This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f5ab890-0b33-4f1f-a004-6f2779e23026.roa
File:                     1f5ab890-0b33-4f1f-a004-6f2779e23026.roa (raw, json)
Hash identifier:          LNuwgKCrd2sH5CEY7irRFRDkstiv/AR1l6DtZd69t2U=
Subject key identifier:   D7:EB:30:49:9C:07:60:E2:62:F2:EE:28:38:10:DD:6C:5F:78:9E:16
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       67BF4DD1DC2D8C7B0CD7C9B3D6CDCCB6DE0C3173
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f5ab890-0b33-4f1f-a004-6f2779e23026.roa
Signing time:             Sat 06 Dec 2025 00:20:07 +0000
ROA not before:           Sat 06 Dec 2025 00:20:07 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:3cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bf:4d:d1:dc:2d:8c:7b:0c:d7:c9:b3:d6:cd:cc:b6:de:0c:31:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Dec  6 00:20:07 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=463868d1658524e13c9eb66bb5c9cc8850aa8ab24e59a4e1f52342810ef24a00, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:3f:59:6e:aa:24:02:2f:90:cf:3f:87:cd:
                    26:15:9f:d8:05:f8:fc:ad:75:6f:41:fa:45:7b:00:
                    85:50:81:00:09:4b:63:29:2e:95:74:5d:ba:63:24:
                    f8:37:42:cc:1b:7f:87:ab:b3:13:0a:af:f7:3c:80:
                    47:6c:23:9b:9e:d2:96:b0:8f:c9:e0:0c:aa:34:68:
                    60:2a:e0:fe:5b:72:e7:5a:12:fa:74:f8:b7:82:5e:
                    51:b7:74:f0:04:bd:a5:94:d0:6f:b6:14:98:4f:90:
                    7c:61:11:21:5c:99:3d:a7:36:76:ed:e5:9e:4f:cd:
                    79:0a:48:2c:33:c7:00:ae:99:e8:26:5b:4e:0e:2e:
                    59:d0:44:ad:5e:db:74:9b:38:b1:32:6a:e9:f9:4e:
                    42:9b:36:1f:d7:7a:21:ef:88:d4:8b:60:a4:a1:06:
                    9b:39:2f:b2:4e:52:b8:7f:cc:17:ca:fa:ba:8a:2b:
                    72:cf:6b:8f:9c:e5:71:36:1d:b9:13:f5:e7:be:f2:
                    ec:18:d3:62:99:ed:1c:32:09:f2:3f:56:40:52:63:
                    de:22:68:df:21:d4:2e:08:03:02:25:0b:d9:50:5a:
                    a2:5f:f2:84:50:b7:16:aa:4c:e9:d1:25:b8:30:16:
                    8c:75:71:f3:53:89:84:d5:33:bc:ea:29:18:25:4a:
                    47:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EB:30:49:9C:07:60:E2:62:F2:EE:28:38:10:DD:6C:5F:78:9E:16
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f5ab890-0b33-4f1f-a004-6f2779e23026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:3cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:82:e4:45:09:e7:ea:e5:e4:c0:f4:9f:39:db:41:68:2d:06:
         01:1c:21:b0:a2:18:9f:53:23:d1:fb:58:26:dc:b6:76:c3:cb:
         cf:7a:85:38:68:ff:30:7d:2a:af:dd:35:50:c3:57:a4:17:3c:
         c4:4c:f2:4a:2a:6b:07:c4:8f:5f:1e:c4:84:b1:f2:1e:31:fe:
         ab:36:48:7b:da:57:34:2b:d9:24:1f:70:9e:13:c8:a8:7e:c2:
         f7:7e:0f:f2:9d:aa:9e:91:fb:5e:b9:f7:24:0a:3f:ce:74:5e:
         ec:f9:44:e5:a2:7c:32:8e:7c:a6:2b:32:14:0f:3f:c6:16:83:
         14:a6:b6:c8:f8:d3:fd:46:56:c9:26:81:f5:d9:16:39:64:5c:
         d4:4c:83:40:d9:07:26:98:fb:9e:6c:4d:3d:43:97:7f:b0:4e:
         92:a1:98:d3:2a:ad:9c:f1:f2:a6:c8:55:f3:5d:65:be:29:5d:
         1c:09:1c:99:33:4a:08:57:94:7e:5e:74:c2:21:bd:7c:b3:a0:
         e8:46:f6:d8:1e:35:ae:cb:8f:4a:18:20:18:30:fa:4c:c4:72:
         f0:ab:15:71:ba:ad:5c:2f:22:b9:dd:77:f5:b0:43:64:0d:cc:
         9e:04:f5:df:91:53:10:96:a0:0a:0e:61:c7:8e:ce:be:bc:f9:
         e4:85:12:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:56:32 2025 by rpki-client