b:42:a4:77:9d:d8:
         77:66:30:b7:d9:6f:f7:36:4a:4b:03:42:22:67:68:1f:36:f3:
         52:3b:6e:06:cd:04:c2:26:c7:8a:95:ae:68:f0:2b:42:1a:25:
         01:f3:75:d8:66:fa:fa:f6:ed:bf:65:9d:38:39:0c:6b:5d:52:
         7f:47:e3:0e:a6:21:ed:0a:40:f2:fb:e5:b9:2b:bd:12:98:b8:
         a0:d6:aa:c0:b0:5a:e4:0e:a3:bd:b0:3a:e8:cc:f4:7a:48:e6:
         32:0e:69:c2:82:ac:03:f9:f6:7a:b2:99:dd:11:80:9e:f3:dd:
         ab:0a:ec:0a:e5:47:c6:9d:d3:ca:74:a4:a2:b9:c9:ad:66:04:
         fb:58:1b:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:46:13 2025 by rpki-client