This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa
File:                     60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa (raw, json)
Hash identifier:          b8uONwF5I7iA2ZNI9UiJ38A3NJ0FC3PcW07x4n/FwYI=
Subject key identifier:   41:C1:57:D0:0F:69:CE:AA:0C:A6:A6:36:07:5E:B5:8A:C0:CE:2C:22
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       26C9D6140A92E88CA6136906A69CF8842055DABA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa
Signing time:             Sat 29 Nov 2025 02:50:52 +0000
ROA not before:           Sat 29 Nov 2025 02:50:52 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c9:d6:14:0a:92:e8:8c:a6:13:69:06:a6:9c:f8:84:20:55:da:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 29 02:50:52 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=0d76d898f25c1c7f46007caf33bca5cd3ac6d4d57b1bfaa82c3023ef060d4903, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:68:71:2b:bd:18:18:5d:7b:c4:5e:da:5b:
                    25:f8:c8:37:d4:5a:f8:36:9d:5f:5e:29:56:0a:4a:
                    b5:8a:7f:5d:2d:15:61:5d:42:54:f6:bf:14:ef:c3:
                    db:27:13:8e:62:98:f2:69:2c:52:08:0d:ab:77:e5:
                    97:37:b5:ce:f4:e3:1b:7e:bf:25:a4:5c:31:98:49:
                    26:91:ab:bb:d8:17:7c:91:34:7e:32:5c:57:3a:16:
                    d6:0e:b5:23:18:b0:3e:20:1b:ff:e1:c3:a5:88:14:
                    ec:b3:14:d3:51:b7:65:48:87:2f:59:bc:3c:ee:d2:
                    4c:2c:b2:da:5e:3c:da:23:bf:94:53:e5:eb:ed:f5:
                    ad:3f:33:24:4c:48:29:41:d0:1f:c0:ac:a9:1e:59:
                    be:a3:d7:46:18:60:1d:2b:d1:64:a5:f5:61:a8:53:
                    3b:df:86:04:e1:05:3b:27:7f:c2:cf:a9:0b:da:86:
                    42:05:bb:66:aa:f5:c5:ef:8e:c6:fb:e0:1c:bb:c1:
                    4e:71:44:4d:bb:8f:95:3e:50:06:89:5d:96:02:1e:
                    eb:f8:a5:31:b2:17:05:b8:b7:12:63:bf:1c:df:83:
                    e4:d6:31:17:2e:0a:c4:46:17:37:71:55:9c:b1:ec:
                    83:ed:53:f4:1b:7b:41:5b:86:17:d7:b7:1e:4b:1b:
                    8b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C1:57:D0:0F:69:CE:AA:0C:A6:A6:36:07:5E:B5:8A:C0:CE:2C:22
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c04::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:de:67:62:df:bb:90:8b:a5:cc:da:7f:ee:0f:6b:a0:3e:
         69:3e:6e:2a:f9:05:65:12:36:3e:75:64:b9:da:ff:3a:eb:90:
         47:59:21:9b:5a:cf:b1:a0:a3:e3:8a:74:63:b8:d8:e7:72:54:
         69:f7:e7:cd:f5:a2:95:91:41:db:e0:08:eb:71:eb:ce:32:ca:
         6a:7b:62:28:f0:8d:5a:5a:3b:a4:91:c9:90:da:a9:1b:f7:80:
         10:ec:06:b4:4d:ea:06:fb:17:36:91:74:c0:87:06:6e:4c:51:
         f3:57:e5:1f:ce:11:70:ae:15:31:9e:b4:b2:08:2c:29:65:6d:
         83:d9:15:df:8f:3c:cb:b9:7e:9f:95:b8:79:2d:e5:d9:7e:eb:
         7d:df:a8:fb:a3:7c:c1:49:97:d4:24:a5:fd:b6:7a:8d:26:65:
         c4:99:31:99:05:a2:8e:bf:26:0d:92:ad:f7:94:8c:14:09:57:
         fb:aa:7d:52:04:7d:2e:db:00:04:1d:5f:9e:f2:cf:a7:46:2b:
         38:72:bc:8c:10:af:f6:0b:85:05:1e:b7:ff:c9:f8:4e:67:9c:
         f2:43:e2:d1:6a:a4:5f:68:14:3f:b7:d4:34:96:4c:de:75:53:
         95:42:26:5f:9e:03:fd:8b:37:8a:4c:49:8b:2d:1c:16:00:4e:
         2b:de:85:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:11:52 2025 by rpki-client