This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa
File:                     5463f2e9-c071-45ba-a891-46817c1759f6.roa (raw, json)
Hash identifier:          noWgd+SMwGVkmIe1ie6aqh5K2SvZGnp4eClUJ6bMSUA=
Subject key identifier:   6B:1C:7F:4A:5C:4E:C4:66:F8:08:0C:1D:00:C8:70:82:EA:2F:5A:73
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       51EDB5EAFD6DFAA0E00DD6C615667CE0D2D9C82F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa
Signing time:             Tue 25 Nov 2025 19:50:51 +0000
ROA not before:           Tue 25 Nov 2025 19:50:51 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:611a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ed:b5:ea:fd:6d:fa:a0:e0:0d:d6:c6:15:66:7c:e0:d2:d9:c8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 19:50:51 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=78074e30e48cbe8f395f3aa39825488bad79f8444b407da71964e54202369d78, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:93:e2:14:cc:01:a2:bc:58:87:80:62:04:
                    70:cb:5b:d5:a6:5c:56:5e:9c:80:00:1a:54:d0:79:
                    c3:65:76:da:3a:d9:97:f1:58:aa:9e:33:7c:74:d9:
                    aa:86:d9:ad:57:02:d4:f7:89:be:f5:5d:dd:1d:46:
                    fa:12:a1:4f:2a:0a:27:6e:ec:20:c5:c6:a1:a6:df:
                    56:83:b8:33:ab:69:c4:6a:6d:d5:7c:e1:15:f5:64:
                    e9:3a:f9:c4:22:b1:9f:1b:c6:d6:47:8b:25:c2:56:
                    b6:31:d5:6b:ca:3e:4a:9f:05:2e:ef:0d:1d:7f:b5:
                    6a:cc:d0:e4:26:bb:98:40:55:c9:e8:5c:09:b6:a7:
                    08:98:ea:6b:52:36:69:d9:90:a2:1d:98:e3:dc:fb:
                    ec:8b:99:a0:79:0f:61:ca:0a:9a:fb:19:19:00:b4:
                    0e:34:be:0a:9b:70:83:3f:9f:53:87:7e:34:af:56:
                    a0:a4:c2:2e:73:20:af:f8:e1:a7:1a:3e:20:a5:4c:
                    ec:54:22:d5:29:74:49:86:6f:10:8a:92:e3:29:69:
                    f0:a7:ec:27:3d:0b:7f:96:d6:8a:18:0a:c2:ef:bd:
                    b2:96:c0:40:bc:3c:56:82:fc:30:3f:8d:62:3a:46:
                    89:da:74:e7:37:e3:81:0c:d9:8c:20:f6:db:3c:4c:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:7F:4A:5C:4E:C4:66:F8:08:0C:1D:00:C8:70:82:EA:2F:5A:73
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:611a::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:87:56:4d:8a:5b:b2:ee:2b:e8:99:af:fe:cd:e3:0b:dc:26:
         b7:6b:82:17:b5:a4:34:ad:03:4d:e0:f1:9e:a1:66:03:02:93:
         6b:54:f2:8c:91:b4:56:5a:8d:1c:a1:15:b8:72:a3:62:34:11:
         84:b7:51:95:d2:e2:d9:96:ed:f8:64:11:bd:e7:ed:a8:ac:55:
         1f:4e:78:85:9a:88:c0:dc:b4:97:68:e3:c5:f3:3c:cf:bd:cf:
         b3:0a:65:a8:54:a8:ea:be:57:3a:f6:80:ed:24:8a:ee:bb:17:
         d5:b2:dd:6b:d0:e0:9c:b3:03:f2:3e:b2:61:6c:48:ad:7e:36:
         2b:9b:a9:4e:64:89:03:2e:a2:73:7d:d7:ed:2a:f2:61:da:ff:
         1a:7c:64:14:58:4c:82:29:06:05:30:38:a3:61:64:f6:ac:c4:
         cc:f5:b5:f2:bf:c3:ec:bd:8c:a3:36:46:21:1b:9e:23:53:49:
         16:70:c5:fb:74:cc:e4:77:64:27:57:9b:b1:05:12:e8:17:27:
         29:de:cf:62:6f:a0:38:fc:08:9b:3a:a5:ae:e1:a2:8b:0b:81:
         9e:08:42:63:16:05:3f:65:c0:b4:5b:4b:e3:9c:d5:06:28:28:
         32:ce:08:78:9e:2e:a2:1f:06:ac:38:94:94:60:35:c2:a2:2c:
         15:0f:3d:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:15:39 2025 by rpki-client