This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5711ca9f-54b1-42ca-be68-93036263a87f.roa
File:                     5711ca9f-54b1-42ca-be68-93036263a87f.roa (raw, json)
Hash identifier:          OKrMKHfU3iQ1zpX5lkrRHKUG08TvbV+6CLUHel8IERc=
Subject key identifier:   39:B1:12:77:6A:A7:6E:5D:75:6C:30:9F:EB:B4:FA:3C:08:DF:8A:19
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       755DABF6F3A35727E948A2315245684275CE9674
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5711ca9f-54b1-42ca-be68-93036263a87f.roa
Signing time:             Sun 16 Nov 2025 00:50:34 +0000
ROA not before:           Sun 16 Nov 2025 00:50:34 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f10d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5d:ab:f6:f3:a3:57:27:e9:48:a2:31:52:45:68:42:75:ce:96:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 16 00:50:34 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=8b551155e98a2dfd3074a25ee6d0b4456bd566a932c37e36607d829c45942a1e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:75:9e:86:6b:df:b6:c0:43:ea:18:75:8d:
                    24:2a:1c:9a:34:ff:ab:c3:75:a2:a4:77:38:24:e7:
                    46:d6:9d:35:32:ec:a4:e6:a8:d7:24:cb:7d:81:c9:
                    3b:17:9b:2f:f0:da:61:5a:07:56:01:cf:b6:48:33:
                    06:f9:b2:06:5b:fd:aa:9f:31:c9:01:7f:62:a5:cc:
                    0a:e9:e6:a2:79:4d:2e:38:8c:28:1d:01:cb:16:c7:
                    d0:85:31:32:99:b5:36:4b:12:80:38:fb:79:23:7c:
                    47:1e:f5:68:c4:f6:71:eb:78:36:41:a4:6e:e8:cd:
                    82:b3:21:2c:58:c4:ac:c1:8b:52:60:09:70:43:7d:
                    6f:e9:6e:99:51:bc:de:70:79:a9:9b:c5:24:3c:34:
                    09:34:5c:0c:3b:3d:a2:a5:bd:f2:aa:fd:ad:eb:3e:
                    3b:98:e9:6b:e3:c8:c2:0d:ad:e3:65:30:26:05:08:
                    84:94:bb:71:ab:04:0f:91:05:9b:ef:70:43:02:3b:
                    f3:a8:04:03:e1:eb:c7:06:91:82:c9:20:6c:0d:6b:
                    f7:a5:6c:86:45:f7:3a:5e:f1:7b:ca:51:87:0c:44:
                    e4:89:6f:75:74:d2:4a:aa:e1:bd:e8:7a:4a:4d:68:
                    de:97:f4:69:96:34:48:d3:62:13:8d:a9:84:96:f9:
                    5e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:12:77:6A:A7:6E:5D:75:6C:30:9F:EB:B4:FA:3C:08:DF:8A:19
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5711ca9f-54b1-42ca-be68-93036263a87f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f10d::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:67:7c:fa:21:b3:a0:94:88:e9:b4:39:9c:6b:19:a2:42:88:
         84:6a:1b:a1:a1:1b:c5:a8:e9:97:83:c3:5c:b3:57:2c:72:bc:
         4f:eb:38:46:22:7e:ee:c1:e1:79:ee:9e:b7:da:d5:83:72:ec:
         bc:37:4e:60:bb:9a:23:c0:5c:fb:89:7e:15:ea:0e:b1:22:3e:
         6a:6c:59:c7:57:e6:f7:43:b0:09:72:5b:16:c3:9d:72:ac:f8:
         9b:85:48:f3:f5:a9:79:a2:48:77:68:e8:b4:57:88:81:75:3c:
         0c:5d:aa:ad:22:d5:36:d1:dc:d0:9b:fb:3c:94:1e:a8:5b:13:
         7f:d7:40:10:52:53:42:12:f8:d2:63:a0:54:5f:9b:28:f9:46:
         63:4e:4d:7c:e0:8b:f9:1b:39:31:b2:5c:1a:ea:fd:05:eb:1d:
         90:46:d8:6e:24:30:4a:2c:36:b2:5b:93:4b:63:a4:f5:b2:cf:
         af:5a:7c:6b:b7:9c:55:63:47:7c:4e:5b:d2:92:a2:b2:33:c5:
         d3:b1:14:4d:03:7f:5a:58:b7:8d:61:80:5e:74:01:ac:45:fd:
         72:c2:f8:7c:32:94:e0:0e:f1:6b:4a:cb:c7:55:4c:26:62:1d:
         39:a1:8d:07:81:52:1f:80:91:af:c2:8b:fb:6d:ad:2b:b0:a5:
         eb:70:ef:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:51:59 2025 by rpki-client