This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/56527727-111d-4d4a-9da3-1e8d68e15a4c.roa
File:                     56527727-111d-4d4a-9da3-1e8d68e15a4c.roa (raw, json)
Hash identifier:          41qIxOZ9Oz/TsD/eOUlZiAR5nxiiK0UMacxS8WunlHE=
Subject key identifier:   8D:34:AE:74:19:6A:F8:44:70:6A:17:6B:E8:91:01:E7:8F:9A:3F:21
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7E9DF170C8FBC451E5DC763F4960BFA684659762
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/56527727-111d-4d4a-9da3-1e8d68e15a4c.roa
Signing time:             Sat 15 Nov 2025 05:20:21 +0000
ROA not before:           Sat 15 Nov 2025 05:20:21 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9d:f1:70:c8:fb:c4:51:e5:dc:76:3f:49:60:bf:a6:84:65:97:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:20:21 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=921037d899d14c1985e22c4b43c6c4a2273047f4acbfb7051b88cf691c29f446, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:66:5b:dd:ff:da:28:91:a4:a3:a1:7a:32:
                    92:be:4e:32:e6:24:d6:de:37:cf:61:97:44:c8:23:
                    39:bb:2f:42:48:b8:c7:f7:41:d7:26:92:3a:d4:e7:
                    5d:4c:41:7e:20:75:fc:91:c6:37:8e:ce:9a:a2:2c:
                    fa:7d:47:90:3a:0e:7f:f5:12:70:cd:72:69:2d:22:
                    4e:5c:92:c7:c1:f3:d8:d0:76:2b:02:23:96:0c:03:
                    04:b2:f0:b7:f0:5e:04:53:1d:2d:76:72:75:ff:74:
                    77:7f:9d:3a:91:ca:f9:c8:c6:a3:65:d1:72:0b:0f:
                    50:87:0b:b7:4b:62:5d:6c:5c:3d:70:45:8f:c8:ee:
                    e2:f9:24:8a:74:74:c9:5e:0a:69:bc:d2:7d:9e:e1:
                    69:54:5c:5b:d9:61:6c:f0:6b:55:f1:73:17:61:a6:
                    e0:8e:15:6c:15:2a:e5:76:3c:49:12:67:34:7f:6e:
                    94:58:f6:fe:c4:de:d5:62:26:c1:81:d5:3a:f9:44:
                    45:54:eb:40:ff:ed:4a:b1:f8:2b:93:45:a2:03:13:
                    63:e6:4d:5a:a3:8e:d1:0d:74:9a:02:e5:b2:be:1c:
                    37:78:bc:06:b6:ae:fc:96:34:23:62:6d:29:9a:33:
                    ea:ba:dc:16:60:a0:09:32:2e:d8:2a:c9:3e:b1:98:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:AE:74:19:6A:F8:44:70:6A:17:6B:E8:91:01:E7:8F:9A:3F:21
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/56527727-111d-4d4a-9da3-1e8d68e15a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:8f:58:fd:10:37:42:19:d7:8a:96:c3:23:52:4c:48:7c:1b:
         39:01:2f:5b:b2:8f:a5:f2:00:e9:a9:49:81:a0:af:91:0d:33:
         78:cf:4d:5f:47:a3:ba:63:b6:84:9d:6a:23:30:45:39:45:31:
         23:4f:0e:1b:5f:0f:f5:ed:31:ef:12:93:f3:ee:0b:d3:83:b8:
         74:a5:0a:4f:13:c6:95:76:36:8c:43:a0:83:c9:8b:13:dd:57:
         9b:da:19:6a:a4:3f:5e:a0:a9:9e:16:0e:28:0c:91:b6:0f:aa:
         17:ef:9a:66:0e:5a:7c:cf:8b:dd:ad:c8:44:14:78:bc:db:66:
         69:53:e8:e8:7b:5d:c3:3b:0c:da:e2:8f:5f:3f:06:fa:cf:a0:
         49:03:a5:2e:98:c6:5d:69:8d:1f:d7:a9:3f:eb:a9:20:b8:c8:
         13:ad:c6:bf:a9:87:85:03:b9:a7:46:25:0d:27:91:a3:76:76:
         10:b9:df:18:10:86:ea:08:4b:f0:48:85:ae:4a:f7:1b:0f:a8:
         bc:3d:16:c3:b8:b5:7d:36:07:5e:5d:dd:1f:ae:c8:b0:ec:94:
         dd:ad:2b:1f:94:90:54:26:0c:e9:e0:f7:a5:ff:35:6a:fd:9f:
         da:8d:9e:90:b6:8b:cd:a8:35:d2:13:6c:3a:c7:30:56:09:c2:
         f3:3e:89:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:20:38 2025 by rpki-client