This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa
File:                     71a2a2c0-b8db-4847-a756-b7515aa42b07.roa (raw, json)
Hash identifier:          1F1BewNH1L1rK8So50jLieCWT9cPBL6aPtguo+74Zao=
Subject key identifier:   D6:72:15:F8:3E:3F:EC:29:ED:93:E6:BD:E1:1D:F2:47:68:27:77:62
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       506FCEB68C02807731E1A170DB74F5F5503734EE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa
Signing time:             Wed 10 Dec 2025 05:10:13 +0000
ROA not before:           Wed 10 Dec 2025 05:10:13 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5510::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6f:ce:b6:8c:02:80:77:31:e1:a1:70:db:74:f5:f5:50:37:34:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 05:10:13 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=0e84125af248430e5ba1ee575dba281d39886a6bffb017ca793f1c87b43611d8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:b2:1c:18:e5:d8:68:2b:de:06:99:00:b6:
                    9a:2b:da:37:40:89:14:04:cd:78:e0:bf:5b:27:73:
                    0b:a2:9e:35:bf:ed:f1:cb:06:67:82:21:eb:c2:d3:
                    54:af:54:76:12:4e:00:17:da:60:85:5a:25:b9:f5:
                    ce:87:0f:72:94:9c:18:cb:2a:d1:ed:71:38:55:01:
                    9d:0f:83:b9:72:a8:f6:ba:de:e3:c9:09:ca:45:b8:
                    04:09:df:d2:32:f2:f9:d3:3b:25:19:e2:d1:ac:8e:
                    4b:ba:2d:72:25:aa:4e:c8:8c:90:11:1e:be:a6:cd:
                    8f:2f:b9:5d:ea:d5:06:44:5c:00:e7:7b:ab:ed:dd:
                    1b:c0:1c:dc:6b:d2:d4:38:61:27:a1:a2:82:62:0b:
                    6c:07:61:16:dc:95:39:9f:db:7c:73:2b:95:01:4b:
                    47:c0:2b:cd:40:95:c6:d2:5b:61:56:e1:31:76:1c:
                    1e:d5:e8:e5:6a:a8:41:1b:69:d3:3e:64:d7:c3:37:
                    f0:9b:6d:e0:d9:a4:aa:7d:f4:2d:fa:1e:d9:8f:c9:
                    ab:6a:d2:8d:9b:30:2b:a1:03:7a:d8:29:f8:d6:b4:
                    ee:1e:73:db:72:13:4e:44:cb:06:f9:13:73:8e:b7:
                    fe:19:f6:2d:fe:b9:ce:b0:94:15:4b:b2:0a:37:36:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:72:15:F8:3E:3F:EC:29:ED:93:E6:BD:E1:1D:F2:47:68:27:77:62
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5510::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:0a:00:8a:8e:53:fe:b6:d5:cd:7b:99:74:77:be:7f:f9:57:
         f4:2f:3c:b7:44:6a:a9:c3:77:e2:73:cb:c3:0a:9b:d4:2e:78:
         37:e9:70:44:34:4d:53:be:58:cd:8b:e5:c9:f2:49:29:ad:f4:
         46:4c:ad:04:e9:d1:ac:3b:07:e5:de:71:8b:d1:40:57:5c:01:
         6d:7d:23:df:1b:ac:fe:46:38:7e:ec:64:e8:18:8f:a4:ae:31:
         7a:82:60:96:20:df:d9:e1:9f:1f:07:5d:a2:f9:9d:49:d5:f3:
         34:4a:ff:1c:cc:19:bb:d8:7c:5b:03:6d:84:c9:61:dd:79:44:
         53:d7:43:ca:e6:bb:6a:c4:99:5d:aa:8d:72:e2:47:a3:56:a0:
         e5:29:bf:bf:3a:56:c4:a7:93:66:d4:ae:c9:31:5c:69:ec:fb:
         70:14:17:1a:f2:01:aa:b3:cf:fb:5c:0e:53:3e:d4:04:93:64:
         fe:32:e5:90:4c:f2:95:c9:63:3d:b4:2f:b3:c1:de:b0:56:53:
         03:55:09:d0:eb:4a:a2:7a:2e:57:40:38:c5:11:5d:e6:b9:32:
         1c:2d:dc:9e:42:62:73:03:80:30:c4:74:f2:b1:62:51:5d:a0:
         98:44:7e:e4:a7:0e:2e:07:9e:70:af:8e:e9:a3:e9:59:68:bf:
         a5:04:98:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:33:23 2025 by rpki-client