This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1a6b8fe3-7a24-4908-a73d-425df209068f.roa
File:                     1a6b8fe3-7a24-4908-a73d-425df209068f.roa (raw, json)
Hash identifier:          QotwyJq7MXO/RZXIJD73nJ8V+RvJh+o1JplV1F7Vbgo=
Subject key identifier:   16:EC:EC:BC:00:CA:74:3B:84:27:D2:66:90:5E:DB:1B:85:0E:82:A7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       DA472E8E37C8229B3ACB5A237590C33BF201A3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1a6b8fe3-7a24-4908-a73d-425df209068f.roa
Signing time:             Tue 25 Nov 2025 20:00:09 +0000
ROA not before:           Tue 25 Nov 2025 20:00:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:611d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            da:47:2e:8e:37:c8:22:9b:3a:cb:5a:23:75:90:c3:3b:f2:01:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 20:00:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=cfa11a5c9c221b04bcdc6a33a43a67d5416fbf4e6b5afcad5bf7d0faa23e671f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:62:6e:22:ce:a0:52:43:d9:a9:07:3b:de:
                    5f:e6:c9:45:68:8a:1e:a8:66:bb:87:c3:3b:0f:c0:
                    dd:29:24:d7:4f:b9:27:c9:31:e1:9e:d1:98:df:4c:
                    e5:da:f1:81:39:46:8b:54:ae:e9:4f:e9:97:56:6f:
                    16:7f:1b:5e:f1:1d:bc:f0:dd:05:c6:48:b2:d0:ab:
                    cc:8c:27:14:12:a8:d6:8b:2f:17:3c:ce:63:66:d1:
                    7c:44:b2:ba:24:74:31:e6:16:19:f4:0d:50:03:8b:
                    87:4c:31:f4:ae:df:25:f6:2a:c8:79:23:13:59:89:
                    5d:e2:b4:e1:ba:c6:bf:f3:b9:d0:2f:3b:2e:9f:67:
                    51:29:39:bb:7d:da:6c:a5:45:fa:0b:89:49:99:c1:
                    79:6c:ea:7e:17:d6:ae:c6:2c:8b:df:57:d5:a6:7e:
                    57:d9:0f:3a:d2:b7:21:ef:cf:88:da:9f:7e:21:43:
                    60:cc:27:5d:83:7a:9d:2f:ef:6b:7b:9b:bf:2d:46:
                    27:01:d8:46:53:aa:87:7f:07:65:64:1e:02:a5:fc:
                    6c:d8:1d:40:54:75:f7:53:ff:5b:ab:71:f5:74:7d:
                    d6:72:4c:55:f8:3f:f5:d3:23:a9:bb:94:89:7c:ba:
                    51:84:84:98:20:25:79:98:3f:e1:42:57:28:df:5a:
                    90:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EC:EC:BC:00:CA:74:3B:84:27:D2:66:90:5E:DB:1B:85:0E:82:A7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1a6b8fe3-7a24-4908-a73d-425df209068f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:611d::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:40:7d:be:bb:bc:37:d4:76:25:10:69:14:4b:0c:40:70:
         57:1e:82:41:d8:10:f8:86:0e:9b:36:d9:28:c3:46:5b:2c:4f:
         66:bb:4a:b6:8e:9f:a2:cc:df:a3:25:c3:85:ac:34:64:81:19:
         22:d8:a7:34:16:7a:c9:39:c0:45:13:94:41:c8:d7:e5:3c:21:
         98:93:60:13:1a:dc:ad:71:28:1c:64:7d:ef:77:69:66:b2:5f:
         27:b3:f2:5b:9e:ac:40:eb:5c:f2:ca:67:a0:67:e9:81:1b:84:
         7a:ac:8b:da:20:95:e0:e6:27:eb:dd:3d:0f:fa:60:99:00:75:
         3b:09:b8:a9:6c:99:b0:52:3e:cf:f9:e6:98:dd:96:00:1e:57:
         70:f4:8a:f3:da:f5:6f:4b:6c:b6:a6:26:51:b8:75:ef:1f:d4:
         27:f3:ab:16:10:c5:ed:4c:91:10:68:ce:83:c8:cc:23:88:f1:
         1e:d4:35:f2:c7:23:7d:83:53:bd:70:f2:2f:fb:dc:d3:ed:48:
         aa:92:38:0a:93:0f:60:bb:bd:c4:ef:c2:8b:b9:5c:11:a9:d6:
         3f:7c:54:6e:bc:07:0c:f6:10:54:8c:35:4a:44:61:d2:36:74:
         fa:8c:3c:34:55:dd:d5:cf:7e:3b:c8:ef:42:92:14:a9:c3:a7:
         28:75:7f:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:15:11 2025 by rpki-client