This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa
File:                     53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa (raw, json)
Hash identifier:          B7eHJ3wRp+zMCHcjhyfAJFYElje2noPugTJr2TLIxkk=
Subject key identifier:   4E:63:07:16:2F:FF:C7:4E:70:A2:9A:C8:E9:23:87:BD:D9:FE:8C:42
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       79CB3BF5920797DFD6A601E4968D144BCFF0250C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa
Signing time:             Tue 25 Nov 2025 19:50:48 +0000
ROA not before:           Tue 25 Nov 2025 19:50:48 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cb:3b:f5:92:07:97:df:d6:a6:01:e4:96:8d:14:4b:cf:f0:25:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 19:50:48 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=8771024950ceb4d71cea0d837ad89ae822e7902249ce95d92ecc5e2c087f6ced, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:4b:1d:30:b9:7b:5a:bd:11:11:97:f1:eb:
                    5f:c3:57:cc:e0:29:f7:bb:e2:10:10:d9:82:33:68:
                    d9:79:85:88:19:b7:3c:ed:b9:1e:1b:4f:0f:b2:98:
                    18:21:b4:ee:5b:6c:2b:c7:83:51:49:44:d7:5d:48:
                    9e:94:99:85:89:8e:9c:33:6c:ea:10:13:9b:da:d7:
                    7c:98:42:d3:dd:81:57:a6:46:6d:c7:23:6e:a6:70:
                    27:00:b7:59:9e:41:52:ed:e2:98:01:3d:4f:d2:d2:
                    a2:5b:3c:1b:86:42:84:2b:8f:d5:d2:c6:fe:ca:9e:
                    3e:e0:57:d3:54:0f:da:b5:22:11:e0:10:21:88:b9:
                    c8:82:d5:63:75:b2:1d:81:d0:74:ec:91:1f:42:8c:
                    7e:2f:78:ed:85:55:f4:d5:e9:74:66:3b:7e:2b:ed:
                    1a:7f:f2:b3:b4:fc:b5:58:b2:e7:0b:50:6a:63:2e:
                    6f:e7:ec:ba:d5:2b:b6:45:9f:74:1c:ef:8b:e2:ac:
                    c9:84:b8:3a:f2:0f:c2:19:17:5d:5a:e0:0f:79:51:
                    28:bf:d1:c8:ed:e3:c8:2a:cb:d2:e3:ea:e5:5f:a5:
                    ff:3b:96:1c:7a:96:48:d6:4b:f5:df:39:56:e0:20:
                    e6:40:c7:63:33:08:21:02:6a:be:e9:65:81:b4:6c:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:63:07:16:2F:FF:C7:4E:70:A2:9A:C8:E9:23:87:BD:D9:FE:8C:42
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6107::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:76:ab:58:50:f7:f4:55:3c:07:ac:d0:eb:33:49:ce:6c:03:
         06:54:18:f4:7f:69:ee:71:24:c1:18:1a:44:18:7a:ff:65:39:
         77:03:b2:73:f8:70:da:fa:ff:26:91:d4:a3:55:68:56:bb:fb:
         b2:d2:e0:7a:80:0d:ef:53:35:1d:49:01:01:cd:47:7d:15:e8:
         26:88:a3:9a:92:5e:bc:14:a9:0a:c9:70:29:83:ac:fa:f0:3b:
         54:fd:12:e3:95:ca:1c:26:e9:26:b7:3e:4b:79:fe:00:d3:fe:
         9a:5e:3a:92:82:e9:b7:97:52:d5:ad:72:69:d2:a4:0f:31:7d:
         ec:4a:b8:fd:f7:1e:ad:c4:ea:59:cd:54:7f:41:af:93:68:c8:
         2b:55:8f:58:fa:5f:de:e5:a9:b3:00:ed:c7:0f:1f:a9:2b:e2:
         2d:a9:f0:b7:72:bd:fe:15:7a:31:47:1f:fd:46:c8:69:09:57:
         0d:fe:dd:95:e0:00:11:06:bf:2c:64:7d:a7:ed:24:73:5d:71:
         eb:02:e5:d2:ba:63:3e:22:ca:2c:b7:68:17:46:95:fd:7c:e5:
         24:99:d6:96:02:56:a3:31:79:a0:14:44:a9:cb:45:26:94:ef:
         f0:0e:72:11:a7:3e:a3:5d:4b:00:46:e4:04:06:38:5d:d5:25:
         09:c3:06:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:23:23 2025 by rpki-client