This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1547439-2593-48d5-aaf8-70d69e1a8163.roa
File:                     c1547439-2593-48d5-aaf8-70d69e1a8163.roa (raw, json)
Hash identifier:          8gs3RJ5JLH3IchqSJHvG8OyyeMFeyuD7GVRh7zZ4+HI=
Subject key identifier:   72:E7:92:0C:35:0E:CB:7E:D1:F4:7D:65:B4:B8:B8:46:D2:0D:E3:E8
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7664B48F72E00C913891B7695693DB30CB502BCA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1547439-2593-48d5-aaf8-70d69e1a8163.roa
Signing time:             Sat 29 Nov 2025 00:30:13 +0000
ROA not before:           Sat 29 Nov 2025 00:30:13 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:64:b4:8f:72:e0:0c:91:38:91:b7:69:56:93:db:30:cb:50:2b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 29 00:30:13 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=bee56226b323c48eaac35804257a633963d167771c5fe5e44f12149f35ebb16a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:b3:cd:48:09:dd:78:8a:cf:74:a9:43:9a:
                    dc:4c:5e:69:1d:df:e6:c7:f9:47:e3:6f:e5:03:69:
                    26:79:d1:28:3d:19:65:0c:38:a1:3a:25:2c:3d:8e:
                    1f:99:6c:bc:08:1d:5a:5b:99:b9:e6:38:4d:5c:12:
                    fc:cc:0b:9a:38:53:48:bf:fc:bf:8a:52:a6:fc:2f:
                    47:ab:f7:a1:65:68:78:4d:8e:71:33:8e:f2:4f:5b:
                    ff:de:cb:ce:b4:e2:10:d8:66:d4:7c:2d:cc:09:fc:
                    be:19:19:6a:a3:f0:4b:61:cf:e9:77:79:10:8c:9a:
                    51:e0:ca:5b:1d:96:ab:5e:5e:7f:40:95:67:a8:de:
                    54:90:97:3a:96:eb:ac:01:c4:29:f3:a9:4f:f1:2e:
                    e4:1b:5b:3c:d3:aa:f0:66:9d:75:bf:9c:ce:5d:bf:
                    2d:51:b7:e5:63:85:d8:a2:cf:1d:7a:68:fc:5d:b5:
                    9d:6b:96:ac:98:c3:d2:52:74:15:f7:26:47:84:06:
                    24:41:35:7c:b0:32:04:4c:f7:fd:e2:d0:ac:9c:15:
                    14:5f:0f:1a:78:78:11:ed:b0:4a:a8:80:d9:5f:c1:
                    69:28:4f:f2:61:45:ee:9d:14:4f:d2:4c:e5:81:00:
                    e4:db:f8:97:9e:e7:92:4d:e9:64:1c:52:0a:20:39:
                    b2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E7:92:0C:35:0E:CB:7E:D1:F4:7D:65:B4:B8:B8:46:D2:0D:E3:E8
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1547439-2593-48d5-aaf8-70d69e1a8163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:f9:f2:48:42:34:d7:c4:59:2a:e9:f7:86:0e:e9:9f:c6:05:
         df:45:47:56:cb:38:9e:92:34:94:e9:cb:f4:bb:9c:d5:08:72:
         32:c7:97:f4:78:6e:cc:b1:01:c9:38:3c:b0:29:ac:69:74:81:
         03:7b:e4:98:47:f7:ad:8a:57:20:08:bd:97:80:46:37:49:4a:
         9d:67:d7:80:8a:11:db:cf:75:28:ca:08:ae:a2:ca:29:56:07:
         c5:2f:81:92:91:f1:ed:e5:f2:52:49:c8:91:aa:85:32:b2:97:
         d7:13:b3:3e:dd:c9:f1:64:ce:9d:10:cd:90:52:7b:3d:d1:06:
         1c:0e:0d:83:30:44:cd:8c:98:53:65:a9:bf:d2:45:32:5d:ed:
         68:6c:ac:02:cc:20:00:5f:44:12:7a:38:44:ca:f5:c0:9e:ae:
         1e:d0:d0:13:20:b9:9e:08:10:8d:2b:38:b2:38:46:2d:df:b2:
         2b:e8:0a:a1:4d:da:ac:a6:00:50:5c:e8:82:74:c4:96:b7:5d:
         5e:9b:09:d7:04:e2:44:75:40:b9:d2:16:16:97:5a:98:64:57:
         c0:bf:34:27:85:2d:8d:a9:fa:1c:7e:c9:40:1f:31:e0:d0:1f:
         34:3f:86:b9:3b:af:76:7a:62:52:b8:ac:c3:30:94:76:c2:34:
         9c:90:e0:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:01:10 2025 by rpki-client