This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
File:                     8a8b863b-298e-48a9-bced-202e80d98f01.roa (raw, json)
Hash identifier:          9DPKn3EYOtuqwlwC5eUmA1dYZ84xXb1W+THdS7R3eyY=
Subject key identifier:   AA:20:63:27:95:33:7C:A3:BA:54:70:87:D3:95:7A:06:72:F6:0E:E2
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5896857CAB43F1BBC7E7640FC462BB0AF0A158E2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
Signing time:             Wed 10 Dec 2025 05:10:47 +0000
ROA not before:           Wed 10 Dec 2025 05:10:47 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:ee00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:96:85:7c:ab:43:f1:bb:c7:e7:64:0f:c4:62:bb:0a:f0:a1:58:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 05:10:47 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=ed383844ea91382d451c8ef68ac3534e772c4d1973fcf4a723519611de14dd3e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:00:b7:59:d0:f9:89:d6:a0:fe:c6:0a:96:
                    7d:5d:26:af:5c:80:ed:df:75:37:73:c8:26:b6:d1:
                    f1:69:9f:b2:c7:52:d8:de:45:bb:c9:c3:26:d1:63:
                    8f:ae:fb:b4:85:79:d2:d7:8f:a4:26:67:6d:fc:d0:
                    a9:89:9e:7d:5a:b0:7b:ed:43:cd:3c:af:6c:4d:73:
                    10:58:4a:ec:7b:a7:cb:53:34:61:cf:a1:55:24:ba:
                    76:38:dc:08:b7:1e:d5:ec:3b:e7:30:7c:b5:3e:81:
                    fc:b9:a1:41:ab:49:20:ff:38:ac:0b:5b:8a:d4:b8:
                    fa:1b:13:d7:6a:fd:74:d6:0a:8c:85:91:9c:29:3e:
                    a1:46:1f:50:41:ad:7a:08:5d:c9:f3:ae:49:57:85:
                    01:46:3f:32:ea:c9:06:f1:7b:8e:16:3c:6c:0d:2d:
                    d2:18:bf:c6:0b:70:28:6f:a7:85:9c:7e:63:e7:3b:
                    73:07:df:3f:2d:fc:42:ba:44:22:37:ab:2f:db:f5:
                    81:cf:4b:70:bf:64:39:c0:5c:5d:a4:07:1d:0b:30:
                    3d:f5:11:aa:3c:a6:2a:c0:ed:3c:cd:97:9a:69:bc:
                    61:d2:ae:8c:74:4b:c6:42:c4:22:2e:04:f9:a1:9c:
                    3e:ae:72:a8:0d:35:49:10:e0:0b:94:a7:e2:55:4a:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:20:63:27:95:33:7C:A3:BA:54:70:87:D3:95:7A:06:72:F6:0E:E2
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:38:b8:be:e8:0a:79:ae:cd:f8:8a:8e:67:13:a8:4b:db:22:
         73:e4:ed:ed:17:37:4d:cc:aa:2a:77:d4:9d:7e:9a:d0:21:1a:
         50:e1:61:c9:e1:0f:ea:1a:2f:2c:45:d9:0d:f9:f6:7e:3c:fb:
         98:fd:eb:32:a4:f0:e8:71:64:13:75:95:23:cd:d3:b2:a9:68:
         47:f2:0e:ec:2d:8a:3d:12:ab:ed:a7:99:e4:7e:55:6b:92:d2:
         47:6c:f9:6e:5d:a8:d6:8f:e3:75:40:32:32:83:6c:ea:62:6d:
         bf:2a:d7:aa:44:9b:99:e3:70:62:f9:93:4f:22:8d:c9:f8:e3:
         08:32:88:e1:49:35:ae:54:96:20:06:ce:68:f8:ed:05:ac:34:
         33:b8:99:16:cb:38:6b:66:0b:18:83:f1:0e:66:80:ec:41:cc:
         22:e3:8d:80:f6:43:e3:48:f4:a9:0a:8e:5c:59:d3:72:97:7d:
         c4:7c:51:a8:c8:16:74:b6:40:d8:3e:e2:43:ca:1f:0e:fb:c9:
         ef:a6:47:1d:8c:1b:a8:a0:43:4e:92:3a:7a:25:93:b5:56:5d:
         04:e6:8c:80:c9:5a:f4:58:87:e7:fd:cc:be:81:19:6b:3c:b2:
         52:47:29:21:b8:60:a1:84:d1:91:ab:53:08:1e:ec:a0:cb:86:
         71:cc:33:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 21:51:38 2025 by rpki-client