This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa
File:                     f1746927-d9c4-41c2-8abc-289ecb180bdc.roa (raw, json)
Hash identifier:          6DWTK+q8KoNwOfVTrcds0CAefSRepbq1wKWsXwHd5G8=
Subject key identifier:   63:E0:FE:E7:8C:7C:FD:BD:20:70:C3:4F:D2:75:4B:87:C3:8E:63:E5
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       79DDD4C1F3816231D0DBDB887305E3FDFFB43767
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa
Signing time:             Sat 15 Nov 2025 05:00:36 +0000
ROA not before:           Sat 15 Nov 2025 05:00:36 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dd:d4:c1:f3:81:62:31:d0:db:db:88:73:05:e3:fd:ff:b4:37:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:00:36 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=87174132d7e39ede1158d3f5d8065ba705dff87c6a6f4c91b5964bf5f342dff2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:96:8d:60:b4:03:64:68:8e:71:ca:0d:57:
                    98:d6:33:73:8e:36:da:ab:be:1c:89:ac:b6:05:9a:
                    a5:3b:b9:fa:aa:94:03:8c:70:c1:52:4e:7a:53:0f:
                    5a:0f:1f:47:b3:e1:01:1f:6b:ce:96:22:af:db:c6:
                    b6:92:8f:19:5a:bd:af:6f:c7:c8:d8:9c:8f:11:b4:
                    d5:26:38:54:c6:cb:50:01:ec:2f:c0:5f:d3:76:83:
                    48:98:0b:f9:b5:0b:b1:c8:b7:8e:89:46:f4:c4:2c:
                    bf:b6:a2:df:bc:ea:a4:15:c3:0c:7d:40:4d:44:a6:
                    f7:88:26:d9:59:7c:d6:8a:ee:f3:f8:1f:19:8a:c3:
                    c4:4e:ce:81:f6:20:39:f9:d0:ae:4e:d9:f7:ef:0a:
                    75:fe:38:50:31:93:07:82:31:55:b1:b0:d3:c8:a2:
                    97:0b:94:67:90:0d:1a:dc:52:52:ec:6a:75:50:d5:
                    c6:95:37:23:57:c1:69:53:73:90:f4:8e:87:a2:7c:
                    1b:d5:58:95:ae:99:1a:1a:41:ca:0a:33:69:8e:12:
                    66:51:c9:68:4d:57:11:81:ac:cd:32:01:93:3b:27:
                    29:08:82:51:dc:6e:dd:17:07:05:30:f0:0f:55:3a:
                    3e:45:99:9a:e1:cd:7a:d6:31:fd:1f:e1:70:15:b4:
                    36:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E0:FE:E7:8C:7C:FD:BD:20:70:C3:4F:D2:75:4B:87:C3:8E:63:E5
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e500::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:7a:59:0e:7c:19:0b:9c:50:95:88:e1:f2:6c:e4:35:71:
         31:4f:72:c3:3a:25:31:9a:31:ec:f6:29:0e:df:56:4e:ed:2e:
         bd:8d:ce:55:11:63:72:73:49:b4:f6:20:c4:86:fe:d0:22:8d:
         ba:08:78:b3:ce:29:6c:32:90:a6:11:3f:9d:a9:df:36:58:ad:
         9b:29:75:f6:de:18:55:44:76:d7:51:19:77:91:57:49:49:0a:
         9e:7c:05:5d:f4:c0:07:a9:7a:9b:3d:ee:87:82:f3:3c:e2:35:
         a4:83:d5:59:25:b2:09:33:2a:57:61:70:2c:a4:e3:93:19:cc:
         b5:58:e7:ef:06:77:15:53:b1:0e:02:1e:77:27:5d:9d:0a:45:
         01:cc:2f:7e:2c:54:24:72:69:65:fd:1a:8c:0c:dc:b9:e0:ff:
         60:d5:3d:0c:59:51:36:a5:01:7d:27:88:39:aa:1a:9f:12:2a:
         91:fc:b5:c5:84:2c:41:64:45:df:9f:36:7e:70:ea:07:dd:2e:
         ef:c5:3e:aa:ff:72:dd:92:7c:d0:08:88:88:0e:bd:36:d0:a7:
         27:af:d9:60:e4:ab:2b:2e:4c:cb:b2:04:68:db:e7:59:57:3f:
         5a:f5:5a:29:6c:cd:cb:8f:d2:d5:e4:32:de:4a:67:e4:58:af:
         68:44:0e:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:28:40 2025 by rpki-client