This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b367b14-b5b6-43fd-a421-784e5caa4455.roa
File:                     1b367b14-b5b6-43fd-a421-784e5caa4455.roa (raw, json)
Hash identifier:          b6MNZMI45M9GgXiqKVKIdunBXsYpyGVwJGm7XKu+K9A=
Subject key identifier:   0B:3C:DA:2E:DA:79:F9:60:86:87:31:6C:DE:88:6C:95:55:BA:EF:DB
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1C2177A5CF3E5E466A2342B43EBF3F7539793D95
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b367b14-b5b6-43fd-a421-784e5caa4455.roa
Signing time:             Sat 29 Nov 2025 02:40:50 +0000
ROA not before:           Sat 29 Nov 2025 02:40:50 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:21:77:a5:cf:3e:5e:46:6a:23:42:b4:3e:bf:3f:75:39:79:3d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 29 02:40:50 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=faaef0b1879265f9d608210dbd961e65c72f4c737c5954e9a299ab6617a766e6, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:f9:41:09:21:24:29:4f:43:01:ca:ea:9e:
                    22:e1:2f:b6:0a:12:53:62:fb:a6:8d:e7:24:8b:0f:
                    a1:94:c3:4b:d3:b6:57:0d:16:9e:8a:92:8f:a5:89:
                    3b:e4:23:9b:f8:4c:7c:53:67:9c:b7:90:51:47:1a:
                    e7:83:16:88:05:ef:03:02:ec:84:af:df:61:85:2b:
                    66:a1:10:f8:f5:c3:c4:0a:4f:21:b0:69:5f:cd:a4:
                    63:84:4d:26:c2:eb:5d:0e:aa:25:de:2a:58:a4:1a:
                    31:8a:69:4f:1f:1e:7d:89:d2:ec:f8:52:db:23:d0:
                    53:e1:fd:1b:69:58:dc:2b:50:62:76:32:0c:dd:62:
                    08:a6:44:4d:f2:fe:51:75:81:4f:88:8a:b0:24:57:
                    a3:c7:81:d3:55:8d:35:c3:4d:df:e8:15:98:2b:ea:
                    0c:21:b6:c0:5f:01:58:e4:e6:5f:62:fd:54:28:f2:
                    cb:be:c9:04:bd:d6:f4:25:37:63:6c:7b:a8:1b:ce:
                    2f:28:18:49:8b:f9:fd:dc:11:f1:7e:66:69:00:f5:
                    79:f9:f5:84:6d:20:38:64:99:ae:87:09:1f:6b:ad:
                    69:83:72:a6:3b:ed:02:54:6f:c6:80:14:54:76:c3:
                    89:f6:6f:c5:f7:98:48:4e:e4:2f:24:eb:31:b3:d7:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:DA:2E:DA:79:F9:60:86:87:31:6C:DE:88:6C:95:55:BA:EF:DB
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b367b14-b5b6-43fd-a421-784e5caa4455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:68:46:62:ac:5f:ed:56:1f:3e:94:57:30:ff:af:93:db:7a:
         f7:1f:e6:3a:96:7e:b3:23:f9:4e:a2:93:93:3a:65:8e:66:21:
         2f:c8:e5:a8:3f:2d:80:0d:e7:52:97:a8:01:2f:82:f9:03:3a:
         59:3f:58:f2:9b:90:b9:2a:67:f9:a9:e5:c5:0e:28:07:41:b9:
         7b:ac:d5:bc:ce:64:bd:26:c7:e1:0d:b7:af:d8:79:1a:95:6e:
         06:03:99:a9:d3:7d:ab:dc:cd:04:9d:8a:e5:61:56:08:27:57:
         d6:d4:3f:4a:58:dd:08:7b:a6:0e:b2:b1:cb:77:4b:f6:ea:27:
         cb:82:4d:f0:f9:79:7c:4b:fe:a7:60:1a:d2:fb:0b:c0:70:78:
         9e:65:cb:2e:12:36:2a:0e:70:e2:9e:80:6f:ab:e8:7a:8c:d6:
         24:3a:80:42:ad:65:85:8b:da:94:d2:ad:b1:3c:19:d7:33:11:
         02:ab:26:d1:66:be:fc:58:2f:05:4c:64:54:51:cf:bf:68:c0:
         4d:05:37:15:c8:e1:7c:da:f7:19:1a:e0:e2:5e:6f:2a:87:e9:
         ef:10:de:c4:6f:ff:5f:ba:82:dc:64:47:54:19:5b:34:c7:04:
         3a:2f:23:16:8f:c3:0b:6c:86:a7:32:3d:e4:e0:b4:fd:20:a0:
         56:b9:05:1e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHCF3pc8+XkZqI0K0Pr8/dTl5PZUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTI5MDI0MDUwWhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BmYWFlZjBiMTg3OTI2NWY5ZDYwODIxMGRiZDk2MWU2NWM3
MmY0YzczN2M1OTU0ZTlhMjk5YWI2NjE3YTc2NmU2MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCJ2vlBCSEkKU9DAcrqniLhL7YKElNi+6aN5ySLD6GUw0vT
tlcNFp6Kko+liTvkI5v4THxTZ5y3kFFHGueDFogF7wMC7ISv32GFK2ahEPj1w8QK
TyGwaV/NpGOETSbC610OqiXeKlikGjGKaU8fHn2J0uz4Utsj0FPh/RtpWNwrUGJ2
MgzdYgimRE3y/lF1gU+IirAkV6PHgdNVjTXDTd/oFZgr6gwhtsBfAVjk5l9i/VQo
8su+yQS91vQlN2Nse6gbzi8oGEmL+f3cEfF+ZmkA9Xn59YRtIDhkma6HCR9rrWmD
cqY77QJUb8aAFFR2w4n2b8X3mEhO5C8k6zGz1w99AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUCzzaLtp5+WCGhzFs3ohslVW679swHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzFiMzY3YjE0LWI1YjYtNDNmZC1hNDIxLTc4NGU1Y2FhNDQ1NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADBwwDQYJKoZIhvcNAQELBQADggEBAE9oRmKsX+1WHz6UVzD/r5Pb
evcf5jqWfrMj+U6ik5M6ZY5mIS/I5ag/LYAN51KXqAEvgvkDOlk/WPKbkLkqZ/mp
5cUOKAdBuXus1bzOZL0mx+ENt6/YeRqVbgYDmanTfavczQSdiuVhVggnV9bUP0pY
3Qh7pg6ysct3S/bqJ8uCTfD5eXxL/qdgGtL7C8BweJ5lyy4SNioOcOKegG+r6HqM
1iQ6gEKtZYWL2pTSrbE8GdczEQKrJtFmvvxYLwVMZFRRz79owE0FNxXI4Xza9xka
4OJebyqH6e8Q3sRv/1+6gtxkR1QZWzTHBDovIxaPwwtshqcyPeTgtP0goFa5BR4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:54:44 2025 by rpki-client