This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa
File:                     7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa (raw, json)
Hash identifier:          wNB8LWqEIi7ez5gG7CpFb/YzVjEW1d+siD/ubfUrePQ=
Subject key identifier:   34:B7:C0:BC:40:9D:0F:6B:D4:08:A9:11:CD:6F:AB:4E:EF:6E:CC:71
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       73D04DA6E6F47FE973C0958F988F34E13A5BE76D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa
Signing time:             Tue 25 Nov 2025 19:40:07 +0000
ROA not before:           Tue 25 Nov 2025 19:40:07 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:8140:500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d0:4d:a6:e6:f4:7f:e9:73:c0:95:8f:98:8f:34:e1:3a:5b:e7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 25 19:40:07 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=246f223c1f21c51b24d58d2aec68d11820956cb82ba8f0ab30733142048d9ac8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:2c:4d:24:1d:99:1c:d2:5c:51:31:c2:d5:
                    33:e9:a8:ef:94:8e:57:01:8c:03:d4:5a:56:a0:6c:
                    6d:bb:e6:fa:a4:7f:d9:24:26:f4:90:ea:69:7d:97:
                    19:63:6c:73:32:0c:79:53:55:1a:95:6b:b2:42:cc:
                    16:7e:08:77:b0:52:3a:c2:f2:6f:53:dd:e8:5c:ec:
                    ae:dc:c9:53:d2:60:9c:7c:4c:78:08:80:61:51:dd:
                    8c:80:65:f4:a4:bb:6b:ff:03:71:89:4e:99:5c:23:
                    af:2a:33:d7:a9:30:c6:b3:d7:56:10:58:10:a6:df:
                    d7:e6:69:39:2a:2b:f1:26:91:95:29:c5:82:98:66:
                    84:7a:a8:4e:1b:10:e1:e2:be:87:8c:27:72:0a:a3:
                    79:08:75:71:d7:da:cc:42:50:51:ca:61:e9:28:0e:
                    e7:c2:30:51:10:51:61:ee:79:56:34:c5:7c:5e:17:
                    ac:91:22:f3:65:16:b9:9c:81:f6:cb:0c:b1:bb:07:
                    8e:3d:9c:e5:3b:80:48:54:24:19:67:a2:d2:87:92:
                    f8:43:8c:c0:22:ac:b2:7d:9a:b0:66:5b:98:15:54:
                    cf:f8:51:06:b9:cd:1a:6b:97:ab:0d:b6:b0:18:03:
                    91:0f:a4:9f:0d:e7:86:01:9d:34:65:e0:35:32:c1:
                    11:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B7:C0:BC:40:9D:0F:6B:D4:08:A9:11:CD:6F:AB:4E:EF:6E:CC:71
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:78:af:49:0d:42:b5:15:05:60:9b:7c:c5:e5:a9:93:6e:b9:
         80:28:92:68:0d:c0:d5:08:0e:0b:e0:4a:ce:f8:25:a7:ac:8c:
         56:7f:01:00:58:d2:15:a1:19:94:01:99:cb:0f:96:83:c7:fd:
         a5:93:17:03:e2:19:ad:08:71:36:63:18:19:2f:25:d5:30:24:
         c6:bf:b0:6b:e2:74:7c:38:6a:c1:71:7d:ca:d5:c2:67:79:f9:
         5d:5c:1d:c8:31:04:36:3e:b1:ce:81:8b:24:91:86:c9:6c:6d:
         0b:0c:46:9f:95:ed:40:9b:70:be:ea:97:1f:0d:92:31:4b:36:
         20:ba:be:61:af:0b:84:34:c9:90:cf:7f:92:a5:51:f8:ab:54:
         d0:ff:1f:f4:79:45:52:2d:2b:f6:15:26:94:f8:a5:f5:9b:50:
         d4:e5:f1:92:98:0a:92:1c:07:fe:8f:45:cb:ec:b8:be:d4:a2:
         d4:61:6a:6f:6b:fa:6a:1e:be:69:6c:d8:7c:ea:50:3f:25:38:
         80:32:60:e2:02:87:99:c9:33:69:e3:36:46:e6:3d:96:e5:83:
         43:37:e3:16:40:83:ff:ca:1d:0c:2e:62:26:ba:40:33:d1:eb:
         0e:38:43:00:cb:3b:4e:b8:b9:07:49:44:db:8c:97:c8:15:7e:
         ed:10:98:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:33:06 2025 by rpki-client