This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa
File:                     23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa (raw, json)
Hash identifier:          SUmoP0zz2y8YMP2emh/9RoEJoItvPTcIUfpVN33GpV4=
Subject key identifier:   57:C4:55:C3:D0:1E:C6:81:E8:80:0A:19:8B:DA:1F:D2:9E:6B:2F:CD
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2458D925C1EE2593C286C184E40240AA78560EA1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa
Signing time:             Sun 16 Nov 2025 00:50:30 +0000
ROA not before:           Sun 16 Nov 2025 00:50:30 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:58:d9:25:c1:ee:25:93:c2:86:c1:84:e4:02:40:aa:78:56:0e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 16 00:50:30 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=36383c961210a806a71f596250e6da03a4c0151fb45026bc028cdfacef208bb7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:2f:ce:41:14:e4:1f:c0:1a:05:f0:7e:d4:
                    a3:2f:05:e6:36:a9:dd:dc:16:b6:f4:b4:1d:d3:21:
                    91:74:2b:db:49:33:46:d9:11:ae:f0:f4:dd:ba:d1:
                    93:38:7e:8e:55:a3:29:21:c1:25:9d:93:ca:3c:a9:
                    a5:01:2c:1e:a8:7c:a5:95:2b:74:b6:00:f1:99:d4:
                    02:1c:99:91:fa:0f:31:21:15:3b:85:5b:0a:17:46:
                    56:75:76:49:52:a9:35:21:b5:1b:2b:11:64:4a:9a:
                    86:30:c4:88:c7:51:dc:d5:1f:30:69:9d:7a:a7:db:
                    c6:f0:02:a1:b9:35:fc:e7:b3:1a:55:f5:2d:62:1e:
                    a0:99:e4:9a:16:24:f4:cd:63:43:fe:8c:c2:da:ac:
                    00:ec:b8:41:69:a8:11:ea:d1:f2:62:1f:ca:bd:6d:
                    a7:ef:cf:9c:a7:00:c1:20:85:ae:6a:4c:17:b8:54:
                    a3:d2:cc:4e:34:62:26:9a:96:a7:b0:32:27:df:e8:
                    75:b4:99:11:91:44:10:e2:dd:36:0d:7e:f2:0e:fb:
                    cb:b9:dc:ca:fd:9f:e1:59:ac:14:dc:02:62:e7:66:
                    6c:57:07:9b:ba:96:22:57:54:a6:c9:fe:c2:1e:ed:
                    bc:40:2c:bb:5f:8d:52:2c:3f:0c:2a:d5:dd:79:55:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C4:55:C3:D0:1E:C6:81:E8:80:0A:19:8B:DA:1F:D2:9E:6B:2F:CD
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f107::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:33:04:00:ce:95:ec:33:79:00:ff:77:ee:63:2e:71:71:86:
         eb:f4:16:ae:94:2b:8e:54:51:52:65:82:93:74:14:d8:23:f7:
         cc:ed:74:db:40:a5:3c:fd:57:3f:5f:41:6b:82:57:a2:c4:aa:
         ba:d4:b4:77:18:b2:a9:81:9c:e6:1e:6a:94:06:5e:fe:7f:b4:
         64:c7:2b:c4:86:58:81:77:fa:e5:29:37:2d:f5:92:de:83:37:
         99:b3:15:cb:5b:19:71:86:35:f4:b8:2a:f8:61:b7:b9:fa:b2:
         74:b3:ba:29:00:c4:23:73:f0:cf:76:22:03:2d:26:94:a6:fe:
         94:8c:ee:73:83:7c:1f:6b:bf:e9:75:8b:36:27:29:bb:f5:99:
         e6:17:91:59:86:26:5b:97:64:69:0c:98:5a:25:44:c9:70:62:
         84:9f:d0:2d:b9:81:dc:99:5e:8a:2a:36:b0:cc:64:c1:f6:5e:
         15:6e:65:eb:cb:f6:f9:93:bc:78:7d:28:8e:8b:b2:af:9f:36:
         db:ed:27:b4:99:b4:70:06:c7:8a:e8:43:a4:f2:71:73:8d:c8:
         d4:77:0b:13:6b:37:1d:c3:38:d2:c5:e6:09:c2:a9:25:5a:27:
         37:04:63:f3:1d:12:54:e0:60:d6:59:7b:89:39:1d:76:18:6e:
         47:b6:1f:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:11:29 2025 by rpki-client