This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa
File:                     bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa (raw, json)
Hash identifier:          5tqwVRz+/UaBp88rOs4cpJORNI0+w+fi/wC9v2PkwPI=
Subject key identifier:   A4:D1:96:82:E9:83:08:DF:02:9A:0E:5C:3D:63:54:41:17:4E:3B:53
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2A95C171E19D263DE2F390BAC0233C1F8EC31E7A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa
Signing time:             Sun 16 Nov 2025 00:50:48 +0000
ROA not before:           Sun 16 Nov 2025 00:50:48 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f2:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:95:c1:71:e1:9d:26:3d:e2:f3:90:ba:c0:23:3c:1f:8e:c3:1e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 16 00:50:48 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=cbda2d30de78c4bab04d03b44330f4663b0c87ca05d91f32e3a9cdeeb69058bc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:31:e5:e2:24:58:31:52:f0:6e:43:cf:6a:
                    2b:c6:19:00:49:45:ee:73:e9:af:8e:46:05:d5:a8:
                    1e:d8:0d:c3:8a:e5:c9:72:b7:9f:f2:26:8e:c1:5a:
                    8c:61:50:17:4c:e1:46:09:ff:a6:7c:cf:3c:77:ff:
                    7e:36:c8:d0:04:6e:88:99:05:c5:23:25:c2:2f:a3:
                    65:48:c5:12:9e:37:a7:2b:62:bf:d5:d9:c0:03:4c:
                    38:11:e3:ad:da:b6:da:31:b3:51:f1:b9:f9:12:4e:
                    b2:f2:4e:2c:19:c8:b1:ac:f3:fb:1f:57:17:bb:0c:
                    4a:71:94:ea:4c:ea:5c:15:69:83:e0:2b:d3:e5:41:
                    8f:0a:9c:88:f6:af:f0:56:60:30:19:91:f8:b6:77:
                    8a:e9:67:0c:e4:6f:f1:1a:6e:31:ac:09:90:f1:44:
                    8f:33:b7:17:4f:fc:f1:46:79:2f:ed:d6:8d:7e:d1:
                    df:7f:c7:fc:f7:16:0b:6b:f1:eb:42:45:34:41:f5:
                    85:74:7e:b0:1b:c5:81:e2:d1:68:48:a0:e9:da:5f:
                    26:be:31:f1:6b:56:5b:91:a6:80:e8:45:ed:fa:7f:
                    8c:85:47:f4:a6:71:fb:fd:fc:38:12:a2:fc:19:17:
                    ec:be:bd:9d:6d:db:86:e5:5d:fe:c3:7e:70:85:d1:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D1:96:82:E9:83:08:DF:02:9A:0E:5C:3D:63:54:41:17:4E:3B:53
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:4d:19:b7:d5:88:b3:8a:b3:c2:ea:39:68:19:25:a3:ee:58:
         d6:ef:90:23:ee:0c:15:fa:50:18:28:10:01:d5:45:cf:ac:ff:
         d0:f6:42:ab:6d:ed:2c:cc:3b:6c:a2:ee:2f:b1:2c:93:d2:1c:
         e1:e3:0a:6c:e2:9d:8e:92:67:34:83:88:69:d4:71:d4:46:a9:
         a2:af:8a:4a:bb:a9:f7:42:1d:9c:4a:64:cb:0c:d4:5a:3f:59:
         2b:dc:17:ba:1f:c2:8b:aa:0c:ed:a0:b2:11:7a:00:8f:42:2f:
         e3:2f:5d:a3:21:83:00:79:b0:ea:98:af:42:48:27:77:6f:ed:
         97:9f:7d:59:93:1f:e6:d4:df:81:c4:3e:11:96:e3:90:1c:8b:
         45:d0:20:c1:a2:63:10:02:10:7e:7e:52:6e:7c:cc:20:0c:ae:
         5b:54:d4:bc:fd:35:80:89:f1:2d:84:94:bf:df:d5:df:99:d9:
         d6:a2:89:0b:3d:65:32:36:e4:27:20:c7:9f:2d:52:61:ea:1f:
         9f:76:05:83:c8:87:5a:05:74:d2:38:b5:87:40:65:76:39:e7:
         19:0d:56:4b:83:e8:35:a2:13:c4:e6:29:5a:7e:77:4b:64:3d:
         c4:56:57:38:20:53:dc:ac:27:b3:f1:cd:58:57:1c:ce:07:07:
         e6:34:4c:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:34:30 2025 by rpki-client