This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa
File:                     a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa (raw, json)
Hash identifier:          GYisgrg7Ti1g0kF20QNYIkIoESJXsVsvGb4azFXeTpg=
Subject key identifier:   41:D0:AA:C2:CC:E8:77:FC:CA:96:14:F8:E6:EB:41:5D:7F:C9:B9:23
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0F1B84E12191B10300A7E19B9A90D531C332243C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa
Signing time:             Wed 10 Dec 2025 05:10:43 +0000
ROA not before:           Wed 10 Dec 2025 05:10:43 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:eb00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1b:84:e1:21:91:b1:03:00:a7:e1:9b:9a:90:d5:31:c3:32:24:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 05:10:43 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=e0347057884b6f2722f087719d491c4db20eb99fd81ccc7b08404e8538e57bcb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:9c:f7:df:6a:af:66:37:c6:ee:5e:7f:b0:
                    4c:ae:33:86:0a:11:3a:21:cd:7a:f1:87:0f:fb:58:
                    dc:35:c4:23:4a:37:39:ef:85:80:6a:29:61:82:8c:
                    d3:da:63:83:a8:9a:54:89:9d:fa:18:6d:e9:1d:6a:
                    f5:9d:af:f4:02:88:c9:38:dd:83:ae:f5:c7:5f:c5:
                    0d:62:f3:df:67:75:25:4b:89:97:6a:a9:9a:02:c5:
                    1f:a6:4b:14:69:f4:d7:1e:cb:1d:dc:f0:22:23:b2:
                    14:94:4e:5e:cc:78:c5:41:1f:32:02:29:fc:55:91:
                    2d:31:d7:5f:a6:20:b1:07:53:39:49:2d:53:6f:3a:
                    27:ad:98:86:c0:54:6d:cd:11:3c:8e:9c:9d:7a:d5:
                    e5:49:a1:a5:30:8c:31:a0:6c:5b:e5:40:4b:1b:c3:
                    06:ce:08:b8:61:7e:b9:b9:02:6c:85:34:d8:5d:27:
                    6c:ad:8a:2c:b2:ea:7c:9c:a4:7d:81:fb:73:99:d4:
                    ce:8c:37:74:e2:c2:29:1f:fc:c1:93:a3:73:cd:60:
                    cc:13:8d:37:3f:c1:62:74:67:b6:4e:3b:d8:c2:49:
                    83:f1:d6:6d:c0:fb:f8:2c:a7:5e:68:a3:39:41:84:
                    7a:ce:08:78:14:e5:eb:73:b4:aa:59:33:71:49:ed:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D0:AA:C2:CC:E8:77:FC:CA:96:14:F8:E6:EB:41:5D:7F:C9:B9:23
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:eb00::/42

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:f3:a4:d3:c6:84:7f:65:7c:20:e1:e3:08:6a:fe:ee:e9:
         4d:39:e5:06:39:c7:68:52:68:b4:a0:26:aa:2c:14:01:35:33:
         f6:7e:42:03:6f:5d:45:5a:21:9b:43:62:98:f6:82:79:78:bf:
         e8:3c:f9:d7:e4:af:b4:c4:e0:ea:cf:fe:7a:74:19:96:c3:be:
         0b:6d:e1:86:4d:84:96:c9:5b:a2:f7:8c:3f:52:70:79:f4:6c:
         63:a2:19:d9:b1:c5:31:c5:65:d0:fe:d8:0e:03:a4:da:bd:f5:
         e4:9e:01:04:20:0b:ba:1e:81:47:7c:71:05:2e:f5:75:47:f4:
         d9:93:b6:9f:c1:36:31:82:23:80:d7:95:be:83:fb:02:25:30:
         3a:f0:6d:60:2e:97:f4:25:92:d4:13:c0:90:0d:2a:ee:d5:7c:
         f5:a2:d4:e4:4a:15:36:a8:a9:ba:14:a9:86:47:18:f0:45:cf:
         71:b4:3a:8a:08:f0:1b:8c:58:c8:a8:2c:be:00:6f:a6:46:c5:
         9a:8c:1e:e6:48:26:1d:bb:bf:d3:cf:4a:77:65:fa:9a:78:38:
         66:21:9e:af:a3:2f:31:b2:b0:93:b7:12:db:d2:b3:41:62:c9:
         30:fe:25:4c:8b:5a:fd:d8:de:0c:12:e5:8b:d7:6f:98:eb:71:
         04:49:c6:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 19 14:18:35 2025 by rpki-client