This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/765f48e5-44b1-48b9-95bd-4fb6610759f1.roa
File:                     765f48e5-44b1-48b9-95bd-4fb6610759f1.roa (raw, json)
Hash identifier:          30qJx7znPXuB5K6Jsk6Kis/g9SfcRv8XvuIAgZipJFU=
Subject key identifier:   47:DF:33:97:6D:A0:28:94:CC:22:F8:99:86:01:EF:7B:E9:DA:98:B8
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       59B2A4CFBB060F2EF24990275F4E3BB977C40D2D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/765f48e5-44b1-48b9-95bd-4fb6610759f1.roa
Signing time:             Tue 25 Nov 2025 19:30:39 +0000
ROA not before:           Tue 25 Nov 2025 19:30:39 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b2:a4:cf:bb:06:0f:2e:f2:49:90:27:5f:4e:3b:b9:77:c4:0d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 25 19:30:39 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c75ad2be26e16710db6191fd0c69430eb1b25872fc7619f2e3883596fccd313c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:77:c2:6f:de:a8:f8:62:3a:ee:a5:dc:7a:
                    0a:7a:85:be:71:8a:c6:9d:79:34:fc:04:f6:06:47:
                    6a:26:21:65:e4:25:8c:25:5d:aa:ec:99:f4:9b:d8:
                    1a:c0:43:fe:a0:54:05:60:46:2e:21:1f:3f:e2:f1:
                    26:8c:a4:e9:d3:7e:c3:b0:ae:99:25:f4:c3:4c:5a:
                    2e:a6:fc:2d:c3:77:24:f3:5d:33:91:39:72:be:45:
                    0a:d2:d2:52:5d:60:36:13:7d:91:cf:11:7b:60:b6:
                    88:32:07:4c:92:25:94:70:f2:25:68:6c:ed:35:9b:
                    9c:12:f8:b7:5d:ac:4a:12:d5:79:33:f0:95:71:65:
                    47:05:ba:09:69:6c:5d:f6:b6:6e:05:a0:3e:0b:63:
                    0f:a5:1d:7c:64:fa:71:56:75:bc:4d:3d:1e:ec:d5:
                    d7:c6:f1:f0:1d:08:a1:66:99:7b:b7:d2:f0:58:dd:
                    42:6e:dd:a6:b9:d6:11:9d:fa:5a:83:3a:8a:aa:4a:
                    ec:0b:e8:28:3c:b1:3f:af:c9:46:1b:fc:57:02:d8:
                    f0:b6:f1:1d:1b:31:dc:a1:8d:a9:6e:49:bd:7d:bb:
                    85:2c:15:85:f6:98:51:48:c3:a5:c0:72:ef:b1:9d:
                    fa:f3:39:29:fd:f4:17:50:25:37:7b:ce:96:21:48:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DF:33:97:6D:A0:28:94:CC:22:F8:99:86:01:EF:7B:E9:DA:98:B8
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/765f48e5-44b1-48b9-95bd-4fb6610759f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c17::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:34:f3:bc:32:f5:b9:a5:46:f2:c9:1e:39:ad:dd:8b:f2:70:
         1f:19:e2:db:83:27:4f:28:f8:08:a7:dd:f7:28:01:1a:dd:79:
         47:d2:e6:fe:0e:5b:83:a8:4d:33:1b:64:60:54:ec:a4:df:3a:
         d9:02:2b:4f:7f:76:5f:ab:19:81:4d:4e:33:dc:eb:4b:19:8a:
         0f:69:a8:0e:8d:7d:66:2c:18:61:b8:50:31:64:18:1a:c2:4d:
         cf:af:2d:8f:7a:15:6b:8e:4a:8b:ee:f7:b4:d7:f0:1f:40:06:
         d8:d3:2a:c1:e8:a5:6b:91:bb:b9:63:5e:b0:e3:ae:59:52:b0:
         14:25:48:09:14:2e:71:46:e7:3b:ed:92:13:d8:ea:7e:95:7e:
         fc:0f:58:36:05:da:4a:8f:d7:22:d1:d3:b7:b8:d5:e9:a6:4b:
         3f:e4:31:45:5e:d2:c9:60:63:77:03:97:5e:32:14:54:3e:92:
         3a:7c:3a:0d:88:7d:09:5c:b6:7f:3d:97:37:9b:2e:0e:99:7f:
         d9:c2:b6:ca:9a:b5:ff:bc:36:84:32:93:66:69:fd:c4:ef:5d:
         70:77:67:d0:75:45:27:51:7d:be:ce:2b:4d:66:b9:45:9d:f4:
         5e:d4:75:ea:05:ae:3b:90:06:b5:9f:25:63:08:8e:8b:a8:ed:
         ca:40:64:56
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWbKkz7sGDy7ySZAnX047uXfEDS0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTI1MTkzMDM5WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNzVhZDJiZTI2ZTE2NzEwZGI2MTkxZmQwYzY5NDMwZWIx
YjI1ODcyZmM3NjE5ZjJlMzg4MzU5NmZjY2QzMTNjMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcCXfCb96o+GI67qXcegp6hb5xisadeTT8BPYGR2omIWXk
JYwlXarsmfSb2BrAQ/6gVAVgRi4hHz/i8SaMpOnTfsOwrpkl9MNMWi6m/C3DdyTz
XTOROXK+RQrS0lJdYDYTfZHPEXtgtogyB0ySJZRw8iVobO01m5wS+LddrEoS1Xkz
8JVxZUcFuglpbF32tm4FoD4LYw+lHXxk+nFWdbxNPR7s1dfG8fAdCKFmmXu30vBY
3UJu3aa51hGd+lqDOoqqSuwL6Cg8sT+vyUYb/FcC2PC28R0bMdyhjaluSb19u4Us
FYX2mFFIw6XAcu+xnfrzOSn99BdQJTd7zpYhSBO5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUR98zl22gKJTMIviZhgHve+namLgwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzc2NWY0OGU1LTQ0YjEtNDhiOS05NWJkLTRmYjY2MTA3NTlmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADBcwDQYJKoZIhvcNAQELBQADggEBADE087wy9bmlRvLJHjmt3Yvy
cB8Z4tuDJ08o+Ain3fcoARrdeUfS5v4OW4OoTTMbZGBU7KTfOtkCK09/dl+rGYFN
TjPc60sZig9pqA6NfWYsGGG4UDFkGBrCTc+vLY96FWuOSovu97TX8B9ABtjTKsHo
pWuRu7ljXrDjrllSsBQlSAkULnFG5zvtkhPY6n6VfvwPWDYF2kqP1yLR07e41emm
Sz/kMUVe0slgY3cDl14yFFQ+kjp8Og2IfQlctn89lzebLg6Zf9nCtsqatf+8NoQy
k2Zp/cTvXXB3Z9B1RSdRfb7OK01muUWd9F7UdeoFrjuQBrWfJWMIjouo7cpAZFY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:08:22 2025 by rpki-client