This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa
File:                     da111c82-234c-46a2-a1ef-e848103120cb.roa (raw, json)
Hash identifier:          4tvauh1fvdFhVeEcnVQ+vW1e4yr2tPU7DCjDQUkHDWA=
Subject key identifier:   5C:87:41:9B:BB:57:AC:B2:9B:7F:64:20:B4:4B:9D:A9:AF:FE:89:74
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       144C255B4A3BD004C41EE0F812FA0627310C6605
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa
Signing time:             Sun 23 Nov 2025 00:20:03 +0000
ROA not before:           Sun 23 Nov 2025 00:20:03 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:110::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4c:25:5b:4a:3b:d0:04:c4:1e:e0:f8:12:fa:06:27:31:0c:66:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 23 00:20:03 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=02b74a22afd56b420b41b83b3abc09572a60acbf764e95c3c2ef79e793d83221, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:ad:3a:39:b6:50:38:49:a0:13:af:15:3b:
                    9a:5a:6f:42:68:ff:ed:aa:f2:1b:c1:7d:9e:0a:d5:
                    ef:34:f3:25:db:f7:65:f5:82:56:0a:54:59:3e:57:
                    b0:8d:5b:60:48:88:98:03:a5:60:c1:9c:db:d7:15:
                    0e:96:d8:d5:09:b4:f1:b7:ad:ae:8a:9f:b9:80:1e:
                    53:3b:3f:91:aa:a9:76:cd:7a:28:b1:b8:c1:20:0f:
                    1b:21:b2:a7:02:b0:89:f0:00:26:d5:b2:3c:11:c6:
                    ae:f0:99:d0:82:47:46:7f:32:b4:3f:86:26:55:d3:
                    0a:4b:2f:63:f4:3b:15:1c:f7:28:b0:94:cb:ef:56:
                    29:ae:a5:d6:a3:e9:bb:af:05:45:a8:7c:d7:2d:93:
                    30:52:7c:e4:c6:25:32:98:2b:9b:be:75:ea:9e:3c:
                    de:c6:9c:fb:d3:41:c9:ec:ef:53:cf:f2:11:6f:24:
                    b7:22:1e:e4:45:70:4a:19:39:35:e3:5a:30:9d:a3:
                    db:37:44:9c:9f:09:2d:3c:5a:e4:0b:c9:3c:4c:e7:
                    16:42:10:41:f7:b6:ba:bb:fc:2c:77:3b:38:99:a2:
                    2a:6d:4f:cb:41:8b:54:86:0d:72:31:6c:39:88:bc:
                    af:70:e5:3d:5e:be:d9:41:85:1d:1f:94:90:f8:1d:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:87:41:9B:BB:57:AC:B2:9B:7F:64:20:B4:4B:9D:A9:AF:FE:89:74
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:110::/47

    Signature Algorithm: sha256WithRSAEncryption
         18:26:2f:d0:69:45:c6:e8:5a:da:81:b1:80:e8:61:34:5e:bc:
         45:62:34:0b:51:23:6e:36:e4:0a:37:22:e5:2a:2e:02:7b:5a:
         ff:35:d4:45:3b:c4:84:50:02:8b:e1:7c:ce:a4:e4:41:77:26:
         57:ab:92:38:42:41:46:00:65:d1:e5:23:f5:63:c4:17:b8:fd:
         2e:80:21:dc:49:bf:9a:34:a9:bb:58:14:48:ca:30:ea:c2:02:
         dc:a5:de:fe:3b:a6:0d:9f:fd:ae:71:f3:33:33:1c:dd:66:44:
         dc:7b:7a:4f:7c:cb:6b:4b:a2:04:89:41:21:65:90:84:e4:e3:
         bb:8f:f0:eb:57:84:ff:0d:86:93:c4:6d:a1:61:f4:d8:f3:80:
         c4:d1:dd:c4:25:6b:8d:25:4d:f3:2d:20:46:42:d0:16:f2:ee:
         dd:01:22:ad:29:df:08:38:ae:6c:b4:a1:65:77:49:75:0b:c7:
         47:10:66:ef:d9:c8:c4:9c:2b:d9:a7:d1:43:3f:f5:de:06:de:
         66:bd:f4:99:b3:1c:b5:10:23:6d:55:f0:44:4f:2e:5a:8a:f5:
         38:9b:d1:80:52:e0:c6:c9:90:ed:20:cf:2f:e0:5c:e4:37:8c:
         23:ca:0b:8c:8a:a4:1e:7a:f9:b3:9a:08:49:66:89:f5:d0:c4:
         45:21:f4:6e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFEwlW0o70ATEHuD4EvoGJzEMZgUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTIzMDAyMDAzWhcNMjYwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMmI3NGEyMmFmZDU2YjQyMGI0MWI4M2IzYWJjMDk1NzJh
NjBhY2JmNzY0ZTk1YzNjMmVmNzllNzkzZDgzMjIxMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDH2606ObZQOEmgE68VO5pab0Jo/+2q8hvBfZ4K1e808yXb
92X1glYKVFk+V7CNW2BIiJgDpWDBnNvXFQ6W2NUJtPG3ra6Kn7mAHlM7P5GqqXbN
eiixuMEgDxshsqcCsInwACbVsjwRxq7wmdCCR0Z/MrQ/hiZV0wpLL2P0OxUc9yiw
lMvvVimupdaj6buvBUWofNctkzBSfOTGJTKYK5u+deqePN7GnPvTQcns71PP8hFv
JLciHuRFcEoZOTXjWjCdo9s3RJyfCS08WuQLyTxM5xZCEEH3trq7/Cx3OziZoipt
T8tBi1SGDXIxbDmIvK9w5T1evtlBhR0flJD4HaAfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUXIdBm7tXrLKbf2QgtEudqa/+iXQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2RhMTExYzgyLTIzNGMtNDZhMi1hMWVmLWU4NDgxMDMxMjBjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAPDwARAwDQYJKoZIhvcNAQELBQADggEBABgmL9BpRcboWtqBsYDoYTRe
vEViNAtRI2425Ao3IuUqLgJ7Wv811EU7xIRQAovhfM6k5EF3JlerkjhCQUYAZdHl
I/VjxBe4/S6AIdxJv5o0qbtYFEjKMOrCAtyl3v47pg2f/a5x8zMzHN1mRNx7ek98
y2tLogSJQSFlkITk47uP8OtXhP8NhpPEbaFh9NjzgMTR3cQla40lTfMtIEZC0Bby
7t0BIq0p3wg4rmy0oWV3SXULx0cQZu/ZyMScK9mn0UM/9d4G3ma99JmzHLUQI21V
8ERPLlqK9Tib0YBS4MbJkO0gzy/gXOQ3jCPKC4yKpB56+bOaCElmifXQxEUh9G4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:18:08 2025 by rpki-client