This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e44f32b3-ff36-487e-b814-9b622650bde3.roa
File:                     e44f32b3-ff36-487e-b814-9b622650bde3.roa (raw, json)
Hash identifier:          UhtTpZEOk+Y0a+3Li01On+7VQ69MRSTITtsbcv6BFnI=
Subject key identifier:   18:8E:2E:93:E3:0A:0A:27:39:A5:45:C8:7A:B9:A0:E2:22:C6:B9:B4
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       32B6A6D034922A97A274AA0FFE1F9EC56824A479
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e44f32b3-ff36-487e-b814-9b622650bde3.roa
Signing time:             Sat 29 Nov 2025 00:30:16 +0000
ROA not before:           Sat 29 Nov 2025 00:30:16 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b6:a6:d0:34:92:2a:97:a2:74:aa:0f:fe:1f:9e:c5:68:24:a4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 29 00:30:16 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=32aaec21d2102100852ac526c87fb4f0cafd86c9ff2782b218d017aa6e7f8b01, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:00:87:5a:39:79:e4:d3:92:3e:ea:a3:17:
                    07:1d:c3:0b:27:e2:ff:8e:13:a3:e5:d1:6e:df:27:
                    2c:0d:9c:9e:65:8c:0a:e1:36:89:47:b1:58:d1:a6:
                    3b:80:a2:0b:dd:41:30:3a:82:62:f2:a1:ec:d9:8f:
                    31:53:3a:68:73:af:58:ff:74:0e:55:89:62:63:30:
                    59:71:73:00:ab:c1:af:98:45:46:10:4d:d2:df:22:
                    27:3f:1b:80:13:76:8d:6a:e8:9e:38:8c:e9:6f:bb:
                    24:9b:e6:54:e8:4c:8e:0a:e6:be:16:c5:ae:93:c3:
                    08:47:fd:6a:f2:2e:a0:e9:e4:fd:22:bb:06:0b:f8:
                    cc:f0:21:6e:be:44:2a:9c:bb:74:dd:fa:92:48:a4:
                    e6:e8:26:61:d3:93:96:d4:5f:84:da:15:f4:dc:2f:
                    aa:c8:d6:e2:e1:15:61:db:c8:dd:55:5e:0e:55:8f:
                    a7:43:fa:c8:d5:af:a6:74:4f:7d:54:c3:fb:4e:cf:
                    ad:e8:a1:55:85:bc:4c:a8:7b:0e:ca:c0:7f:51:ec:
                    45:01:f6:92:57:73:f4:36:5f:67:f9:3e:66:c0:4f:
                    7f:8d:14:a7:76:e6:fc:9f:ae:4f:f1:ca:cc:8b:c4:
                    8f:fd:77:7e:d9:c7:08:ec:0b:06:21:86:47:bc:b6:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8E:2E:93:E3:0A:0A:27:39:A5:45:C8:7A:B9:A0:E2:22:C6:B9:B4
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e44f32b3-ff36-487e-b814-9b622650bde3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:36:bd:32:99:04:1f:5d:4a:07:0b:c5:97:b5:fd:07:e6:06:
         bf:b6:10:4d:57:6b:79:89:bd:08:b6:d0:90:81:0b:3a:01:3b:
         58:84:51:a9:75:c3:2f:6a:74:1b:34:34:5c:d2:a5:2b:58:3a:
         35:be:ec:aa:44:3e:67:79:a3:11:50:65:bf:e8:70:56:66:22:
         e5:c9:3a:b4:92:07:f1:2b:6a:45:88:e2:b1:9d:9d:b4:b3:7f:
         86:32:7a:7e:3a:65:95:80:0a:04:28:b0:ec:82:a6:b6:8a:45:
         ff:bf:50:0c:6e:96:ed:af:06:10:81:f7:b2:ac:4f:df:22:48:
         f5:05:28:d0:f4:84:8a:20:7d:d6:b3:f9:a6:51:12:c0:22:ca:
         11:4a:33:ab:47:07:7b:bf:ab:2a:c3:f2:50:d2:b8:f8:95:83:
         e4:92:c7:16:74:d2:69:97:67:f7:8d:b5:f3:c6:ab:cd:1a:94:
         c5:60:ad:b2:25:45:ee:c9:6f:29:42:74:85:9e:63:eb:0f:02:
         d3:df:91:35:d8:51:91:7c:c4:30:43:ce:97:80:7a:db:21:62:
         31:95:a9:48:9b:62:15:4c:74:63:f6:45:ac:45:26:db:52:af:
         08:7f:c4:93:ec:a1:eb:a0:87:d0:44:31:1f:1d:2c:02:9d:e3:
         6d:a8:fa:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:04:38 2025 by rpki-client