This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa
File:                     2f789924-a980-48eb-b42e-463688379f41.roa (raw, json)
Hash identifier:          Ze5JsyB9D+TIeU10tgb8Mlfc5erHseU8Ik9l96L+uHE=
Subject key identifier:   34:B3:4E:EA:A1:EC:EB:21:10:3E:44:80:E9:C1:F7:85:17:A8:80:21
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       62007D26ABF5078A866FA1592FA8ECAC80279EB6
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa
Signing time:             Sat 29 Nov 2025 02:40:31 +0000
ROA not before:           Sat 29 Nov 2025 02:40:31 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:64c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:00:7d:26:ab:f5:07:8a:86:6f:a1:59:2f:a8:ec:ac:80:27:9e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 29 02:40:31 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=b182beb962d827fed6b5333c293cd485ce9e4a86381a0edf713e157a2b393b58, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:33:6b:2f:37:75:96:c8:2c:90:0f:5d:f2:
                    7f:19:88:fb:1c:25:3a:3b:60:41:f1:90:42:dc:05:
                    35:78:02:80:8c:dc:2b:63:05:9e:09:cd:d5:b9:3e:
                    7c:7d:11:ee:13:00:00:b6:ab:3f:bd:8c:f1:6d:5a:
                    c5:03:aa:91:d2:77:cc:c8:1e:25:24:26:00:60:4c:
                    a0:c1:fc:09:aa:b5:e2:fd:97:4a:a6:c6:c7:fc:fd:
                    09:ba:ad:0e:63:49:c8:80:9f:a4:ab:22:3d:f1:f4:
                    4a:11:40:5d:a0:35:eb:0a:62:a3:a7:33:72:68:f5:
                    de:e4:7c:d0:da:9c:8c:9f:bd:36:1d:40:d8:a1:21:
                    7f:01:5f:50:29:28:33:5e:d1:b1:3a:68:14:b2:3d:
                    15:84:31:6f:4d:91:cb:bb:35:8a:73:58:3b:c0:6d:
                    93:82:8f:ef:cd:10:0b:83:b6:27:f8:17:4d:92:e1:
                    bd:fe:b6:a6:d1:3d:c2:24:19:05:cb:ab:a3:8b:cc:
                    b4:05:d8:43:2b:aa:ce:d0:4b:e2:7b:19:90:f8:21:
                    54:7d:15:b8:3e:51:af:0e:d6:d4:e5:c4:d6:4f:ce:
                    09:85:99:45:6d:bc:59:40:73:46:f5:bf:bb:cf:33:
                    c1:59:67:64:c9:df:1a:8a:ae:03:a1:4e:49:ee:cf:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B3:4E:EA:A1:EC:EB:21:10:3E:44:80:E9:C1:F7:85:17:A8:80:21
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:64c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:05:9a:fb:74:0e:d5:7b:2c:80:e9:62:83:e7:78:ca:88:
         bf:aa:62:92:96:f0:13:4b:7b:a3:5d:b2:c8:42:57:f8:f3:3d:
         4a:d7:25:dc:6e:0d:e1:dd:aa:d2:db:0a:a2:43:13:e5:50:7d:
         18:12:4d:95:fa:60:f5:fe:9c:a7:a1:c5:45:be:9d:24:8a:42:
         28:c8:59:7a:fb:29:f3:b5:7f:ff:2d:f9:2a:b3:af:ac:19:19:
         d3:04:9e:09:78:dc:2b:02:5e:a7:58:f1:4f:e0:3c:cd:09:b0:
         b3:25:6c:57:ab:53:28:ae:e3:b8:64:a1:75:8f:52:c3:f1:35:
         f9:4c:86:88:a5:df:d0:16:bf:6a:95:ad:3e:ef:18:ba:68:aa:
         2e:f6:33:db:d6:c2:4c:bb:5b:f0:b4:ea:69:01:1e:f2:93:5d:
         f0:a6:18:78:fc:9b:f5:76:7a:ac:d4:c6:c9:1d:77:e5:2e:e9:
         a4:75:70:70:b8:ae:d8:65:ea:50:d0:6b:3e:b3:33:b7:69:ef:
         71:6e:06:03:f5:2f:2d:cd:6c:8d:37:8f:15:13:15:26:55:f3:
         74:1d:94:04:ab:76:f0:e9:c5:b5:f1:ec:54:55:6b:fe:b5:8b:
         d1:ba:7d:24:17:d4:2e:83:87:c2:58:d5:0e:40:2e:d1:ce:72:
         5e:73:dc:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:15:56 2025 by rpki-client