This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdfce505-d22a-40b9-a253-7b77b0f9f1c2.roa
File:                     fdfce505-d22a-40b9-a253-7b77b0f9f1c2.roa (raw, json)
Hash identifier:          1N1CW94H5Ds+gumc/ubF07Fm+P2dkD8Ot4hHF1IE0uQ=
Subject key identifier:   DE:9D:24:8B:75:64:06:86:A2:A6:D5:A6:E0:26:79:24:64:32:01:3E
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       799D7A9D40E13BF01682980F75FAD295C3F71EF9
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdfce505-d22a-40b9-a253-7b77b0f9f1c2.roa
Signing time:             Sat 29 Nov 2025 02:50:51 +0000
ROA not before:           Sat 29 Nov 2025 02:50:51 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9d:7a:9d:40:e1:3b:f0:16:82:98:0f:75:fa:d2:95:c3:f7:1e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 29 02:50:51 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=4116e9f5425b5ebda1aa667f1835eed39ee300ef3e3fe9b022e51cbffedce484, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:22:09:8f:43:6b:ab:35:a6:8b:27:19:41:
                    f6:bd:55:84:ac:75:c7:70:45:9a:1d:69:06:dd:61:
                    c2:bb:b0:37:54:60:5c:cc:3f:0d:79:dd:9a:5b:64:
                    dd:ee:bd:44:c5:a7:e4:3d:10:f4:5f:8a:73:7c:5a:
                    98:0f:35:14:43:f1:61:37:ca:59:74:3c:f3:b5:71:
                    c4:41:b5:73:26:5a:5c:93:59:9c:47:f6:fc:05:05:
                    1d:ce:65:22:7b:ab:60:23:b3:4e:22:79:fc:d0:c1:
                    aa:fa:00:9c:85:4c:24:9a:61:11:ca:d8:05:91:26:
                    0c:fc:62:63:c1:fd:86:11:d3:2b:4f:27:2e:c3:d4:
                    87:a7:7f:35:cb:2d:64:75:d2:8e:ab:a0:3e:99:67:
                    45:b7:e8:d6:04:ec:95:63:98:2c:99:08:6f:62:23:
                    3d:13:b5:17:a1:e2:f4:c0:ca:fa:4c:09:87:38:ed:
                    a7:87:24:34:7f:8a:b2:c1:c7:5e:83:40:c5:f2:45:
                    60:e0:bc:57:60:43:23:97:5f:fb:cb:7b:d4:97:91:
                    41:6e:cd:7a:e7:d0:34:59:af:ab:7c:ad:ac:ca:7e:
                    86:75:5d:eb:9e:99:83:52:f3:d8:ef:71:dc:18:be:
                    96:ef:3e:74:6a:ba:02:3b:43:bb:a4:a7:f2:2d:39:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:24:8B:75:64:06:86:A2:A6:D5:A6:E0:26:79:24:64:32:01:3E
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdfce505-d22a-40b9-a253-7b77b0f9f1c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c04::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:83:8b:e3:1b:30:88:6e:7a:4d:76:2c:f6:dc:d4:52:74:de:
         cc:30:32:7b:bf:77:d0:00:05:97:08:c0:80:f8:84:e6:c0:7d:
         d7:46:6d:d8:0d:1f:95:ed:b4:2b:e0:cf:e0:98:d5:ad:37:5d:
         1c:51:44:87:c0:b5:23:51:c8:42:6b:c2:6a:9e:29:a6:20:49:
         20:ea:f1:9f:dc:28:fd:a6:f3:e1:e1:77:da:72:bf:af:b7:09:
         65:35:62:1e:75:54:be:04:e2:63:fb:3b:b1:df:e0:07:d9:cb:
         37:38:c5:8a:d8:4c:95:f4:46:c1:75:18:20:c2:cd:42:77:d8:
         bd:26:74:95:e6:24:81:e3:89:49:27:f4:6b:44:6f:f6:29:91:
         01:bc:f5:6b:22:d2:a8:48:c0:5f:b8:cd:ca:e2:2d:ca:4b:b6:
         1f:cc:54:01:0c:1e:f0:36:af:92:19:76:ef:e9:2b:bd:34:0d:
         bd:92:3d:ac:32:ab:23:18:26:3b:af:75:24:86:a9:3e:77:34:
         e1:9e:30:a7:29:2b:f9:4a:a8:b2:94:1f:2e:26:49:ed:a6:4c:
         7c:b8:97:86:30:dc:db:11:7c:10:65:7a:8f:b1:c2:b8:df:b3:
         8d:78:23:52:0e:6e:53:fe:78:65:20:fa:3f:fa:cf:32:6a:72:
         e9:6c:0f:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:57:19 2025 by rpki-client