This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa
File:                     b2d641cc-0376-4d82-897a-3d5596d61679.roa (raw, json)
Hash identifier:          6jibt5FVJ10jW6rokRQMkvqF5cC5tsKlW8WIkqmzvd4=
Subject key identifier:   14:2B:B6:59:74:57:74:38:E7:05:39:DF:2A:B5:00:02:A7:73:6D:AF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       295BB9218900CEB885196FA2E1292841DD100D9C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa
Signing time:             Sat 22 Nov 2025 00:00:07 +0000
ROA not before:           Sat 22 Nov 2025 00:00:07 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f2:7101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5b:b9:21:89:00:ce:b8:85:19:6f:a2:e1:29:28:41:dd:10:0d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 22 00:00:07 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=7bba829bfda0eee5a74fdb6c047d16391cb85ea0eabdeaa96665e74fb96427d6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:df:55:1a:67:a2:fa:df:c2:54:98:cd:38:
                    dc:f4:0b:89:06:99:61:34:98:00:a0:09:58:bc:31:
                    43:57:e9:01:b4:47:d3:08:05:dd:52:da:d0:7f:78:
                    cb:55:35:08:c4:25:b7:12:b6:d8:0b:7c:0e:3d:17:
                    ba:53:18:05:54:f7:c6:51:1b:42:b3:89:cd:5f:27:
                    89:1c:2d:6a:1b:31:5f:51:2e:94:9f:59:f2:ac:e3:
                    b3:29:f4:ef:6f:66:38:35:9e:a9:19:82:a4:fc:23:
                    61:a2:1b:e6:84:87:98:23:6b:e1:73:51:3c:0b:f0:
                    57:1b:74:af:ce:88:df:4e:77:13:82:cd:a6:4b:31:
                    6e:35:c2:a4:7e:e2:97:13:b7:ef:54:21:0a:6b:ed:
                    74:6b:d0:7d:97:c9:ae:32:95:2c:27:af:d8:a2:4c:
                    6d:24:8e:6b:0d:06:cb:4f:14:d9:79:d7:9b:9a:bf:
                    ba:d9:2b:fc:80:28:ce:6a:31:25:44:c6:92:f6:1c:
                    8c:b4:c4:85:92:ed:6c:d9:39:84:38:ff:30:e0:be:
                    a5:ea:08:12:56:87:87:64:5a:28:8f:65:26:1e:87:
                    54:57:3c:72:5c:b5:ab:d2:3c:d3:28:f2:5f:e4:67:
                    20:2c:84:e0:f3:90:71:3f:8b:dd:59:a4:0a:0c:85:
                    e0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2B:B6:59:74:57:74:38:E7:05:39:DF:2A:B5:00:02:A7:73:6D:AF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7101::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:25:83:c3:18:a7:2e:91:78:04:3a:ce:69:a9:80:eb:f5:fd:
         a4:e4:87:81:ee:cc:a3:40:7d:23:0b:33:6e:a8:9f:5d:1e:eb:
         3b:b9:1a:1e:1b:31:66:23:b7:38:7b:7d:24:76:35:7d:f1:fa:
         92:60:3a:f6:83:f0:09:fb:06:13:d7:34:38:df:97:b3:cf:87:
         92:39:bd:0d:9b:d5:89:4a:84:1d:c6:ec:9a:3a:60:91:ee:6e:
         a8:06:52:aa:4f:f9:2b:74:4b:dd:4b:e9:95:6b:9c:82:2a:9c:
         0d:fb:56:4a:32:67:de:5b:87:43:da:f9:ea:d1:12:49:57:13:
         63:fa:e7:26:a9:c0:8d:f9:84:eb:2c:e9:5b:90:ae:f0:29:9c:
         73:a1:56:4d:c0:41:c4:d4:26:db:7d:7d:63:09:e2:22:3e:7c:
         e0:b0:53:9c:96:59:2e:5b:8c:d5:b6:35:dc:a4:98:2c:21:3d:
         33:98:60:64:45:05:48:80:97:61:66:56:87:4f:2e:f5:24:3e:
         72:a9:ed:23:d0:64:39:3f:14:85:35:92:17:be:f2:0a:97:14:
         ee:aa:e8:ca:47:96:a3:a9:74:08:03:85:aa:3b:f3:8f:b7:f7:
         49:d3:d0:da:7f:58:48:27:6b:57:fd:92:a7:d0:1e:2e:dc:32:
         ee:8f:cd:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:12:04 2025 by rpki-client