This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa
File:                     d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa (raw, json)
Hash identifier:          XdtSRG3244EQ59Kpsh4MxIABQzrOvunQNRFci8At+jc=
Subject key identifier:   51:B6:7B:6B:3F:5D:D3:57:5A:0E:F9:53:4B:6D:73:3F:35:A4:7E:C7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       72218D5C0FFC65C0ECE4843427A7762B256557E6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa
Signing time:             Tue 25 Nov 2025 19:50:09 +0000
ROA not before:           Tue 25 Nov 2025 19:50:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:611c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:21:8d:5c:0f:fc:65:c0:ec:e4:84:34:27:a7:76:2b:25:65:57:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 19:50:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=707bd27d6f2bbe9b8b69e8e6012310e98eb19da337abed3a7f738a0de0553569, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7e:f3:c9:94:a8:58:f6:ba:21:1a:e7:6b:1b:
                    62:fa:a9:56:0b:56:b0:66:df:8e:04:2f:ad:30:28:
                    52:4d:d7:b3:de:30:86:c7:2f:75:41:5d:de:0f:0a:
                    25:1b:2c:dc:42:cf:ae:7d:52:00:a9:4a:ba:f6:f9:
                    36:12:5f:66:c2:20:76:d0:5a:d7:af:25:20:b7:ec:
                    4f:65:3a:16:9c:7d:86:12:37:58:eb:41:38:c8:ea:
                    0a:ab:f8:3b:ce:4d:cb:54:85:be:59:eb:f7:a1:6b:
                    92:0c:af:8c:26:fb:c6:07:fd:02:54:cc:ea:40:5f:
                    dc:5c:6c:0e:96:01:ea:62:4f:88:29:5d:3f:b8:1a:
                    f0:ea:5d:f2:52:6e:23:09:66:e8:82:7f:1f:4a:0a:
                    65:55:bb:44:60:9c:30:e5:93:6b:b0:62:fd:cf:7e:
                    80:e5:34:30:37:81:70:c5:f3:b8:ad:08:9f:e7:d4:
                    ae:6c:3d:5b:2f:0a:fe:60:a8:11:39:90:bd:4d:c8:
                    74:79:e8:68:32:25:8c:c6:09:f7:18:2e:5b:d4:cb:
                    25:13:74:da:ad:5e:73:e1:8a:0e:2f:eb:ae:db:8a:
                    85:4c:ab:f2:6f:4f:2f:2c:1a:a5:ea:76:67:5a:b8:
                    78:6f:a1:92:b1:70:b5:0a:a8:1f:26:63:16:79:61:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B6:7B:6B:3F:5D:D3:57:5A:0E:F9:53:4B:6D:73:3F:35:A4:7E:C7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:611c::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:4f:b4:c6:56:8e:b4:4c:e9:2e:50:5b:98:bb:fa:07:26:
         23:cf:ed:7c:80:93:f5:f4:f4:60:af:39:dd:5c:f7:9f:3b:22:
         0e:52:23:ea:f7:fe:3b:73:65:54:da:55:b1:39:4c:d0:ed:a7:
         44:7b:65:66:cd:f1:37:53:66:1f:62:b1:3b:42:37:8b:23:5f:
         9d:9b:e0:a1:a9:cc:e4:1c:cf:db:cc:9d:09:2c:da:8b:c8:be:
         3a:d8:21:8b:54:46:5f:5c:be:95:06:87:27:60:e2:b1:93:5a:
         c3:c1:c5:f0:37:36:1e:17:af:af:9c:5a:79:4a:24:0e:fb:86:
         a6:49:00:dc:5d:4a:26:44:9a:65:35:10:9e:9f:69:ea:00:01:
         cb:34:82:2d:89:33:eb:18:02:48:7f:a1:fa:0a:f8:28:d0:4e:
         c9:69:c2:1e:db:16:72:59:6b:20:74:cd:8b:ba:9d:6d:87:64:
         c6:81:f8:28:4f:f5:0c:f3:f0:33:e9:ca:65:e6:5e:f8:cc:86:
         c1:aa:9b:88:de:d3:72:57:20:e6:00:70:6d:5a:c9:f4:a8:05:
         d8:35:96:64:79:a7:82:6d:05:e5:e1:23:62:6c:48:e5:51:be:
         3a:4b:0f:e6:ad:47:59:95:dd:59:74:7e:a2:19:8e:85:de:bf:
         e2:61:81:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:00:03 2025 by rpki-client