This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/692c7242-c4b2-4ece-8520-4fff6db89e7e.roa
File:                     692c7242-c4b2-4ece-8520-4fff6db89e7e.roa (raw, json)
Hash identifier:          gOGPphTw4keTs5+zAWjMJvcrGg/VqkFVQiIUAQ8Vx0w=
Subject key identifier:   A0:0B:20:AF:96:37:26:4B:BB:B2:FD:21:E2:07:1E:74:D2:80:0A:AF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6C9388618F2AAECFE1172CAEDFCE4E01DCF8FE71
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/692c7242-c4b2-4ece-8520-4fff6db89e7e.roa
Signing time:             Tue 25 Nov 2025 20:00:06 +0000
ROA not before:           Tue 25 Nov 2025 20:00:06 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:93:88:61:8f:2a:ae:cf:e1:17:2c:ae:df:ce:4e:01:dc:f8:fe:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 20:00:06 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=e0e5bbf6798a63e25bc150518ae0d735cc7606ab5f90cc8494076941567f7aff, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:24:2d:ba:af:b5:22:b9:20:b5:0c:e0:c9:
                    44:35:57:c3:92:e5:77:be:fe:25:a5:71:50:9a:87:
                    88:23:f6:55:03:86:70:e1:f8:13:4b:fd:65:5f:25:
                    db:38:ef:51:0c:a4:7a:44:e9:c7:a4:58:68:b7:2d:
                    84:f3:0a:22:a6:a7:d9:d4:23:65:5e:bd:56:47:42:
                    2a:e6:76:2d:4f:36:35:94:51:e6:88:26:62:e7:b2:
                    2e:a0:4f:ba:cd:17:34:56:06:06:67:07:4c:15:9e:
                    13:66:40:27:4c:67:ef:b9:a5:16:3f:a4:6c:d2:c8:
                    38:12:b8:2a:dc:8c:64:6c:ed:82:3e:06:2f:11:c0:
                    21:40:db:b3:0e:da:08:3d:96:ef:cd:93:47:37:d2:
                    a1:dd:94:0a:d7:4e:78:4a:6d:55:12:cd:43:07:fb:
                    f0:4e:05:b9:7e:39:76:7d:a0:8c:43:f8:e0:ce:37:
                    d0:15:4b:d3:a8:f1:10:59:05:39:89:18:49:f7:c0:
                    27:fa:cf:45:af:1a:d7:f4:9d:9c:9a:58:65:74:3f:
                    fd:9b:23:2d:d4:38:28:ff:2a:68:04:03:d1:ea:79:
                    d8:f7:83:63:3a:5e:4d:17:95:b0:f6:93:e8:49:34:
                    7e:30:e3:55:8e:6c:c4:5c:e0:07:24:ad:2a:25:3d:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0B:20:AF:96:37:26:4B:BB:B2:FD:21:E2:07:1E:74:D2:80:0A:AF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/692c7242-c4b2-4ece-8520-4fff6db89e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6115::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:86:96:62:b6:3d:20:92:28:1a:c6:13:13:2d:90:78:6a:a5:
         75:6e:7b:31:84:c6:dd:2a:35:f2:8f:f1:20:70:93:85:a6:78:
         fc:aa:cf:49:2d:f4:a7:b0:43:61:b3:b2:be:86:c9:37:22:93:
         8e:99:b6:ca:05:b0:ef:96:30:cb:eb:0f:d7:0d:fc:f7:bb:3c:
         91:dc:9e:12:5d:09:01:8a:dc:17:54:68:dd:b2:bf:2f:83:e6:
         21:7c:f4:f9:38:75:a3:fe:05:16:29:f9:5c:13:67:eb:ae:91:
         3c:c8:26:6d:82:43:59:01:ab:6c:1b:4e:0b:0d:59:fd:c2:25:
         4e:d9:88:0d:38:b7:0f:85:e3:6f:25:3d:9f:22:88:83:fc:fb:
         8a:c0:1a:8a:3f:9c:0b:66:c0:23:db:00:10:75:7e:b3:c9:14:
         73:f6:05:c7:29:5e:a2:8e:c6:eb:81:1f:5a:4f:93:ed:23:a2:
         f2:61:94:7a:36:04:af:89:8a:b7:3a:29:80:65:3c:ff:55:a7:
         e9:94:bb:64:12:e5:8f:a7:89:e8:fd:c5:6d:e6:2b:06:51:7d:
         bd:5f:d2:b3:1c:e3:0d:5b:6c:6b:4f:4c:d4:99:ea:e0:1e:dc:
         a0:99:bf:6d:b4:66:73:7b:90:0a:50:f3:7d:8f:24:8a:a9:c6:
         9e:0b:e2:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:03:41 2025 by rpki-client