This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b135e8de-4e6c-4d15-87c3-51709cb5a460.roa
File:                     b135e8de-4e6c-4d15-87c3-51709cb5a460.roa (raw, json)
Hash identifier:          qWTvBVhQH8iEza1aAEQuG0zROIw1z/5yVbN3AHKFNs8=
Subject key identifier:   39:5F:83:34:92:C4:F5:3A:EF:D2:DC:B7:59:B9:A2:66:B9:E4:CF:E7
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       12EC5783827ADED7B7610DCC75804B450EB20AAC
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b135e8de-4e6c-4d15-87c3-51709cb5a460.roa
Signing time:             Sat 15 Nov 2025 04:50:37 +0000
ROA not before:           Sat 15 Nov 2025 04:50:37 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:39c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ec:57:83:82:7a:de:d7:b7:61:0d:cc:75:80:4b:45:0e:b2:0a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 15 04:50:37 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=033cb35232bfbd818a4d79c073651e4b8a9284c0770b0c99f35a44f83b8f5737, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:c4:cd:c7:0e:29:49:1c:58:fd:25:25:54:
                    ba:ee:95:dd:e7:01:d5:e1:13:45:67:a0:27:88:f9:
                    d4:b3:5a:fa:9c:a2:45:6c:85:44:d2:63:22:d7:17:
                    20:52:49:00:bd:5c:36:38:74:8e:7c:ff:43:db:6d:
                    f8:e6:9e:ab:03:cc:c5:8a:8a:ad:94:1d:4d:31:39:
                    f2:7e:ad:b4:8e:99:f3:bd:28:ef:99:00:74:03:8a:
                    f7:16:ef:3f:ba:3e:3b:21:5e:50:95:60:02:86:4e:
                    1a:47:a0:e6:34:39:68:c7:f1:ef:d5:44:ca:3d:c6:
                    59:21:62:2c:e8:b9:23:89:13:f0:5c:4a:d2:2c:74:
                    23:7f:f6:d4:87:ed:ec:1b:9f:7e:4f:de:a5:7e:6e:
                    48:81:c4:2c:d6:9e:c5:b9:49:65:89:61:6b:71:3c:
                    67:4e:4f:65:ae:17:71:18:be:c2:62:f2:74:e9:f8:
                    17:8c:ba:2d:fe:f3:a6:a3:58:3a:13:79:07:87:92:
                    7d:74:d6:24:9f:d0:d5:db:63:50:eb:aa:45:a6:d7:
                    92:57:69:d5:75:4b:ac:2d:f2:0c:99:d2:15:aa:a7:
                    65:8e:75:9d:70:73:17:93:bf:71:cb:b1:1b:5a:d2:
                    08:03:01:2d:8f:ad:ab:e8:15:a2:43:5e:d9:eb:6b:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5F:83:34:92:C4:F5:3A:EF:D2:DC:B7:59:B9:A2:66:B9:E4:CF:E7
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b135e8de-4e6c-4d15-87c3-51709cb5a460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:39c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:c8:68:92:dc:3a:cb:70:a4:c8:d2:e8:6d:c4:93:6b:05:a5:
         42:20:93:3e:c5:9a:06:29:78:08:1f:7c:5f:f5:fa:98:bb:df:
         6d:db:dd:4d:5b:38:6a:7f:3f:50:ff:c3:b2:fe:61:5f:88:c8:
         db:20:60:56:f9:ec:43:05:9c:e1:cc:3e:c2:09:48:da:0e:ea:
         ac:2e:f6:41:f7:43:ce:08:39:29:f7:07:26:a5:0a:ac:23:31:
         8d:c4:ef:3c:e0:07:86:34:ba:bf:4d:c3:2f:85:e9:a7:84:dc:
         a2:68:39:de:32:80:7a:ba:91:06:27:72:00:5a:0f:d3:96:18:
         f6:02:4a:7d:22:aa:52:c6:f3:ce:10:c8:63:de:07:2a:e1:77:
         27:de:4a:d8:95:5c:90:74:66:18:cf:56:6b:9f:08:e2:76:45:
         19:7b:5e:84:b2:97:be:3b:cc:ae:ea:cb:83:e3:cd:74:b1:a5:
         21:3a:59:5b:d5:01:b2:b2:ad:86:22:52:aa:f7:e7:32:48:4a:
         af:86:b0:28:55:90:c1:7c:6f:ac:40:9d:ce:4a:1a:5d:9b:4d:
         e0:96:65:37:06:c0:1e:da:76:75:d2:0a:f1:33:01:b5:4a:c0:
         7a:0c:97:3f:78:e8:a7:cf:ca:4b:8b:cb:62:9e:ec:0b:86:c2:
         d5:6e:6a:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:44 2025 by rpki-client