This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa
File:                     198b9983-37de-4318-8190-8930b94cb8e3.roa (raw, json)
Hash identifier:          3AItVshe2uLXtYQ5tqSEfnbxvGBw0Z59znoNKYQgXYc=
Subject key identifier:   A1:F0:D1:D1:2D:FC:09:04:14:51:B1:9E:34:82:7D:A3:3E:2C:E9:4C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       22D4B80B65098A8C2EF1DA13B5062F3C6A535F36
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa
Signing time:             Sat 29 Nov 2025 02:40:30 +0000
ROA not before:           Sat 29 Nov 2025 02:40:30 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c0d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d4:b8:0b:65:09:8a:8c:2e:f1:da:13:b5:06:2f:3c:6a:53:5f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 29 02:40:30 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=843a59cf15d0041638561a8f0ceeefd7301d61b0c9527aa0398dac432ca702eb, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:e3:66:e8:e8:7c:1c:d6:de:e5:31:8e:64:
                    cf:64:b6:13:b2:69:80:98:fe:a7:00:aa:75:d7:e0:
                    68:6d:75:9d:6f:0d:f3:f9:ac:03:4a:08:04:6d:0d:
                    c5:8b:52:5f:fe:84:fb:0e:34:4c:e8:9c:f8:f0:db:
                    17:8e:5a:87:a1:0a:f8:b4:5b:d7:38:18:c5:e5:a0:
                    87:89:a7:b0:88:dc:20:5e:c0:70:d4:79:1b:81:8c:
                    c2:c0:89:37:be:a8:8c:18:d1:2e:f9:1f:97:1e:e5:
                    3f:76:47:28:69:77:17:7b:71:c6:ab:88:e8:65:8a:
                    b4:3f:ea:a4:22:e9:64:56:f1:9d:9b:a9:2e:f5:bd:
                    00:39:08:fb:45:21:98:f3:4b:f7:81:5a:0b:e0:8e:
                    eb:ad:f0:e4:5e:d9:11:8a:b1:fb:1c:67:f4:42:7e:
                    9b:ca:35:95:d4:a2:8c:49:a9:79:47:f5:37:69:c1:
                    55:39:f7:b8:c5:90:d9:e7:2f:fa:a8:33:53:e8:f3:
                    2a:b9:12:28:a3:db:a8:09:c3:e0:29:e1:df:f2:a7:
                    0b:39:ba:1f:3c:8e:0d:4a:c1:ec:5c:71:e4:fe:ca:
                    73:0a:b2:17:45:75:a5:af:2c:12:6b:23:81:f2:8c:
                    77:eb:e3:cf:9b:bd:aa:64:76:5b:88:89:98:65:ef:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F0:D1:D1:2D:FC:09:04:14:51:B1:9E:34:82:7D:A3:3E:2C:E9:4C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:28:65:79:75:e5:d8:e2:74:82:c7:85:f9:71:0a:31:d3:ab:
         7b:01:f2:3e:b1:9f:18:35:e8:05:36:f5:2a:05:53:7a:32:a0:
         f6:3c:52:c5:a1:9a:a2:08:7d:51:44:37:db:96:a5:56:79:11:
         28:51:43:7b:3c:c8:dd:7e:46:83:fc:bc:91:10:9c:77:86:9f:
         91:51:81:e6:74:bd:af:e4:05:71:88:65:9b:eb:a3:ae:d2:c1:
         8b:a1:02:87:94:dd:4b:df:8b:73:da:ef:29:bc:c3:88:76:72:
         a5:d0:39:d2:f8:c2:de:eb:fc:29:87:26:c8:dd:b3:f4:7b:24:
         43:9e:7b:43:8c:a3:2c:18:43:50:fd:57:47:92:1f:2a:17:ae:
         31:be:ec:3d:83:b4:0c:fc:2d:bb:81:9b:ae:a9:df:bd:9a:cb:
         05:92:0f:b7:f5:bb:65:3c:ed:0b:bf:88:82:18:6e:60:0b:d3:
         92:07:2d:6f:4c:43:0b:53:7f:3c:b1:01:e2:da:9d:0c:a0:1c:
         be:94:b5:c3:e4:d1:ed:85:af:c8:fb:8f:09:52:48:aa:b2:d5:
         e5:8e:a1:71:43:f3:87:84:d2:93:32:5e:7e:5f:59:ca:4c:5b:
         7d:98:b2:e1:bf:ed:0f:46:05:22:46:77:3d:86:61:be:69:05:
         f1:03:c0:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:28:25 2025 by rpki-client