This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa
File:                     a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa (raw, json)
Hash identifier:          4g9B9J9wwRJ8XDvjafP7tldrpI6HjRFxQeqO8Sf3YXE=
Subject key identifier:   27:22:D3:94:AF:94:F8:E8:76:1C:EB:7C:B8:30:53:C1:3B:B2:F6:D4
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       77A20C5CB64F7AC21321589D45339CC2B295C127
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa
Signing time:             Sun 16 Nov 2025 00:50:45 +0000
ROA not before:           Sun 16 Nov 2025 00:50:45 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f10b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a2:0c:5c:b6:4f:7a:c2:13:21:58:9d:45:33:9c:c2:b2:95:c1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 16 00:50:45 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=a05eea4333d77d3df85354dfc50725f4d8ce2fd0a30f393b741069d62c427353, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:c1:e8:89:de:44:71:cf:aa:d2:13:4e:b3:
                    d6:ce:4c:77:35:3d:7c:3b:e7:3c:d4:9a:89:d0:2b:
                    79:ae:e4:7b:70:59:62:e2:db:7a:ad:a8:2a:93:cb:
                    12:c1:9a:38:ad:a1:76:dc:78:37:9c:2b:d8:1c:3e:
                    03:69:91:8a:13:c3:70:42:bb:a8:f7:b4:ef:44:b2:
                    8c:f9:02:e6:8c:78:26:91:33:cc:f4:21:98:2d:63:
                    ca:02:21:ff:5c:2d:cc:33:41:36:f1:8e:6f:6f:9c:
                    12:7d:8d:78:e4:34:af:35:99:96:5c:0c:28:35:75:
                    43:69:7d:49:bd:d0:63:e7:ed:90:f5:d8:0c:3e:e8:
                    4d:be:4c:7a:81:13:f2:45:8b:09:80:e8:b0:2a:45:
                    e1:da:f3:6f:29:10:6e:ea:f5:80:02:0c:20:17:ab:
                    29:5e:d2:ee:ee:a8:bb:c0:3e:f7:ff:5d:46:07:1a:
                    dd:44:ca:fa:37:7c:39:e6:7f:e6:4a:28:5a:ac:61:
                    c6:c0:b4:b7:ed:53:c1:88:e3:09:dc:51:f5:aa:50:
                    5f:fc:81:63:07:6f:b7:c0:1d:17:f7:5c:e6:35:36:
                    5d:11:d9:64:84:83:a2:12:0e:78:f5:26:9d:78:99:
                    88:92:99:75:e4:2b:74:25:05:c6:ff:5d:e5:d4:5c:
                    62:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:22:D3:94:AF:94:F8:E8:76:1C:EB:7C:B8:30:53:C1:3B:B2:F6:D4
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:ba:7c:60:da:04:7e:39:6d:0f:7c:5a:62:e1:d4:25:81:2f:
         40:dc:15:f4:99:99:eb:c5:d7:36:36:87:ea:d4:a2:80:21:d0:
         ef:8d:fd:ec:89:53:e1:7a:27:76:b2:80:26:13:98:fa:10:b0:
         6d:9e:13:91:fd:95:05:20:85:69:51:85:bb:be:66:b9:21:11:
         fa:9d:e9:6c:ab:bd:bd:2e:59:63:44:04:d4:31:6a:93:e8:e0:
         75:e1:ad:27:0f:33:49:c4:34:1f:8d:fc:ea:7e:de:ab:57:a8:
         65:5a:ce:0a:03:b1:d4:e1:23:6b:16:3a:0d:cd:78:ab:0f:05:
         48:1d:28:0e:d5:50:ca:59:0c:76:58:2d:03:70:6f:00:61:a6:
         0c:be:d1:34:80:d8:4b:08:0a:25:ec:49:1d:10:7b:ba:0f:83:
         68:71:1d:f5:6a:4c:af:09:1e:f9:25:85:8a:9f:7c:08:c3:63:
         99:89:d8:51:2e:9c:10:92:85:cc:4f:0a:47:d7:43:4b:a1:98:
         fe:ff:f5:9e:08:81:d7:fa:d1:00:a8:05:3f:08:50:31:05:20:
         e6:33:61:6a:b1:9f:8a:88:08:42:2d:c3:22:e6:56:ae:e1:19:
         54:96:66:f5:a5:1c:79:d3:a6:d4:2f:b3:03:05:26:22:38:cf:
         69:3f:53:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:09:18 2025 by rpki-client