This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0f6b659b-9df4-477a-a87b-b8bcd08d670e.roa
File:                     0f6b659b-9df4-477a-a87b-b8bcd08d670e.roa (raw, json)
Hash identifier:          nQrFy5+Id2y9kpFLyKLvi/YMz8IhgLeYK/bqxUAx8/E=
Subject key identifier:   4E:D0:4A:30:DE:BA:2C:1A:9E:03:01:03:3E:E6:A4:EF:D1:0C:F1:FE
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2C177EC9756C4B605643289A0996B61BEF1D126E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0f6b659b-9df4-477a-a87b-b8bcd08d670e.roa
Signing time:             Sat 29 Nov 2025 02:50:47 +0000
ROA not before:           Sat 29 Nov 2025 02:50:47 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:402::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:17:7e:c9:75:6c:4b:60:56:43:28:9a:09:96:b6:1b:ef:1d:12:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 29 02:50:47 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=296e2925aea19aed6994af72daa5a67a7fe4c14956a749742812fee7f1902bae, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:14:94:51:1d:fd:48:6d:50:44:78:a3:0c:
                    cc:07:a5:72:64:f9:72:59:87:d1:c3:2f:57:38:dc:
                    8d:af:4f:d8:fb:bb:04:d1:f4:d9:ae:7f:88:b0:8e:
                    ff:c0:0a:93:4a:93:28:3e:2a:69:0a:21:c6:8c:01:
                    1a:3a:83:b0:e1:f2:ff:68:70:8b:bd:22:91:6f:8c:
                    9b:43:ce:3d:a3:f0:6a:f0:bf:01:ba:aa:3c:22:55:
                    73:83:ac:3a:3c:df:9d:75:3e:ae:1e:5a:91:7a:95:
                    b4:7f:f2:b5:61:28:c4:c3:c6:d6:6c:57:7e:37:b1:
                    e2:81:4b:1f:2e:bc:25:3a:91:69:62:78:dd:b8:89:
                    f6:e4:7c:2c:a0:fd:5a:c1:8f:20:cd:cf:c2:e7:91:
                    dd:bf:fb:6f:84:b2:ed:13:02:04:bf:dd:1d:88:19:
                    08:9a:86:28:48:1f:84:64:b8:0f:da:3a:12:a5:92:
                    d4:9a:b8:b5:da:f0:88:0d:c3:fe:03:e8:82:55:90:
                    cb:c7:ea:56:c1:e1:0f:bd:b2:f9:98:3c:81:04:03:
                    e3:d6:ac:b7:85:f0:d0:da:d7:c9:86:3b:d5:59:93:
                    71:77:f7:c6:12:b1:03:f2:9e:f4:52:2b:01:e5:d8:
                    8d:4c:13:fb:ef:fe:6b:70:42:71:b2:8a:e3:b6:aa:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D0:4A:30:DE:BA:2C:1A:9E:03:01:03:3E:E6:A4:EF:D1:0C:F1:FE
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0f6b659b-9df4-477a-a87b-b8bcd08d670e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:402::/47

    Signature Algorithm: sha256WithRSAEncryption
         16:63:5d:1c:c7:ce:be:ad:a3:45:fc:ab:2b:aa:0d:38:15:5b:
         8a:b2:19:81:3b:1f:ec:dd:18:9a:39:50:c9:84:9e:21:72:a2:
         2c:a3:84:14:26:c8:a0:25:96:91:8e:5a:29:cc:20:6e:71:e5:
         c0:ea:7c:06:9a:9a:3a:f7:0d:69:39:e4:7b:23:ed:ea:da:5d:
         1a:0f:11:65:8a:be:c1:4b:67:27:2b:ea:bf:29:96:49:bd:5d:
         e6:6e:68:f4:9e:40:ea:b7:00:98:4c:b4:a6:04:a6:ab:9b:ca:
         52:00:ce:84:be:b0:39:96:c7:df:f8:87:6b:33:18:09:15:7f:
         6b:f6:9d:42:16:09:d0:fa:cf:29:08:50:8b:ac:3e:fc:54:18:
         cb:f0:fb:79:e1:0c:37:32:01:1d:05:40:c5:76:13:ad:0d:10:
         23:f5:bd:37:4f:fc:b5:98:da:63:ae:ce:03:e1:37:7a:09:d9:
         8e:83:0e:5b:b8:e1:38:2e:a3:8e:91:36:7b:d2:34:02:01:32:
         79:05:c8:cb:7a:64:72:ad:6a:3d:a5:a7:39:45:c7:d0:77:9c:
         83:c7:e3:b0:94:4f:94:26:8a:83:79:37:eb:73:24:5c:3d:63:
         fc:c4:af:03:a4:9c:42:d0:fc:27:a4:f5:67:63:3d:50:90:65:
         24:0c:45:39
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULBd+yXVsS2BWQyiaCZa2G+8dEm4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTI5MDI1MDQ3WhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyOTZlMjkyNWFlYTE5YWVkNjk5NGFmNzJkYWE1YTY3YTdm
ZTRjMTQ5NTZhNzQ5NzQyODEyZmVlN2YxOTAyYmFlMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCNFRSUUR39SG1QRHijDMwHpXJk+XJZh9HDL1c43I2vT9j7
uwTR9Nmuf4iwjv/ACpNKkyg+KmkKIcaMARo6g7Dh8v9ocIu9IpFvjJtDzj2j8Grw
vwG6qjwiVXODrDo83511Pq4eWpF6lbR/8rVhKMTDxtZsV343seKBSx8uvCU6kWli
eN24ifbkfCyg/VrBjyDNz8Lnkd2/+2+Esu0TAgS/3R2IGQiahihIH4RkuA/aOhKl
ktSauLXa8IgNw/4D6IJVkMvH6lbB4Q+9svmYPIEEA+PWrLeF8NDa18mGO9VZk3F3
98YSsQPynvRSKwHl2I1ME/vv/mtwQnGyiuO2qmOZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUTtBKMN66LBqeAwEDPuak79EM8f4wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzBmNmI2NTliLTlkZjQtNDc3YS1hODdiLWI4YmNkMDhkNjcwZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmBZzABAIwDQYJKoZIhvcNAQELBQADggEBABZjXRzHzr6to0X8qyuqDTgV
W4qyGYE7H+zdGJo5UMmEniFyoiyjhBQmyKAllpGOWinMIG5x5cDqfAaamjr3DWk5
5Hsj7eraXRoPEWWKvsFLZycr6r8plkm9XeZuaPSeQOq3AJhMtKYEpqubylIAzoS+
sDmWx9/4h2szGAkVf2v2nUIWCdD6zykIUIusPvxUGMvw+3nhDDcyAR0FQMV2E60N
ECP1vTdP/LWY2mOuzgPhN3oJ2Y6DDlu44Tguo46RNnvSNAIBMnkFyMt6ZHKtaj2l
pzlFx9B3nIPH47CUT5QmioN5N+tzJFw9Y/zErwOknELQ/Cek9WdjPVCQZSQMRTk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:48:58 2025 by rpki-client