This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa
File:                     a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (raw, json)
Hash identifier:          KFWfd6l0BShkQZfJ3md5ZQX3cf+majPH2lWSnjRRVjU=
Subject key identifier:   33:48:66:10:63:39:E4:40:DA:38:20:4E:34:82:F6:40:72:12:FB:56
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       4BDBC22A15EC40B2769618F61D44781080759E5A
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa
Signing time:             Sat 15 Nov 2025 00:30:11 +0000
ROA not before:           Sat 15 Nov 2025 00:30:11 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:db:c2:2a:15:ec:40:b2:76:96:18:f6:1d:44:78:10:80:75:9e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Nov 15 00:30:11 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=719e4fcf1b2c36ed944ba1d71a300e82e6b8449ac572afbed88b8899620e9315, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3e:01:26:e6:bb:2a:a2:be:e1:20:da:11:71:
                    f1:2b:df:45:a0:c2:34:59:4b:4c:c7:5b:05:f8:79:
                    8b:3b:34:59:f3:b6:41:e2:47:cf:f1:cf:43:17:2a:
                    22:f0:d7:bd:e8:fc:c0:3c:a5:19:48:b9:16:8d:4e:
                    94:80:ab:28:f4:51:b1:91:f4:5c:67:2b:13:e7:7d:
                    c9:aa:bf:b8:5c:78:cc:c5:52:8a:14:ad:95:8b:6b:
                    1f:3e:e9:e9:56:04:42:71:d4:45:14:18:1f:02:90:
                    32:78:41:f1:95:9a:cb:dd:6e:c6:25:3e:7c:90:2d:
                    8a:fc:8c:56:af:c6:0f:98:be:5d:be:b7:bd:5e:d4:
                    d9:0e:b7:45:df:e8:e1:ef:5d:ed:3c:41:eb:cf:1b:
                    d9:1d:98:fd:36:e6:38:b1:1c:9a:4e:29:07:fc:7c:
                    67:ae:e9:58:93:2d:b0:35:aa:51:41:b8:50:76:4c:
                    22:b7:a3:4d:55:a8:7c:99:ca:68:ee:eb:b7:1e:21:
                    4b:e2:99:af:db:1e:69:47:d2:eb:dc:75:be:a2:38:
                    97:86:72:22:7f:c6:dc:ea:a5:b4:b5:70:24:fd:4f:
                    b1:3e:68:1b:b0:48:6e:9e:9d:5f:55:f3:7b:1d:ff:
                    df:51:57:dd:92:97:fd:51:7b:1b:25:c9:4d:9c:f0:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:66:10:63:39:E4:40:DA:38:20:4E:34:82:F6:40:72:12:FB:56
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:fd:61:b6:3b:88:2c:86:e2:3b:11:61:df:95:21:8c:4d:4c:
         a4:3a:b6:5f:51:12:c7:ab:12:d0:b1:1b:c7:0c:c7:38:0a:1b:
         2d:ed:1d:48:f7:bb:53:bb:89:f9:17:de:78:3c:15:1a:a4:d9:
         94:60:89:c3:7b:ab:1a:7a:b1:bf:d7:c7:09:c2:0c:38:41:6a:
         31:78:70:43:16:77:0c:19:aa:e9:bb:c5:68:bb:f0:63:2f:0e:
         21:cc:57:9f:da:02:7e:79:0a:5f:da:f7:e8:08:57:4d:5c:e6:
         de:0b:d3:ba:4a:11:08:f4:2c:28:ae:01:b7:9f:8d:77:36:e6:
         29:ba:b7:99:72:ee:30:bd:18:d9:55:72:8a:d1:74:98:90:6b:
         23:22:e2:c9:87:10:04:e7:36:8b:4f:91:87:da:aa:83:e0:f0:
         1a:cd:6d:e2:ee:8f:e9:61:68:f1:cd:18:7c:a3:a6:a8:59:d7:
         e0:f2:c5:2b:91:f5:29:05:3b:34:f3:ae:87:d7:95:30:1e:96:
         08:1c:e5:0d:05:cc:9d:01:f1:65:5f:76:d4:38:ec:b9:88:2b:
         31:7a:b8:8a:5b:1f:7c:d5:e0:d9:9b:69:8a:63:2e:ba:09:84:
         74:e5:07:7f:ad:39:63:2a:2f:36:e1:5d:24:53:94:cd:fc:b1:
         d1:e5:fc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:58:52 2025 by rpki-client