This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/373de46b-0532-424d-b3f0-749aec3cab9c.roa
File:                     373de46b-0532-424d-b3f0-749aec3cab9c.roa (raw, json)
Hash identifier:          ddOsW1pFjsxw8tRRqeN4UGb5nMnUiay6qZYIPKoM0ig=
Subject key identifier:   D3:B7:E0:BE:B9:D1:D1:DD:36:7F:69:11:D2:24:A3:A8:F1:91:BA:64
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1146AFD5A64BB2D8E63D50244E757683B33E126E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/373de46b-0532-424d-b3f0-749aec3cab9c.roa
Signing time:             Tue 25 Nov 2025 19:50:07 +0000
ROA not before:           Tue 25 Nov 2025 19:50:07 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6116::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:46:af:d5:a6:4b:b2:d8:e6:3d:50:24:4e:75:76:83:b3:3e:12:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 19:50:07 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=9a66555d187c5e2b1de2b4ba8bc40ec4dc713355bb5410a668b2a962606d0bdb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:a1:73:8f:88:f3:41:3f:19:f0:1e:d1:46:
                    ae:77:70:d8:66:0f:5b:fe:9a:88:f3:8b:63:22:01:
                    26:11:2f:83:47:fc:16:ce:51:4f:8a:1c:63:0e:40:
                    68:36:e2:fe:1e:6d:78:dc:61:04:df:43:ad:b3:a1:
                    e2:d2:95:cc:8b:a1:04:ba:25:63:59:ce:d7:b6:5d:
                    0c:5b:fa:4d:92:08:6f:f1:71:b0:3a:ba:82:2d:4a:
                    2b:c4:1e:f6:02:69:f1:6c:9b:2e:6f:9a:8a:ec:1d:
                    c2:2f:84:17:a0:1c:51:80:7c:fc:01:97:ee:0d:0f:
                    b4:b4:3c:17:12:e5:e7:1a:7e:6f:f6:f2:c8:88:9f:
                    52:e0:ae:7d:d1:74:b6:31:bd:41:f5:c0:b8:4f:c6:
                    f2:c7:c4:8e:2c:2d:9e:8c:c6:19:38:e2:5b:50:d8:
                    fb:38:77:2c:d8:59:65:4d:69:c6:20:9c:98:cb:df:
                    d8:bd:13:62:b6:3f:0f:86:37:e3:30:f8:57:70:12:
                    c6:b1:af:c3:0b:46:31:c8:3c:2b:55:d8:64:53:07:
                    25:8e:b8:6e:d3:13:d7:10:14:54:08:98:cf:5e:2f:
                    cc:5b:37:51:21:46:6c:8b:c0:ab:7d:7f:fc:89:fa:
                    1d:ad:b9:b1:03:ad:86:26:88:e9:d8:99:b6:3c:6c:
                    c1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B7:E0:BE:B9:D1:D1:DD:36:7F:69:11:D2:24:A3:A8:F1:91:BA:64
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/373de46b-0532-424d-b3f0-749aec3cab9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6116::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:7f:91:84:da:b4:17:2b:bf:d6:3a:c2:57:24:df:ae:75:76:
         f7:78:2d:f2:00:0b:5b:54:0c:6a:40:7c:b4:85:4f:25:e8:32:
         65:6b:5f:1e:3e:5a:01:fd:de:fd:a0:40:86:40:76:b6:45:b2:
         80:34:10:d7:71:45:4f:39:3c:40:08:47:3a:cc:41:ae:f8:c9:
         83:36:4d:c4:46:3d:a7:ea:5e:31:f7:e0:c7:fb:f5:af:df:25:
         2d:4e:f7:82:b7:17:9f:3a:04:27:2c:10:e2:e0:14:d6:4c:6e:
         a1:06:4c:8a:09:fb:e8:a3:02:e8:35:d2:06:4e:32:14:3c:79:
         a5:d0:9e:2e:28:72:e1:f6:42:c7:25:57:d8:d8:ea:e4:69:61:
         b6:4a:ee:a3:d9:d4:99:f4:7c:85:90:8e:b3:43:5b:99:b8:61:
         fb:3a:f2:ee:4f:ba:0c:fe:fe:c3:d9:fb:b3:c1:23:11:a7:3f:
         cf:dc:d4:c3:7d:a4:ee:f8:e2:99:1d:a9:4b:66:f7:f7:f2:7f:
         5e:55:43:d7:b7:b5:9c:92:6a:26:46:25:0b:da:40:9d:93:fd:
         fd:cb:82:13:48:40:d5:69:13:67:fd:12:87:72:d3:94:76:a4:
         f5:94:9c:35:0b:e0:9a:e4:32:36:7c:2a:e1:18:82:81:c7:25:
         d1:8d:fd:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:00:21 2025 by rpki-client