This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
File:                     8a8b863b-298e-48a9-bced-202e80d98f01.roa (raw, json)
Hash identifier:          CkOchgg5E98XkG+3q3Pmr7txYGSQQ1U0FbfUGXyqugU=
Subject key identifier:   36:8B:2B:4D:10:62:D3:E8:4E:6A:E4:A3:20:89:A6:91:BD:A1:E0:DD
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2F8B9B67BBA79E9BF7EDAC22F5530F3C5BA01B15
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
Signing time:             Sat 15 Nov 2025 05:10:42 +0000
ROA not before:           Sat 15 Nov 2025 05:10:42 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:ee00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8b:9b:67:bb:a7:9e:9b:f7:ed:ac:22:f5:53:0f:3c:5b:a0:1b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:10:42 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=8af1b60e12edf570455bfa2027cf12c209b77cd4bc6c737cd2454b97313515f6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0e:2e:49:de:6a:a3:b8:5c:07:63:4e:55:f1:
                    80:28:89:0d:82:ea:fb:d7:e7:83:51:e6:b7:d7:52:
                    f3:fc:c6:9b:29:b3:c2:1a:77:5d:d0:cb:ff:8e:be:
                    f9:8c:60:15:24:de:fe:59:ec:66:d8:aa:af:e9:c1:
                    6a:63:e9:fa:71:5d:99:aa:d2:7c:c1:7a:4a:ff:bd:
                    68:ac:dd:73:7f:30:84:b1:cd:67:f9:96:26:c6:a2:
                    9c:d3:cb:a6:4f:6e:be:b5:bf:0d:06:89:cb:93:67:
                    36:ff:a7:64:35:cf:28:89:a4:7e:3d:89:72:55:3e:
                    f9:c8:42:2c:64:fb:a0:e3:34:f0:c1:51:60:a8:15:
                    2f:a2:c5:c7:f5:84:e9:b1:4e:78:82:c0:9b:13:00:
                    31:c5:73:fd:65:47:44:78:cb:1c:b2:56:58:39:24:
                    e9:2d:a0:84:5d:8f:6b:4a:90:79:b9:f5:b3:5f:29:
                    80:96:fe:23:9f:ca:63:d7:4b:2f:83:ff:33:85:fb:
                    9e:f6:99:d7:f1:be:b0:d8:d7:2c:66:49:38:03:64:
                    1c:70:5f:98:8e:e9:29:90:96:d9:73:45:e4:dc:d7:
                    bb:4f:16:53:e3:21:6a:0f:f9:4c:4f:1b:26:6f:89:
                    f8:d0:7e:74:5f:35:76:02:79:bf:da:b7:bd:76:66:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:2B:4D:10:62:D3:E8:4E:6A:E4:A3:20:89:A6:91:BD:A1:E0:DD
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:cd:8d:44:2c:33:f4:93:5f:e8:15:31:9b:17:5a:ee:a0:
         b4:25:22:e4:9c:f4:17:b0:13:42:13:ed:7e:48:db:b0:92:73:
         28:1b:28:2b:1c:53:cc:1a:c7:d3:13:9a:98:9d:a7:27:7d:6b:
         52:b0:fb:d5:f4:51:5f:ec:92:88:c7:6c:f3:e0:5e:e4:8b:7f:
         86:0a:d6:1c:02:c9:d5:30:eb:f3:a2:49:cb:a9:fd:4c:21:0f:
         d2:b6:f3:e4:f8:c6:ab:c5:b9:a1:8c:1c:bf:06:19:cd:9b:d9:
         ab:da:1e:7e:16:55:58:71:ae:ae:08:98:0a:23:dc:3e:6d:a3:
         e2:9b:5f:35:a2:6f:4d:d9:89:92:c7:2e:11:d5:97:a1:45:69:
         12:d1:88:20:9e:83:c8:ae:6c:79:95:e3:78:85:c3:46:ad:fa:
         22:da:52:12:b1:80:59:f9:1d:67:f2:a2:92:66:87:de:8b:2b:
         9b:fb:5f:e1:ff:61:fd:e1:ab:4e:56:1d:96:90:08:3a:ee:99:
         b1:7b:98:ec:17:73:be:e7:1e:c6:ba:75:85:01:e5:04:aa:31:
         1a:3c:9b:cb:81:9e:00:74:70:0f:7c:e3:ab:34:8d:2c:23:d8:
         1f:90:55:57:ea:ed:79:6f:2e:84:8b:2d:af:ea:96:10:b6:92:
         4d:75:12:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:04:37 2025 by rpki-client