This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
File:                     765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa (raw, json)
Hash identifier:          5BQrrd+g5fiaVjgwg2ZzawAUdBBF18d7gOcHuxoek+4=
Subject key identifier:   EF:F1:FE:7A:B7:46:66:AD:37:3C:2F:FF:20:04:CD:6E:5B:29:E8:9E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3CF848A81C9B7126883F4C42FB70F2E98815E6C5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
Signing time:             Sat 15 Nov 2025 05:20:18 +0000
ROA not before:           Sat 15 Nov 2025 05:20:18 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f8:48:a8:1c:9b:71:26:88:3f:4c:42:fb:70:f2:e9:88:15:e6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:20:18 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=c0bbaa8fa7787d9155dfff9b8acbd3bc0b40091eaa96287fa925a03f0be72afb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:d9:7b:84:41:9f:69:d7:ce:81:44:82:fc:
                    88:09:9b:03:50:04:12:6c:77:c5:ff:9c:19:ad:f4:
                    6d:e3:a1:5a:0b:40:a8:e1:14:5c:7d:dd:61:2d:94:
                    87:c6:8d:2e:1d:d2:18:32:29:03:fa:49:95:c1:00:
                    6b:75:ed:45:3e:a4:be:b7:f2:76:f7:3e:41:b1:6e:
                    df:d7:92:99:83:9a:3b:7e:23:ed:2d:bb:a8:2d:8e:
                    e3:0a:af:4c:c3:bc:9c:3b:a8:5d:52:22:39:eb:ad:
                    72:f3:b5:e0:7e:5e:1c:df:a0:83:13:4f:2a:b8:c2:
                    c7:3c:3d:72:30:0f:a0:8e:3f:3c:20:2c:14:c4:81:
                    5b:99:48:d7:ba:25:38:9b:bf:35:ad:51:ea:14:3a:
                    fd:88:4b:d6:eb:49:b2:39:3c:da:83:6c:bb:6a:ad:
                    f4:2d:c2:18:82:cd:bc:ad:75:83:db:56:25:34:2a:
                    ba:a6:dd:84:bb:f8:93:25:f2:44:89:45:3e:f6:65:
                    d0:62:dc:02:98:e4:b8:c9:10:b6:92:85:5b:18:a3:
                    9b:51:12:56:03:07:4a:a4:e8:ab:04:b9:ff:6e:7f:
                    db:9c:de:b8:33:65:a2:d8:9d:aa:75:e4:70:24:74:
                    52:59:86:97:9a:8e:95:72:82:27:d8:09:d8:37:58:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F1:FE:7A:B7:46:66:AD:37:3C:2F:FF:20:04:CD:6E:5B:29:E8:9E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:9f:d6:40:f3:55:66:80:ea:a4:0b:36:8a:cc:78:d7:dc:ae:
         a3:e0:f6:b5:8f:00:4b:11:8e:2d:ea:ed:5c:ce:c2:5c:85:08:
         cd:d8:a4:92:68:c9:39:85:50:2e:ef:64:93:0d:38:de:37:7f:
         1c:ee:47:c4:bd:1b:b4:74:f8:55:6f:fc:e5:eb:e1:91:d9:a5:
         61:e6:a3:17:1d:9c:f6:ff:b1:60:1a:00:05:f5:c4:9f:9c:b8:
         80:0c:95:10:53:44:7e:88:41:28:78:cc:e3:13:41:7a:96:7e:
         f8:29:9d:0a:e2:51:d6:3b:f8:9f:c3:41:46:f5:5b:35:ea:89:
         8b:19:c4:df:3f:4e:12:2a:05:78:bd:22:85:0f:4b:73:b1:31:
         64:16:50:d3:62:55:99:fd:e8:29:38:be:f6:13:9d:85:6f:34:
         5f:72:ee:72:3f:23:ae:32:e8:98:f2:6a:93:91:35:74:3b:67:
         21:7f:f0:68:24:35:39:91:00:de:2b:97:7e:7e:b7:3a:1a:df:
         29:79:d0:da:27:95:06:5a:72:e0:fa:8f:39:f4:12:85:6b:92:
         9d:fd:3d:0d:85:67:67:41:ae:30:70:22:12:1f:29:aa:8a:2a:
         8a:c6:88:bb:26:83:84:08:a2:4b:27:fe:a2:d1:bc:6b:c0:0d:
         fc:49:6c:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:16:02 2025 by rpki-client