This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5280eeb-f2f8-4857-afde-734a5987207a.roa
File:                     e5280eeb-f2f8-4857-afde-734a5987207a.roa (raw, json)
Hash identifier:          EKZIqVgQ2nayONK9owSOo7EEd8ME9PNwWdSMoDjUc+4=
Subject key identifier:   07:97:6F:3F:B0:7E:24:FC:EA:31:3E:DE:DD:B2:FF:FA:AB:F7:8D:DC
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       3E4A2FF6AEB51743CECD5B69A9C11C2B35932722
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5280eeb-f2f8-4857-afde-734a5987207a.roa
Signing time:             Sat 29 Nov 2025 02:50:32 +0000
ROA not before:           Sat 29 Nov 2025 02:50:32 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4a:2f:f6:ae:b5:17:43:ce:cd:5b:69:a9:c1:1c:2b:35:93:27:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 29 02:50:32 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=9a2fc484c5fbca464201016e975658cb69a3f6f6e5e33c77004442ca9833ca85, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:a7:d8:5d:c9:51:da:57:62:04:75:2f:d3:
                    4c:3e:21:69:e8:61:63:58:fe:93:05:d7:50:83:ef:
                    f4:63:86:30:9d:84:6e:6f:cf:37:76:d9:b5:ff:5e:
                    5b:f6:4b:2e:64:e9:52:3b:dd:86:ff:47:11:94:7c:
                    f6:4a:c0:c6:31:0f:9c:4b:33:f8:3b:25:6b:6d:9f:
                    bc:99:91:11:75:34:1a:4a:f2:91:19:ba:dc:bb:d9:
                    63:1d:fd:f3:62:75:8b:65:36:ce:10:81:65:e1:ae:
                    8e:c5:b9:ef:da:4b:ef:97:da:1b:da:15:c3:08:18:
                    81:cf:0e:24:97:76:d7:ac:0a:92:7d:9d:a3:a2:8a:
                    25:1f:31:f0:84:a5:c2:c6:91:fa:52:8e:08:85:26:
                    bf:da:20:6c:d8:ce:0e:0a:e1:0d:54:09:da:95:16:
                    f2:5c:ae:e8:0b:d9:0a:59:60:fa:fa:c6:dc:8e:62:
                    53:96:ae:41:3d:0e:66:b5:d0:af:10:12:91:f1:a4:
                    84:65:8c:0c:cd:66:44:f8:e9:f1:79:8a:6a:8c:fc:
                    f5:ed:9d:69:9a:a1:c5:f7:6c:0b:9e:d6:71:5c:df:
                    75:b4:d5:eb:a6:46:4e:d3:c8:ef:dd:f5:f1:f3:f2:
                    7e:87:f8:28:dd:f1:e5:51:ed:66:32:48:48:c5:95:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:97:6F:3F:B0:7E:24:FC:EA:31:3E:DE:DD:B2:FF:FA:AB:F7:8D:DC
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5280eeb-f2f8-4857-afde-734a5987207a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:11:08:b0:3f:fc:92:7c:cd:6a:68:c3:98:dd:72:ed:ef:
         ae:cf:14:af:5b:8c:4a:9b:eb:d1:32:92:d3:0e:91:74:da:58:
         07:7a:f2:4a:ac:94:87:69:ec:fa:8a:9d:ab:a4:7e:77:a1:ac:
         80:7a:ec:be:74:4a:f4:94:0d:0a:47:a3:e3:2b:67:43:60:d1:
         d8:23:1e:dd:0b:20:f2:c2:db:38:42:98:81:de:b1:21:79:4e:
         34:9c:be:a1:67:f4:dd:f5:bd:a9:8b:12:37:30:1b:36:d4:23:
         43:e9:73:8a:b0:76:ce:55:1a:ba:9a:15:3b:02:56:fc:d3:b4:
         a6:b3:e2:b7:8c:49:c8:9d:51:e5:ca:84:5a:ce:b1:46:c9:49:
         20:af:4a:21:b5:30:a2:61:55:66:54:eb:c5:40:9b:de:e2:3e:
         bd:2e:6a:81:43:e6:27:e5:4b:f8:26:0e:27:5f:ae:be:27:7b:
         f6:26:13:25:e6:3d:89:7f:00:91:b7:28:57:64:1a:d7:45:a1:
         e9:1a:12:54:bf:e3:ee:72:5b:83:f8:8d:56:2a:c5:b8:5f:ac:
         96:e9:b5:28:50:7e:6c:eb:60:d7:23:9b:76:0b:eb:b5:a0:f4:
         da:df:22:9c:68:5c:9f:68:2e:e8:90:e9:b2:15:91:44:5f:5b:
         5e:8d:63:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:16:13 2025 by rpki-client