This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1ddf06f-fa7b-4d9a-969b-553930838905.roa
File:                     c1ddf06f-fa7b-4d9a-969b-553930838905.roa (raw, json)
Hash identifier:          eNX8rxnBJWZWpOWhgkrmsCJKknYay6mYHlt3oGtapI4=
Subject key identifier:   F0:BE:3D:26:4A:80:D6:52:B5:54:00:92:A6:62:A5:CA:DC:03:71:46
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       33973F54B11ABC1AB6F7978646E6413164C8CC81
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1ddf06f-fa7b-4d9a-969b-553930838905.roa
Signing time:             Tue 25 Nov 2025 19:40:09 +0000
ROA not before:           Tue 25 Nov 2025 19:40:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6119::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:97:3f:54:b1:1a:bc:1a:b6:f7:97:86:46:e6:41:31:64:c8:cc:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 19:40:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=1a36b346e77179fee4d870ee3cd8d43bd7a3c415a4166d500cbc1e6525ff0793, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:be:31:e1:a0:ed:95:6d:0b:5b:4b:f2:1e:
                    89:72:af:a5:76:35:e9:46:2a:9e:7f:c2:c5:83:16:
                    35:a8:8f:0a:0e:71:bc:62:3b:d5:ab:79:58:3c:f6:
                    25:8e:03:1c:55:b6:e0:f9:41:39:d0:28:5b:17:ad:
                    67:c4:d1:0d:b3:78:7c:8b:7f:1f:bf:77:35:e7:24:
                    03:1c:2a:ea:ea:0a:b5:af:20:b5:04:aa:3b:ed:b6:
                    2a:c4:df:7d:66:47:ca:e7:28:d4:77:3d:f5:95:b9:
                    0d:d7:28:6e:42:c1:78:e6:48:9e:78:1d:78:9c:29:
                    5b:be:cf:21:38:e5:6c:8d:8d:04:ec:dd:a1:e9:2a:
                    ff:9e:3a:a3:28:90:14:86:8e:12:29:2a:24:44:18:
                    85:a2:e8:b7:b7:41:d5:d3:c1:53:1f:e1:d6:a6:73:
                    df:71:ba:01:6a:ab:85:11:7b:94:0c:10:21:ae:ae:
                    16:98:54:8e:4b:5f:c1:d5:3c:ea:c3:63:10:04:9a:
                    26:da:4b:f8:75:73:88:87:56:c9:a2:0d:64:66:e9:
                    b5:52:23:c6:33:53:bd:67:61:ba:1c:b6:d6:d3:5f:
                    e2:76:a8:04:fc:5f:2a:ff:07:2c:b6:10:11:fe:d3:
                    a8:d4:c8:f1:04:ce:6f:ad:91:34:ec:76:e9:e2:bc:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:3D:26:4A:80:D6:52:B5:54:00:92:A6:62:A5:CA:DC:03:71:46
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1ddf06f-fa7b-4d9a-969b-553930838905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6119::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:4e:8e:44:e8:09:6d:ee:6e:ba:fe:61:e0:5a:29:a4:98:
         63:e5:ec:53:d1:af:af:fe:02:d2:09:0d:de:d2:e8:5e:c5:9c:
         0a:a0:29:e9:2f:d6:e1:bd:a0:a0:58:e6:61:8b:ce:23:95:84:
         76:5f:8d:7b:02:76:f8:45:44:63:81:ab:6e:10:20:9b:81:91:
         c5:fc:b9:1d:2a:2b:ce:1c:34:2e:ef:98:53:fe:4f:b1:e3:e3:
         1c:a0:fa:ea:58:18:1d:01:41:d0:fa:bd:cb:86:43:1f:35:8d:
         fd:26:a2:c3:c4:f8:9a:71:eb:fd:c2:1e:13:2a:06:4e:0a:e5:
         db:86:6f:4e:9b:b2:51:a8:91:f9:bc:a7:22:e2:16:4b:fa:6e:
         eb:e9:06:e8:c4:99:2d:9f:8b:17:64:01:e2:d0:27:09:3c:29:
         93:db:e4:d1:b2:0f:10:ee:e5:97:df:dc:c3:07:b4:81:cb:1e:
         4f:0c:88:8e:17:97:25:3d:99:b9:ca:be:cb:40:71:0a:03:a6:
         e2:40:08:46:ae:d5:04:96:f7:32:8b:3b:8a:20:9b:70:ae:ce:
         4f:31:59:9a:ce:52:3e:a2:19:d7:ab:ae:20:ad:6b:46:c0:7b:
         95:7f:cd:2b:4c:2b:9b:c6:6b:79:92:7b:b9:f4:9a:ae:42:7c:
         e6:7c:68:e9
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUM5c/VLEavBq295eGRuZBMWTIzIEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTI1MTk0MDA5WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxYTM2YjM0NmU3NzE3OWZlZTRkODcwZWUzY2Q4ZDQzYmQ3
YTNjNDE1YTQxNjZkNTAwY2JjMWU2NTI1ZmYwNzkzMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDimL4x4aDtlW0LW0vyHolyr6V2NelGKp5/wsWDFjWojwoO
cbxiO9WreVg89iWOAxxVtuD5QTnQKFsXrWfE0Q2zeHyLfx+/dzXnJAMcKurqCrWv
ILUEqjvttirE331mR8rnKNR3PfWVuQ3XKG5CwXjmSJ54HXicKVu+zyE45WyNjQTs
3aHpKv+eOqMokBSGjhIpKiREGIWi6Le3QdXTwVMf4damc99xugFqq4URe5QMECGu
rhaYVI5LX8HVPOrDYxAEmibaS/h1c4iHVsmiDWRm6bVSI8YzU71nYbocttbTX+J2
qAT8Xyr/Byy2EBH+06jUyPEEzm+tkTTsdunivMT7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU8L49JkqA1lK1VACSpmKlytwDcUYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2MxZGRmMDZmLWZhN2ItNGQ5YS05NjliLTU1MzkzMDgzODkwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYRkwDQYJKoZIhvcNAQELBQADggEBAIINTo5E6Alt7m66/mHgWimk
mGPl7FPRr6/+AtIJDd7S6F7FnAqgKekv1uG9oKBY5mGLziOVhHZfjXsCdvhFRGOB
q24QIJuBkcX8uR0qK84cNC7vmFP+T7Hj4xyg+upYGB0BQdD6vcuGQx81jf0mosPE
+Jpx6/3CHhMqBk4K5duGb06bslGokfm8pyLiFkv6buvpBujEmS2fixdkAeLQJwk8
KZPb5NGyDxDu5Zff3MMHtIHLHk8MiI4XlyU9mbnKvstAcQoDpuJACEau1QSW9zKL
O4ogm3Cuzk8xWZrOUj6iGderriCta0bAe5V/zStMK5vGa3mSe7n0mq5CfOZ8aOk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:18 2025 by rpki-client