This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa
File:                     fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa (raw, json)
Hash identifier:          5NIr+f5QVgpWMZG9TYvy0Md0vv0KR/dCsqm4hzJ+Gkw=
Subject key identifier:   0B:DD:AE:3D:9D:BE:2E:A4:7B:AC:34:E9:58:BB:13:42:34:52:52:EF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3B073907FBABF6C84509141F4A153C4E340F6CD2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa
Signing time:             Tue 02 Dec 2025 01:30:15 +0000
ROA not before:           Tue 02 Dec 2025 01:30:15 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f2:7010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:07:39:07:fb:ab:f6:c8:45:09:14:1f:4a:15:3c:4e:34:0f:6c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec  2 01:30:15 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=8d221a47df17e9bf87572c21743f73884892d94b1d01024a6a5915b1175ddb77, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:69:3e:88:28:a8:75:6d:f3:7c:b1:9b:7e:
                    06:39:39:53:5e:de:7b:e6:3e:4b:e6:e9:99:b3:3a:
                    a3:00:8d:44:e0:6e:33:2b:ee:b7:bc:98:7e:2b:2a:
                    c7:8a:69:1b:dc:a8:f6:9f:7b:ca:0f:d7:8d:69:c6:
                    20:79:c2:73:11:08:2e:8d:ff:50:33:04:89:a8:80:
                    f0:c0:0b:8c:0c:c4:6b:38:37:f4:f2:86:a9:0c:10:
                    22:18:8c:b4:58:6c:70:46:e7:26:0a:eb:39:8f:32:
                    c6:b7:56:97:f7:75:41:11:ce:b9:52:38:7e:5c:7e:
                    99:9b:b4:16:93:a0:d5:36:15:b7:11:14:6d:21:89:
                    4c:d5:0e:48:34:5e:f8:94:06:8d:0b:d8:b6:40:41:
                    9f:49:96:de:77:d9:cd:eb:c7:9a:0e:da:2b:9c:38:
                    b2:c6:b0:e8:67:bb:2d:88:f5:22:ea:fe:d3:14:3f:
                    ae:57:4a:53:90:af:09:43:38:ea:88:7a:b6:3f:23:
                    bb:4a:8c:10:a6:bc:4d:25:c7:8d:0e:4d:a2:d2:11:
                    43:6d:f4:55:7f:c4:14:a3:34:9e:97:4f:0f:84:f5:
                    5b:b7:51:e6:44:19:3f:af:62:98:44:68:18:31:b9:
                    13:e0:c5:bb:ce:3f:97:1c:c7:02:de:7e:b1:f2:e6:
                    2b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:AE:3D:9D:BE:2E:A4:7B:AC:34:E9:58:BB:13:42:34:52:52:EF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7010::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:76:66:3d:f6:ef:f9:37:72:48:5e:78:e3:e3:c3:b7:5a:
         5a:a8:dc:ba:96:e4:00:9b:1b:12:2b:63:30:1e:6e:d8:d4:ae:
         55:71:6f:8c:64:e8:e0:46:25:60:14:14:a2:1c:0c:3f:57:03:
         e9:f4:a1:49:d0:ee:a6:ff:e5:98:48:3a:bf:26:cd:e9:9f:28:
         33:79:27:c1:37:91:45:30:3d:90:07:df:e7:46:07:89:50:86:
         eb:7f:c0:a9:e6:3b:c1:b9:43:8a:5c:8b:e2:c2:f0:7d:2e:b7:
         65:71:68:cc:4b:48:fb:f6:a3:a1:c2:90:e9:61:26:5e:8b:59:
         b0:68:96:a2:4f:c4:15:f9:28:cd:29:9f:23:73:fa:f2:aa:3a:
         cf:dc:f0:83:de:47:bc:94:fa:63:95:e0:61:b1:d0:fa:3f:ae:
         cd:16:7a:3d:56:d2:5b:80:3d:77:ff:c4:e6:37:c9:ec:b8:9b:
         87:e6:27:3c:a3:f3:89:c0:b1:e6:bf:3d:b1:b9:5f:cd:7f:62:
         56:1f:da:a6:7f:d5:fa:ca:e2:3c:d1:38:ca:83:a1:ea:53:ad:
         7e:25:c2:a7:82:04:d3:8f:dc:a0:5d:eb:6c:63:33:a6:0b:8a:
         1f:7c:cf:6e:67:03:85:26:b9:34:c5:5c:4a:01:eb:cc:83:8e:
         c9:d7:53:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:26:24 2025 by rpki-client