This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa
File:                     73712e14-51d5-41db-bcf2-73aa504e6eab.roa (raw, json)
Hash identifier:          H80xCZlSiFONoFgGtbHqyCP2Rxo+mP/AR0nBmE//yjo=
Subject key identifier:   80:B4:6E:54:D1:30:12:9F:CE:14:3C:BB:A9:31:FC:06:66:C0:B1:8F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2BC479A9A0B54DCD0F535C703D967D0041B1B7EB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa
Signing time:             Sat 15 Nov 2025 05:00:11 +0000
ROA not before:           Sat 15 Nov 2025 05:00:11 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c4:79:a9:a0:b5:4d:cd:0f:53:5c:70:3d:96:7d:00:41:b1:b7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:00:11 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=c16be08530f9689fc661a998eb5a02d2109a6cfa994c87d0e3f955e7eb8ad9ac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:0b:b6:82:a1:c7:3a:9f:9e:fa:69:50:e8:
                    5a:55:3e:46:57:c8:01:a2:71:b7:9b:3f:ca:20:92:
                    62:59:9f:a4:d7:e1:f4:4b:9a:0a:5c:84:60:55:7f:
                    a8:52:c6:c6:eb:38:7e:fb:ac:89:cb:fa:e7:9e:c9:
                    ea:e2:68:a5:d3:49:28:ea:d4:49:1a:57:ff:a1:dd:
                    2f:de:b8:3d:5a:75:85:58:eb:c2:22:16:8e:c9:ee:
                    7a:3d:ab:36:09:64:d5:33:4d:33:91:da:f8:36:67:
                    e5:28:84:02:06:30:9c:29:6a:91:e6:4b:de:cb:c5:
                    92:1d:2d:14:43:5c:76:a1:a2:0e:e7:55:ce:93:b8:
                    f0:8e:09:92:d8:85:81:c9:87:99:c1:0d:7f:e6:5d:
                    cc:31:48:f3:76:01:53:37:b2:07:82:db:90:21:a1:
                    79:c4:ff:97:65:39:4b:7d:26:a0:4c:fb:a3:e5:44:
                    8f:02:98:fb:4d:1f:47:cb:03:c5:57:1a:a9:70:ec:
                    29:d5:db:f6:f4:cc:66:6b:ab:f3:18:fe:f3:23:18:
                    f8:51:1f:3d:b7:9e:37:f1:59:f8:48:72:92:a0:df:
                    27:d7:98:bc:e8:04:8b:6e:dd:bd:ee:6f:04:b6:54:
                    bf:b3:d2:c9:a4:ad:cf:2d:c7:51:59:d0:5a:e4:99:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B4:6E:54:D1:30:12:9F:CE:14:3C:BB:A9:31:FC:06:66:C0:B1:8F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:ef:94:ea:97:70:72:26:55:ce:51:e8:e0:e8:df:f4:8e:ea:
         af:07:86:fa:f4:0b:a6:43:e7:e6:ee:41:a0:ba:bd:30:f7:2a:
         72:7f:d0:37:a4:7e:f8:2a:c0:4c:c3:e4:8f:72:2f:9a:9e:2e:
         7d:96:3b:b3:aa:76:86:23:4e:e1:da:b5:2a:10:fd:6f:62:ce:
         94:c2:a6:f9:09:70:67:a7:27:a0:22:7e:e2:11:38:02:d1:8f:
         6e:d5:81:4a:5a:41:be:d9:96:8b:5d:75:fc:67:08:32:7f:c2:
         b2:03:6c:24:05:f1:8d:57:a4:b0:ab:ad:bc:75:39:a0:20:c4:
         99:82:c4:90:30:81:7c:57:d9:28:78:3c:7a:2a:8f:81:43:26:
         ba:58:cb:87:d6:22:03:28:b4:1d:b2:ae:fb:e9:57:db:82:c2:
         2f:da:75:fa:f1:5e:1e:03:67:37:66:a6:28:1a:60:1f:45:f5:
         0a:f0:a2:bd:8e:3a:65:1e:a2:9a:73:70:69:07:8d:ee:42:ad:
         17:29:40:5f:cf:d1:f1:38:b2:31:79:a5:3f:67:4c:55:7b:8f:
         f5:7c:f7:40:f7:e5:2e:6c:cd:a3:e3:52:79:6f:f6:38:f1:7e:
         55:01:25:22:6b:99:05:29:d7:cb:dd:c7:a1:88:b9:e3:d0:17:
         b4:4a:49:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:56:40 2025 by rpki-client