This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/18a81d27-7f1e-4a83-80cc-8b089f18a344.roa
File:                     18a81d27-7f1e-4a83-80cc-8b089f18a344.roa (raw, json)
Hash identifier:          i4E1SFUphk0+eCjSnd74uvIDuU5rvemB+c8X87PqVv0=
Subject key identifier:   BA:20:3E:72:B2:30:BB:5F:11:86:55:20:F9:16:1E:5A:D2:BF:B7:FF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5CC3883044F4EC6FFFE20BF33C4F0E0BE0A83F2F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/18a81d27-7f1e-4a83-80cc-8b089f18a344.roa
Signing time:             Sun 16 Nov 2025 00:50:29 +0000
ROA not before:           Sun 16 Nov 2025 00:50:29 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c3:88:30:44:f4:ec:6f:ff:e2:0b:f3:3c:4f:0e:0b:e0:a8:3f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 16 00:50:29 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=7bef97a8bc72312b3f1cfd1cfa509e54df7a8e27412da7a9b49a4ab8d57045ee, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:72:e5:3b:03:9c:9b:59:d4:77:39:3d:d3:
                    b3:07:51:59:85:98:a1:06:d5:89:7e:8a:07:f2:f8:
                    97:48:50:7c:c6:e9:b4:f7:62:90:08:cc:69:1d:28:
                    c1:9e:b8:4b:c9:2a:2e:4f:39:cb:28:7d:3e:14:75:
                    52:06:22:44:c3:20:88:d2:91:48:30:6e:3c:cf:3a:
                    67:2d:d5:b6:d8:10:ba:09:3a:32:cb:ff:68:ba:32:
                    90:e6:c8:b6:e0:d4:f5:28:2a:60:82:40:da:6d:1b:
                    96:68:1c:0a:a1:c2:c2:8f:83:65:c8:a8:0e:9f:3c:
                    41:21:a8:71:b2:57:7a:11:30:23:53:f7:f8:54:de:
                    a9:9b:d7:4a:d2:bb:ed:66:79:6a:e6:c7:cc:bc:ec:
                    ee:a3:77:c1:4e:55:e9:35:e8:fa:d5:39:ea:5b:fe:
                    fc:38:44:8a:7a:44:76:0a:9c:c4:97:99:34:8e:c9:
                    e8:26:cb:79:82:2c:e7:76:ee:86:63:cd:ab:01:6b:
                    77:45:47:c3:f3:2e:84:a4:6d:c6:6e:d5:73:07:a8:
                    8c:85:51:51:1b:8a:3d:52:03:b2:5d:fe:ba:d1:ad:
                    9e:f9:5d:9f:a8:c1:91:c0:1f:65:26:09:40:8c:bc:
                    80:04:c6:c2:47:35:8f:39:6a:68:9d:cb:af:e3:01:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:20:3E:72:B2:30:BB:5F:11:86:55:20:F9:16:1E:5A:D2:BF:B7:FF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/18a81d27-7f1e-4a83-80cc-8b089f18a344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f107::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:c7:9a:c4:7e:c3:68:1f:0c:0e:fc:17:e1:66:0a:87:67:
         77:69:da:23:6e:dd:5b:c3:2b:11:ec:59:3e:97:24:79:24:c8:
         d7:6b:e6:23:f8:c6:ec:67:30:14:b6:b3:9c:31:0d:b1:9c:6a:
         5b:2b:10:ca:6e:fd:1c:ad:c1:54:aa:2d:3d:4c:e9:f9:18:79:
         d1:cf:aa:46:78:c9:96:28:10:d5:2b:c1:aa:d4:74:bb:4e:ab:
         be:56:b5:22:5c:b9:a7:70:9d:22:e1:b6:c7:36:37:a1:6a:f7:
         48:4e:86:34:35:83:8f:77:d0:52:1e:b9:78:fd:70:a5:9d:bd:
         24:47:ce:b5:54:91:7c:4c:ab:45:92:b8:65:44:01:3e:b0:8d:
         4b:d9:54:d1:e3:13:95:7e:44:5e:e9:18:80:13:4e:19:1b:05:
         86:27:42:fe:c0:b2:28:b7:2f:2d:4b:87:c0:6a:a5:ae:df:d5:
         9b:c6:e1:7f:f9:21:1e:e8:6c:08:d3:3c:f6:ad:a1:83:41:27:
         54:02:b8:31:39:96:ce:17:c9:cf:3c:59:1a:ec:4c:57:6b:4b:
         3e:03:35:8a:54:ae:df:fb:f4:89:dd:7d:a6:86:5b:f1:00:a8:
         fa:15:4d:48:10:0f:d7:e9:21:de:30:19:3f:8c:30:e5:da:38:
         1a:c9:e8:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:06:42 2025 by rpki-client