This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e570facf-19db-4ef7-a2da-388bd82ef3eb.roa
File:                     e570facf-19db-4ef7-a2da-388bd82ef3eb.roa (raw, json)
Hash identifier:          9sWDOqEGloJitsbpl4fi+OMGB02OIQjUMGpl3dKP3cI=
Subject key identifier:   2D:88:04:EC:5B:8F:2C:DD:68:32:06:D5:E0:E6:C8:D4:3F:3C:9F:98
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1C50BFE0CF89B37B95C497E22A898C1407F1B55A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e570facf-19db-4ef7-a2da-388bd82ef3eb.roa
Signing time:             Fri 05 Dec 2025 00:10:06 +0000
ROA not before:           Fri 05 Dec 2025 00:10:06 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:2800::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:50:bf:e0:cf:89:b3:7b:95:c4:97:e2:2a:89:8c:14:07:f1:b5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Dec  5 00:10:06 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=f0a8d96c14e2631c5e6a86465211fe2dbf43de2807564794676fe0d0f9c76dec, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:33:f3:7c:c4:48:aa:f4:7c:7a:bd:98:2b:
                    e9:bb:91:57:dc:2d:a4:2c:9a:a5:9a:6b:f4:e2:a7:
                    9b:8c:da:6b:38:5d:29:3a:5f:46:8d:c7:1e:10:28:
                    ad:29:62:38:12:32:c0:66:e8:85:14:6b:12:47:5c:
                    6d:32:78:eb:f4:2b:45:e2:12:4b:c7:10:c2:e9:35:
                    ec:bb:51:5f:c2:99:39:92:dd:cb:1c:9e:a8:c7:6a:
                    d6:e0:5b:a8:55:8f:d6:5d:92:88:84:4c:28:95:1a:
                    17:d7:c4:5c:f0:96:0c:d4:82:6b:c5:c7:d8:5a:50:
                    17:5b:0b:52:f9:fd:0f:cf:97:41:ef:be:26:58:a7:
                    90:e5:f0:dc:9c:29:b2:85:65:0f:6e:5d:cd:a8:aa:
                    a9:6f:82:7d:68:45:fb:80:95:3e:fd:65:41:56:6e:
                    ed:b5:c1:07:e0:44:94:c2:91:81:9d:b4:38:b4:89:
                    bc:ad:01:ef:53:67:84:16:49:41:67:33:47:ea:60:
                    38:96:18:4d:76:9a:6f:49:d6:cf:8f:b3:99:da:11:
                    a8:3b:62:2e:24:c7:36:42:74:c4:3a:7b:96:21:2e:
                    da:58:cf:d5:26:c7:bb:1e:29:93:0b:9f:4a:5a:cf:
                    a1:f6:bf:92:86:85:e6:75:7a:cb:bb:2c:3c:ef:dc:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:88:04:EC:5B:8F:2C:DD:68:32:06:D5:E0:E6:C8:D4:3F:3C:9F:98
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e570facf-19db-4ef7-a2da-388bd82ef3eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:2800::/41

    Signature Algorithm: sha256WithRSAEncryption
         7c:e5:9f:a6:c2:21:97:8b:4a:d1:45:ff:ea:fd:45:2c:15:86:
         1d:fd:5c:19:d6:a0:ec:1f:3d:1f:6d:f8:c5:52:e8:66:e1:4b:
         2a:f6:5f:d9:5b:97:b1:01:27:55:aa:c8:e0:63:dd:10:58:00:
         ec:89:8e:63:3e:51:42:2a:a6:76:e0:6c:2a:d9:52:f6:2c:3f:
         c4:ce:9d:f4:7d:dd:15:de:84:f0:8c:1f:a3:e7:c5:b2:42:ae:
         be:ac:8c:66:79:e3:c0:f9:8c:b1:52:29:7a:20:a1:f3:9c:46:
         e3:c0:f8:6e:90:f9:bd:16:25:2b:82:ff:b5:e9:6b:a7:91:35:
         0e:7a:f2:6c:76:f4:e1:e1:45:15:4e:d1:9f:cf:78:af:2a:28:
         04:75:d0:68:a7:ce:7b:72:db:38:b9:7c:5b:1e:2f:67:77:60:
         79:0a:4b:f4:47:85:ef:6d:2e:49:39:bd:6d:91:59:a5:df:36:
         78:e1:14:a6:88:63:53:6a:d5:96:3f:5b:e6:77:5c:45:a9:d3:
         a4:7f:a6:17:4b:4f:a6:70:84:04:32:ae:12:e1:fb:cc:b1:39:
         b6:79:f1:89:58:f8:eb:c2:5f:23:e8:91:49:6b:bf:0f:d4:a1:
         21:b1:65:66:62:c6:bd:53:25:96:35:19:af:13:bb:97:46:f6:
         bc:39:95:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:41:49 2025 by rpki-client