This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa
File:                     7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa (raw, json)
Hash identifier:          R9hTKLax5WGVDqSTzWzuXeliwt84bQ1gTM44V+39wHo=
Subject key identifier:   28:F6:5C:E3:96:0F:93:2E:BB:4C:C2:1D:61:18:2D:35:2D:92:45:61
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       67576656135011E7C9904B478D757B52C5B6430D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa
Signing time:             Sat 29 Nov 2025 00:30:15 +0000
ROA not before:           Sat 29 Nov 2025 00:30:15 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:57:66:56:13:50:11:e7:c9:90:4b:47:8d:75:7b:52:c5:b6:43:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 29 00:30:15 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=d0440df0a001ae223f75954f5f3ee3a0d008bd6f5c15c006e65c1380127271f3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:3f:ad:ac:3f:8c:90:7a:82:2c:3a:20:88:
                    d6:d9:2d:bd:15:fc:c3:18:6c:1e:58:75:3a:70:b6:
                    72:3a:2c:e9:74:d8:2e:b8:b7:3e:df:40:3b:12:be:
                    b1:94:83:79:ee:49:e6:7a:56:05:09:52:4b:f3:9c:
                    98:94:94:18:a1:3b:d2:ed:8a:77:58:53:8b:be:82:
                    f1:5b:3a:a9:43:15:02:73:a0:9d:fe:58:87:22:fe:
                    f7:8d:bd:27:ec:6e:9f:77:0a:e7:6a:8e:8f:d3:ac:
                    d2:c6:a7:8c:a4:45:ef:93:4e:5c:ea:22:c3:52:6f:
                    7a:4a:47:ac:8d:5f:9d:00:0e:ec:a0:aa:41:fe:80:
                    b9:54:fc:0b:da:d5:5f:ad:2a:b6:bf:47:5c:b5:e0:
                    9d:f4:5d:5d:81:4a:a4:ee:9a:de:69:15:37:4d:05:
                    28:ae:f6:ff:56:61:bc:0c:de:90:b5:82:f1:36:bc:
                    d2:08:4f:49:84:18:64:50:6e:b4:10:90:7e:08:e4:
                    c1:95:28:26:ca:45:18:9e:de:e8:cc:40:12:df:09:
                    eb:d3:b3:fb:f1:4c:a3:80:12:16:6e:f8:50:09:d2:
                    a7:01:a0:fd:73:af:ab:5a:92:f0:d4:a4:c7:a4:be:
                    c8:5e:7e:45:3e:ad:07:1a:e5:6f:37:6c:91:95:6e:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F6:5C:E3:96:0F:93:2E:BB:4C:C2:1D:61:18:2D:35:2D:92:45:61
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f010::/44

    Signature Algorithm: sha256WithRSAEncryption
         a4:cf:99:26:36:14:60:3b:78:79:77:34:b1:30:fb:eb:6e:1f:
         58:06:2f:19:fd:6a:16:fa:fb:ef:83:d2:60:d8:8c:83:84:61:
         b0:2c:c9:fa:c3:70:c1:48:d3:52:aa:0c:66:bd:55:5c:77:6b:
         d3:2a:dd:3a:d5:9e:60:51:6c:ae:91:81:0a:bc:24:a5:aa:9e:
         39:b5:22:96:1f:e2:64:59:3f:d4:ae:ee:02:f4:b9:e1:5c:0b:
         6e:6f:14:a0:0c:66:cf:10:4a:25:3b:20:b0:b7:d1:11:83:61:
         e7:32:f1:76:b3:b4:4b:75:ca:fd:a9:10:d5:78:7f:67:be:21:
         dd:90:6a:2f:c4:6a:6e:5c:8e:10:67:f7:97:95:55:9d:ed:32:
         f0:c5:6d:de:e3:96:3d:97:3a:d5:4f:08:69:27:03:fb:f0:de:
         6b:9f:2f:64:bd:20:91:83:e5:cb:5f:79:3c:07:b1:d3:e6:ae:
         92:fb:58:e1:be:5a:a6:af:92:c5:97:aa:5f:14:26:81:4f:7f:
         9e:e8:4d:99:2a:0c:65:b3:1a:7c:78:70:68:12:9c:2e:c3:7b:
         96:05:7b:f2:1e:87:77:eb:ef:8d:ff:4b:54:cc:3d:10:ac:70:
         ac:22:8a:52:ff:a4:55:bb:0b:3d:a4:d6:27:bd:a7:e5:bd:60:
         e5:8a:26:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:29:21 2025 by rpki-client