This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa
File:                     b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa (raw, json)
Hash identifier:          4U/+ZTLqeTBAaazf8VPw575EQiii4Ev95lnwjJzUdUI=
Subject key identifier:   1C:00:70:51:7D:1E:FB:1C:44:DC:8C:9C:89:A8:E6:23:F0:0A:62:C3
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0180E4CF5E34EDBB86D623316842F8D3D12370B6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa
Signing time:             Sun 16 Nov 2025 00:50:57 +0000
ROA not before:           Sun 16 Nov 2025 00:50:57 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:80:e4:cf:5e:34:ed:bb:86:d6:23:31:68:42:f8:d3:d1:23:70:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 16 00:50:57 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=eeee6472db1707c34b2ee8462989936ef7a257c4f865e6d632e99ed21cf35d5c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:ec:9e:e9:d7:82:44:a4:81:3a:81:7f:65:
                    fb:75:37:05:55:ac:77:80:ce:ad:94:1b:92:e5:df:
                    20:4d:5f:57:aa:d6:ae:b8:f2:05:5d:50:95:52:c1:
                    8c:4b:6b:81:f7:b7:20:fb:36:62:3a:7d:ea:51:ee:
                    cd:e0:0f:00:b7:71:28:f2:1f:be:15:53:50:90:e7:
                    79:24:f4:4d:5d:ce:8b:29:19:aa:52:13:c4:83:c0:
                    36:2a:9b:60:56:8c:64:39:e0:53:a0:97:cd:e2:a4:
                    4a:fd:14:4b:46:80:3a:ea:db:04:4c:01:13:9a:70:
                    f6:61:5a:bf:e3:35:17:43:62:f0:45:fc:06:19:ae:
                    50:f1:4c:ac:1f:5d:b5:46:09:c9:06:61:9f:9f:43:
                    59:ac:7c:3b:ab:2c:0f:9d:94:fa:2b:d7:06:e6:21:
                    09:a5:f4:7a:85:3e:34:a9:9f:54:1f:d7:c9:f0:3f:
                    3f:ca:1f:da:d0:1d:dd:90:88:7c:ac:b6:61:b4:14:
                    c0:d3:36:6b:aa:c9:0c:e6:2b:2d:03:38:92:36:0b:
                    70:a5:15:28:82:45:1e:60:35:9a:07:08:18:fe:90:
                    f4:bf:03:d4:0d:61:af:99:54:1b:ac:6f:9b:1c:28:
                    e3:f0:55:c6:33:ac:c2:12:29:24:f5:89:32:21:e5:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:70:51:7D:1E:FB:1C:44:DC:8C:9C:89:A8:E6:23:F0:0A:62:C3
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:ab:67:f4:96:9b:54:00:12:08:5d:98:41:51:9d:e1:98:fb:
         59:1d:63:bc:39:79:77:df:7e:c3:85:1f:0d:b2:d1:1c:15:f5:
         49:df:e8:a9:6e:f1:5c:ed:3e:09:71:84:34:a9:50:d1:7d:c5:
         2a:26:b7:09:33:a7:aa:6d:56:ce:4c:d4:8c:4d:6f:c7:e2:e0:
         92:dc:1e:f3:0c:f2:61:66:07:d9:58:e0:a4:89:3e:dd:aa:61:
         86:97:af:48:8b:51:73:8e:8e:5b:4a:40:fc:f0:14:0f:d4:6b:
         0d:d6:ad:ae:51:13:e0:0c:c7:a3:14:a6:cb:7d:e7:b4:e0:d7:
         e9:3b:e0:17:b4:ec:81:0e:19:e7:73:1c:e8:56:8a:53:45:c2:
         f6:a2:37:ab:6a:59:69:77:ba:21:96:2d:15:8b:34:cb:97:da:
         6b:be:25:ac:4d:85:09:e3:7f:68:17:30:96:fa:02:55:11:c2:
         c1:d7:23:18:8a:ce:cc:6a:1f:d8:ce:e9:99:04:db:9a:ff:e4:
         66:53:bc:e9:5a:f7:41:cd:18:bb:14:a7:2f:8d:89:8c:87:9e:
         3b:39:3d:ef:cc:b8:f4:7e:73:39:09:b2:4b:55:61:82:08:f1:
         32:60:0a:20:af:09:4a:0e:b0:3b:12:a7:d9:be:d8:76:b0:ce:
         91:da:cb:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:23:16 2025 by rpki-client