This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f73b34f7-01b4-474f-a473-362785b20779.roa
File:                     f73b34f7-01b4-474f-a473-362785b20779.roa (raw, json)
Hash identifier:          nXwFFxQICcAtbMMLl7OBVN2TnZKx6+x0HUaBlGoEC9g=
Subject key identifier:   A8:B6:FB:88:7D:5F:40:C6:89:B7:04:DA:9F:48:78:38:54:B6:37:8E
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       73C58569FFCBA8D0006EAD6B1D38867D8D6280EE
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f73b34f7-01b4-474f-a473-362785b20779.roa
Signing time:             Sat 29 Nov 2025 02:40:07 +0000
ROA not before:           Sat 29 Nov 2025 02:40:07 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c5:85:69:ff:cb:a8:d0:00:6e:ad:6b:1d:38:86:7d:8d:62:80:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 29 02:40:07 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=c5845770fdde096b80fd917c0ef797a0457cb9037d1156443300d41b02fed14a, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:27:24:77:1e:70:0e:e2:ae:9d:6b:45:62:
                    ed:f6:70:c0:7a:53:fd:f2:59:b8:d7:5c:16:33:1a:
                    58:9d:fc:a4:48:48:3d:a1:fb:df:cd:7b:cd:d1:4a:
                    17:21:05:90:7f:22:15:ca:4e:49:6b:33:40:e1:1e:
                    40:2b:7d:a4:da:3b:7c:3a:d3:99:8a:fa:16:7e:b2:
                    87:e4:87:e3:32:2b:3a:54:ea:36:56:26:39:aa:b3:
                    0d:db:42:a6:f5:12:f0:b0:31:a2:7c:f7:e9:43:65:
                    af:a1:c5:28:f3:cb:01:17:d9:35:c2:d9:4d:b6:8f:
                    fe:a8:8a:ab:20:8d:49:70:fb:7d:2c:6d:ac:11:ec:
                    94:60:2c:9c:06:b3:8c:d5:7a:42:8a:dd:4b:6d:c1:
                    e5:92:3e:53:4e:b7:d1:c0:1c:3c:2b:d0:df:56:ab:
                    75:57:a6:41:58:96:37:17:1c:e2:da:7b:df:44:2d:
                    4c:f2:f7:60:10:41:63:ec:0c:13:dd:dc:9d:14:87:
                    03:f0:16:39:f9:6f:34:2f:c0:96:60:58:1c:a4:50:
                    13:9d:34:51:59:c8:e1:09:79:6a:59:c9:0a:cd:1f:
                    e5:55:ed:dd:7c:db:34:b0:4c:50:93:08:50:49:f0:
                    ac:6c:d8:2f:75:27:7b:ce:e0:f1:d4:a2:81:bf:97:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B6:FB:88:7D:5F:40:C6:89:B7:04:DA:9F:48:78:38:54:B6:37:8E
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f73b34f7-01b4-474f-a473-362785b20779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:b8:9a:f8:74:69:7c:6a:29:f2:77:e1:28:6b:ac:52:66:
         a1:c3:23:9d:cb:4c:04:e3:bb:61:47:c4:98:1b:bb:52:b0:a5:
         1b:d7:11:81:d1:9d:31:6d:f5:43:af:96:1c:cf:09:5c:00:61:
         89:86:c4:9e:5b:94:6d:fe:7f:9e:f9:05:0f:66:e2:8a:a2:81:
         bc:a6:19:08:49:f9:1f:d3:42:95:cb:b1:81:7b:68:24:fa:4e:
         a3:7a:cd:82:f0:34:20:78:82:8a:a5:e7:78:c1:36:6d:2d:3d:
         33:8e:01:1a:92:8d:01:1a:08:d8:18:e5:1e:e7:37:39:c4:34:
         e6:ce:b5:fd:ae:04:1f:34:75:9a:38:30:24:84:08:d0:da:9e:
         94:f7:0f:07:70:5c:13:c8:36:81:00:71:4d:d9:54:37:0d:d5:
         e4:08:72:fe:35:a4:eb:c1:52:ff:68:9c:06:d1:1d:a1:a0:70:
         77:a2:f4:8a:29:1e:96:c9:c8:5b:42:2b:05:52:70:02:ca:17:
         18:fa:1b:6c:94:7f:d3:fa:bc:dc:f3:65:04:19:0e:50:52:2d:
         0f:5f:74:87:aa:eb:d4:96:f4:06:08:64:5f:11:08:c9:fb:ea:
         0a:c5:5d:3e:c3:19:99:84:6f:a6:01:98:88:a0:24:f1:6e:ce:
         3c:3f:c2:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:31:57 2025 by rpki-client