This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa
File:                     84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa (raw, json)
Hash identifier:          rDF4doX/ERqzv/nKIqVh47R+LLr25L3F9HbssB5KGPs=
Subject key identifier:   B0:B2:78:9F:94:D2:B3:1D:32:88:49:05:74:58:CE:5E:36:95:AE:B2
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2B36F487ADD703B3C7C57E312547654E11DD9120
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa
Signing time:             Sat 15 Nov 2025 04:30:49 +0000
ROA not before:           Sat 15 Nov 2025 04:30:49 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c40::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:36:f4:87:ad:d7:03:b3:c7:c5:7e:31:25:47:65:4e:11:dd:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 15 04:30:49 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=73e1b433a08bd6a1deb99d177a5bbc3d411b60991ac58f64ced83c1ba57e051a, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:da:0e:5d:f3:ff:72:c1:ea:ac:b2:ed:bf:
                    a2:95:ed:ec:bb:60:91:3f:b4:af:8b:a0:75:c0:f5:
                    1b:34:76:51:06:6a:84:db:55:96:be:84:63:88:41:
                    45:ac:ea:a8:f0:89:31:21:69:7d:e5:8a:c2:8a:27:
                    47:28:54:47:8b:f4:72:33:99:0d:24:c8:ac:68:47:
                    d3:1b:b7:58:c7:4f:be:02:7f:d1:86:70:3f:81:b8:
                    a5:be:ae:aa:5a:e7:f2:83:d9:1d:9d:e4:5b:79:f2:
                    b0:7e:f4:c1:40:5e:6c:7f:77:47:ca:ff:a2:33:17:
                    bd:5b:48:a5:ba:57:86:6d:06:54:30:ba:19:69:04:
                    de:55:d7:cf:0c:79:9e:5a:05:2f:ad:5c:ca:05:97:
                    64:29:4f:68:66:c1:2a:ef:20:ec:fb:2f:b1:c3:bc:
                    0c:5b:15:05:ec:2f:d9:e2:ba:a3:69:d1:28:5e:1f:
                    bc:0a:e0:9a:c6:61:4f:52:20:f1:5b:ea:e9:e2:30:
                    8f:e9:fa:d6:73:13:9f:c7:39:1a:0c:7e:41:e5:ff:
                    6b:a5:31:22:43:80:d9:86:49:f7:e9:b4:70:42:53:
                    c2:67:73:ca:4b:e9:bf:1f:21:a2:cf:fc:ce:f2:b8:
                    53:54:54:1e:26:f0:6a:dd:4a:ca:68:43:d8:22:fc:
                    ed:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B2:78:9F:94:D2:B3:1D:32:88:49:05:74:58:CE:5E:36:95:AE:B2
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c40::/45

    Signature Algorithm: sha256WithRSAEncryption
         30:8e:16:88:e6:8c:28:2a:31:15:3f:3e:9f:cc:a4:81:98:fb:
         2f:ee:e6:cc:60:19:48:e6:0d:d3:64:b8:fb:8d:72:49:a0:13:
         da:3a:a5:32:a2:50:a8:82:04:5c:23:b9:5e:66:58:72:4b:25:
         8e:cb:af:8d:d7:2e:ee:92:df:34:21:c9:4b:15:73:96:00:ae:
         ae:54:fa:1b:6f:f2:0e:fd:fe:92:90:73:16:dd:10:19:74:e9:
         84:14:1c:0e:a9:08:1b:b6:53:a6:a6:a7:c7:ee:6a:7c:8d:89:
         84:72:b2:cd:f5:ab:0a:79:0e:92:b0:ba:61:74:d8:4d:0c:4b:
         e8:ec:0e:10:be:79:a2:63:21:07:16:e6:32:2a:f7:c8:60:c1:
         ad:6c:c8:32:27:8e:ad:b6:25:ce:5a:a2:18:7c:40:1a:a8:07:
         a6:37:ff:7c:7e:44:1f:5a:7c:57:6f:a4:c5:6e:54:fa:99:5b:
         a0:9e:14:f3:03:e9:7e:ad:a1:9e:2a:29:b4:d1:07:2a:53:c2:
         c6:93:3d:0d:e0:25:9f:b5:58:01:9e:00:9e:24:a3:a1:fd:fc:
         ea:41:0c:91:46:f4:8c:2d:c7:1b:dd:98:b6:1f:52:ef:b0:02:
         05:8b:8e:87:61:ff:11:97:1b:5b:4e:73:96:7e:d8:a4:25:ff:
         18:f5:5c:3b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKzb0h63XA7PHxX4xJUdlThHdkSAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTE1MDQzMDQ5WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3M2UxYjQzM2EwOGJkNmExZGViOTlkMTc3YTViYmMzZDQx
MWI2MDk5MWFjNThmNjRjZWQ4M2MxYmE1N2UwNTFhMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcS9oOXfP/csHqrLLtv6KV7ey7YJE/tK+LoHXA9Rs0dlEG
aoTbVZa+hGOIQUWs6qjwiTEhaX3lisKKJ0coVEeL9HIzmQ0kyKxoR9Mbt1jHT74C
f9GGcD+BuKW+rqpa5/KD2R2d5Ft58rB+9MFAXmx/d0fK/6IzF71bSKW6V4ZtBlQw
uhlpBN5V188MeZ5aBS+tXMoFl2QpT2hmwSrvIOz7L7HDvAxbFQXsL9niuqNp0She
H7wK4JrGYU9SIPFb6uniMI/p+tZzE5/HORoMfkHl/2ulMSJDgNmGSffptHBCU8Jn
c8pL6b8fIaLP/M7yuFNUVB4m8GrdSspoQ9gi/O1RAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUsLJ4n5TSsx0yiEkFdFjOXjaVrrIwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzg0YWM3NzE0LWViYTUtNGY3ZC1hNWVlLTc5YjZlZWQ3N2I3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmBZzADEAwDQYJKoZIhvcNAQELBQADggEBADCOFojmjCgqMRU/Pp/MpIGY
+y/u5sxgGUjmDdNkuPuNckmgE9o6pTKiUKiCBFwjuV5mWHJLJY7Lr43XLu6S3zQh
yUsVc5YArq5U+htv8g79/pKQcxbdEBl06YQUHA6pCBu2U6amp8fuanyNiYRyss31
qwp5DpKwumF02E0MS+jsDhC+eaJjIQcW5jIq98hgwa1syDInjq22Jc5aohh8QBqo
B6Y3/3x+RB9afFdvpMVuVPqZW6CeFPMD6X6toZ4qKbTRBypTwsaTPQ3gJZ+1WAGe
AJ4ko6H9/OpBDJFG9IwtxxvdmLYfUu+wAgWLjodh/xGXG1tOc5Z+2KQl/xj1XDs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:59:27 2025 by rpki-client