This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2e3c99e-3e03-4115-856b-b25d7e97c4f3.roa
File:                     d2e3c99e-3e03-4115-856b-b25d7e97c4f3.roa (raw, json)
Hash identifier:          bZc36koxzD4Aqx8oFLkCWHfAzjypsR2abPVA2D05AUE=
Subject key identifier:   19:CF:53:6F:91:80:87:D8:0F:65:6A:6A:47:93:BD:F8:AF:41:32:6B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       57EB376F9FAA3ACAD134E34FA4C764702825DBD2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2e3c99e-3e03-4115-856b-b25d7e97c4f3.roa
Signing time:             Tue 18 Nov 2025 00:30:11 +0000
ROA not before:           Tue 18 Nov 2025 00:30:11 +0000
ROA not after:            Mon 16 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:4141::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:eb:37:6f:9f:aa:3a:ca:d1:34:e3:4f:a4:c7:64:70:28:25:db:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 18 00:30:11 2025 GMT
            Not After : Feb 16 23:59:59 2026 GMT
        Subject: serialNumber=0f075b235d6b4a62e927d979ed902fed220cea2e8eb1454080879a894c7533c8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:d1:fe:86:d5:78:a3:0b:9f:81:57:6a:70:
                    0a:0b:d6:f9:0e:ed:21:16:98:5f:27:ac:2f:7a:c6:
                    26:34:4f:c0:d5:b5:a5:b0:95:85:0c:35:fe:3d:a0:
                    33:c1:9d:7f:68:aa:2a:4f:f6:40:19:a8:cf:fc:15:
                    9a:0d:f1:ad:2a:7c:a8:fa:aa:50:11:5a:2a:52:cf:
                    90:57:55:a2:5b:f6:78:2d:b7:5d:d6:2f:1b:1e:2b:
                    01:4b:65:fa:79:9d:08:63:e8:70:86:ae:b6:5c:de:
                    7c:ee:de:92:4f:42:c5:85:e3:60:e9:de:ce:1a:90:
                    68:46:2f:c0:31:dc:45:9d:e4:32:28:cd:c3:08:50:
                    dc:7e:43:e7:23:7a:a8:92:ac:87:cf:78:d1:0b:93:
                    22:b6:32:c2:99:96:29:a5:d7:12:54:69:53:f3:01:
                    08:3e:ec:e4:6f:7a:eb:d9:89:81:e8:ac:fe:b5:dc:
                    32:f6:fc:b3:19:21:96:ee:13:96:d8:28:05:be:c8:
                    f1:7b:7d:d9:b1:d2:19:8b:42:9d:40:60:fb:c0:eb:
                    8a:68:84:35:29:09:b2:df:0b:89:63:0a:ac:75:6c:
                    4e:5b:69:61:35:9b:dd:05:57:99:86:c6:bf:a6:a6:
                    8d:07:d4:51:7d:7d:3d:e4:af:c2:37:18:9a:b1:18:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CF:53:6F:91:80:87:D8:0F:65:6A:6A:47:93:BD:F8:AF:41:32:6B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2e3c99e-3e03-4115-856b-b25d7e97c4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:4141::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:e6:6b:80:95:b6:8c:22:22:1b:c9:9f:4f:c2:ad:22:da:
         3a:71:28:f3:21:d2:7d:d4:59:47:43:5f:3f:97:36:e3:95:28:
         54:85:cb:51:32:01:3b:22:51:48:9d:f8:34:98:d9:55:ae:8b:
         ce:ca:80:96:82:69:3f:b4:9f:c1:59:9f:fc:7d:0d:09:7e:6d:
         3d:89:b0:f2:f6:72:9d:b9:ae:25:ef:42:54:22:0e:04:1a:68:
         fc:05:ff:1f:e0:4f:be:de:fd:59:e9:9e:d4:e0:c4:f7:18:87:
         aa:ed:3d:99:1d:9e:a7:9e:ed:ef:b5:2b:d2:ac:e5:ca:dd:aa:
         8c:31:6f:5b:d6:b8:1f:2b:db:46:9d:79:4f:5c:32:fc:99:9f:
         07:1c:33:07:97:58:f4:d0:80:e5:28:93:f1:96:4a:f4:23:83:
         61:62:4e:d1:96:89:e1:ea:ac:93:2c:37:b3:75:70:91:a2:55:
         41:af:ae:3c:2d:41:40:20:d7:04:a3:d4:0c:82:1e:2d:5a:76:
         7a:7f:eb:ff:c8:16:3c:8d:d5:99:94:4f:25:d9:cb:fe:f6:93:
         0c:a4:3d:29:c6:f1:4a:11:69:72:5e:e2:bf:a9:88:6c:14:13:
         a8:59:94:e4:f4:fc:40:d6:8a:45:e4:dc:df:fe:1a:0b:71:96:
         15:59:3d:87
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUV+s3b5+qOsrRNONPpMdkcCgl29IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE4MDAzMDExWhcNMjYwMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AwZjA3NWIyMzVkNmI0YTYyZTkyN2Q5NzllZDkwMmZlZDIy
MGNlYTJlOGViMTQ1NDA4MDg3OWE4OTRjNzUzM2M4MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcy9H+htV4owufgVdqcAoL1vkO7SEWmF8nrC96xiY0T8DV
taWwlYUMNf49oDPBnX9oqipP9kAZqM/8FZoN8a0qfKj6qlARWipSz5BXVaJb9ngt
t13WLxseKwFLZfp5nQhj6HCGrrZc3nzu3pJPQsWF42Dp3s4akGhGL8Ax3EWd5DIo
zcMIUNx+Q+cjeqiSrIfPeNELkyK2MsKZliml1xJUaVPzAQg+7ORveuvZiYHorP61
3DL2/LMZIZbuE5bYKAW+yPF7fdmx0hmLQp1AYPvA64pohDUpCbLfC4ljCqx1bE5b
aWE1m90FV5mGxr+mpo0H1FF9fT3kr8I3GJqxGFghAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUGc9Tb5GAh9gPZWpqR5O9+K9BMmswHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2QyZTNjOTllLTNlMDMtNDExNS04NTZiLWIyNWQ3ZTk3YzRmMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwQUEwDQYJKoZIhvcNAQELBQADggEBAKXJ5muAlbaMIiIbyZ9Pwq0i
2jpxKPMh0n3UWUdDXz+XNuOVKFSFy1EyATsiUUid+DSY2VWui87KgJaCaT+0n8FZ
n/x9DQl+bT2JsPL2cp25riXvQlQiDgQaaPwF/x/gT77e/VnpntTgxPcYh6rtPZkd
nqee7e+1K9Ks5crdqowxb1vWuB8r20adeU9cMvyZnwccMweXWPTQgOUok/GWSvQj
g2FiTtGWieHqrJMsN7N1cJGiVUGvrjwtQUAg1wSj1AyCHi1adnp/6//IFjyN1ZmU
TyXZy/72kwykPSnG8UoRaXJe4r+piGwUE6hZlOT0/EDWikXk3N/+GgtxlhVZPYc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:58:43 2025 by rpki-client