This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa
File:                     22382750-431d-4ab9-aa08-e0f973e067f8.roa (raw, json)
Hash identifier:          vXxOAaNjFS52HuVOyQgmsjen+7AhnBvUUfL/VkPEjj4=
Subject key identifier:   30:AE:CF:53:16:E6:77:54:83:CA:A9:CE:61:15:F8:C8:03:B4:48:E1
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3AC248E305969E17B4A7B27B4EEB947CBE8BC23D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa
Signing time:             Sat 15 Nov 2025 05:00:12 +0000
ROA not before:           Sat 15 Nov 2025 05:00:12 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f00c::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c2:48:e3:05:96:9e:17:b4:a7:b2:7b:4e:eb:94:7c:be:8b:c2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:00:12 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=16f15a24d97a04d706c5a548a0edf0aa1ab4c36d43389c8879ef679cb7c12c3a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:8c:d2:8c:e7:ef:e9:e3:26:60:1a:4f:35:
                    b7:24:0c:1e:13:63:c3:c8:89:90:b1:c3:a9:23:7b:
                    50:60:f8:a2:a2:03:b4:81:cb:48:97:97:f8:ab:02:
                    c0:71:be:7f:fb:2a:a6:21:83:39:c3:a7:85:45:99:
                    2d:4f:ee:73:d3:fa:75:56:2c:dc:8b:2e:d5:62:ce:
                    ce:e3:cd:48:ea:56:64:9b:6d:b4:0e:60:cd:fc:96:
                    04:a8:02:bd:d1:ec:f7:8b:37:ed:bb:7f:9a:8d:89:
                    95:eb:ac:50:c0:dd:3e:97:1b:85:29:c3:f0:b4:58:
                    2f:46:db:34:52:e1:50:0d:13:b8:a3:7e:30:8e:66:
                    ec:f5:85:c0:85:06:1f:cb:0d:26:5c:b3:54:43:68:
                    9d:f9:19:5f:bc:aa:bd:3d:a5:64:b1:85:78:57:6c:
                    8c:fe:76:67:aa:70:58:0a:bb:23:ea:3f:ec:e0:25:
                    f9:c7:bd:bf:ef:39:1c:c1:0b:fc:2a:29:95:18:ba:
                    82:85:e0:34:8f:75:e4:e1:de:43:66:ad:5d:e1:63:
                    1f:04:70:f9:5a:46:ba:24:a2:52:c5:c2:0b:bc:d8:
                    eb:b9:e7:f3:1f:53:ba:be:1f:7b:51:a7:6a:bc:2a:
                    3f:33:03:06:4f:1f:c0:48:26:91:2b:54:39:8d:10:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AE:CF:53:16:E6:77:54:83:CA:A9:CE:61:15:F8:C8:03:B4:48:E1
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f00c::/39

    Signature Algorithm: sha256WithRSAEncryption
         a3:fd:70:14:7a:d0:51:b1:ef:73:6b:ba:40:26:ee:ab:85:a0:
         03:e5:af:58:ac:e1:a8:d2:36:65:4a:05:6e:55:31:de:de:86:
         9e:18:b7:2b:85:79:d3:a5:9f:08:e8:de:77:81:01:14:35:8d:
         8f:3b:9d:cf:75:38:37:a6:34:57:ce:e4:3d:01:cc:00:6b:06:
         f4:fd:29:cf:f2:25:22:6f:74:4e:89:70:ba:3a:60:fa:a1:4f:
         2f:17:9c:36:fb:ca:52:34:3f:fd:ba:2f:cf:62:0a:41:c8:f5:
         af:cd:2e:f2:14:d2:6d:19:16:11:8c:03:71:3a:dc:e1:96:95:
         68:aa:dd:7e:45:13:a6:51:62:ec:0c:2b:c0:ef:29:7e:6c:88:
         b4:e4:01:87:41:fc:ff:8e:4e:b6:ab:37:87:f5:66:3e:e0:1a:
         cf:e9:06:f4:e1:6f:c3:3f:78:93:ce:e3:cf:d7:8e:ba:37:75:
         c8:58:32:24:58:11:62:0f:90:63:6f:88:6f:92:a1:f4:a3:c8:
         98:d9:9b:cd:a3:23:34:7f:f8:82:40:a7:88:05:5f:e1:4c:9f:
         ca:a1:0c:8d:04:a2:2f:14:bb:ed:57:48:b4:4f:d2:60:f1:c5:
         57:21:2a:4e:14:95:b1:40:72:a9:5a:99:83:24:c3:5b:ef:e8:
         b0:87:d4:e6
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUOsJI4wWWnhe0p7J7TuuUfL6Lwj0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUwMDEyWhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNmYxNWEyNGQ5N2EwNGQ3MDZjNWE1NDhhMGVkZjBhYTFh
YjRjMzZkNDMzODljODg3OWVmNjc5Y2I3YzEyYzNhMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2S4zSjOfv6eMmYBpPNbckDB4TY8PIiZCxw6kje1Bg+KKi
A7SBy0iXl/irAsBxvn/7KqYhgznDp4VFmS1P7nPT+nVWLNyLLtVizs7jzUjqVmSb
bbQOYM38lgSoAr3R7PeLN+27f5qNiZXrrFDA3T6XG4Upw/C0WC9G2zRS4VANE7ij
fjCOZuz1hcCFBh/LDSZcs1RDaJ35GV+8qr09pWSxhXhXbIz+dmeqcFgKuyPqP+zg
JfnHvb/vORzBC/wqKZUYuoKF4DSPdeTh3kNmrV3hYx8EcPlaRrokolLFwgu82Ou5
5/MfU7q+H3tRp2q8Kj8zAwZPH8BIJpErVDmNELUDAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUMK7PUxbmd1SDyqnOYRX4yAO0SOEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzIyMzgyNzUwLTQzMWQtNGFiOS1hYTA4LWUwZjk3M2UwNjdmOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAPAMADANBgkqhkiG9w0BAQsFAAOCAQEAo/1wFHrQUbHvc2u6QCbuq4Wg
A+WvWKzhqNI2ZUoFblUx3t6Gnhi3K4V506WfCOjed4EBFDWNjzudz3U4N6Y0V87k
PQHMAGsG9P0pz/IlIm90Tolwujpg+qFPLxecNvvKUjQ//bovz2IKQcj1r80u8hTS
bRkWEYwDcTrc4ZaVaKrdfkUTplFi7AwrwO8pfmyItOQBh0H8/45Otqs3h/VmPuAa
z+kG9OFvwz94k87jz9eOujd1yFgyJFgRYg+QY2+Ib5Kh9KPImNmbzaMjNH/4gkCn
iAVf4UyfyqEMjQSiLxS77VdItE/SYPHFVyEqThSVsUByqVqZgyTDW+/osIfU5g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:53:25 2025 by rpki-client