This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ea431c8-e4df-4671-a74c-024b16849a0d.roa
File:                     1ea431c8-e4df-4671-a74c-024b16849a0d.roa (raw, json)
Hash identifier:          eXrE+yNYPjaCAw1ctWtjuleblYxgvXbrQY2p7Drezl4=
Subject key identifier:   52:ED:51:91:F5:45:11:77:5C:14:E8:F0:99:9E:B5:8A:8F:65:1D:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68929AB2EC3804555C37AAF71FF5FF36381E8D17
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ea431c8-e4df-4671-a74c-024b16849a0d.roa
Signing time:             Sun 07 Dec 2025 00:10:08 +0000
ROA not before:           Sun 07 Dec 2025 00:10:08 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fb9:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:92:9a:b2:ec:38:04:55:5c:37:aa:f7:1f:f5:ff:36:38:1e:8d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:10:08 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=138af89b59da8ccd4a492ad7df378201518bfb26cc0582f6819f93050b660136, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:16:9d:0e:73:8f:fb:22:63:28:1f:53:21:
                    ae:1e:27:e1:43:11:5e:2b:35:7d:68:e5:69:ce:ab:
                    22:b2:96:2a:e6:a5:8e:c3:10:4d:5e:a2:05:bf:bd:
                    d2:26:9d:f6:3d:91:2e:f3:c1:68:7a:87:f1:b8:20:
                    01:93:57:6a:a7:9a:38:d7:5c:e5:c6:ef:a0:40:6f:
                    1a:a7:5d:f0:52:5e:24:09:3f:3d:75:a3:97:0e:a6:
                    45:48:14:5e:52:bb:53:fd:96:2a:bc:8c:92:b0:ec:
                    b6:ec:95:22:a3:55:9f:e7:7c:58:c4:6a:8f:51:da:
                    3b:00:30:f5:d3:5f:d9:be:63:d1:6d:e6:9f:63:22:
                    14:1a:c7:c6:d3:44:2a:6e:70:2a:69:79:4e:1b:93:
                    0c:54:70:60:d7:31:62:08:41:18:ad:a9:1b:b3:17:
                    aa:7a:85:7c:2e:5d:63:a0:15:67:b8:29:6e:68:b1:
                    c8:5a:1e:74:84:6c:80:f0:4b:34:ee:e4:98:cd:89:
                    1e:11:2c:c4:2f:39:84:74:61:59:79:9c:a6:95:68:
                    ca:f2:e4:e5:fd:16:b5:6a:c8:bb:3e:e3:e9:38:07:
                    23:09:b9:a1:51:fb:79:47:2d:36:73:17:94:26:ca:
                    ed:9b:de:0c:b6:54:e9:ca:17:e7:99:a9:5f:63:ed:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:ED:51:91:F5:45:11:77:5C:14:E8:F0:99:9E:B5:8A:8F:65:1D:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ea431c8-e4df-4671-a74c-024b16849a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         cb:b9:fe:0b:04:9f:36:10:5b:cd:db:fc:a6:13:cb:73:f1:81:
         17:06:34:3b:73:6b:05:9a:73:9d:48:6f:91:84:e0:e1:37:b1:
         57:d9:82:2a:c0:c1:22:7a:d1:02:bd:24:d7:c2:85:cf:0c:23:
         9a:e8:f6:46:fd:52:47:9c:e3:31:c8:f1:4d:0a:90:8e:33:b4:
         6b:0f:16:0e:40:f8:77:88:2e:22:61:09:08:7b:16:58:0b:8a:
         57:8f:c4:26:96:fa:62:01:bd:c3:a8:39:23:c8:40:c9:5c:c8:
         22:02:b8:4a:22:93:d6:2e:f1:0d:61:e3:dc:e7:09:03:a3:3c:
         4e:71:01:12:a1:66:be:1e:60:ef:00:31:ef:bc:47:9e:ca:69:
         05:29:6e:d7:c4:3b:2e:42:48:b8:56:13:59:86:97:cd:20:73:
         9e:0a:8f:a9:0c:6c:1f:5d:53:f7:44:fb:e9:2f:fe:a0:0d:2b:
         db:fa:bb:67:54:bf:7f:39:60:0c:90:20:b1:e2:44:17:8e:fa:
         89:5b:e9:16:98:d7:d8:a3:b6:4c:2c:34:53:19:7d:48:75:5f:
         0b:6c:29:e1:73:e6:a8:74:52:15:7e:87:60:df:98:97:9b:23:
         bf:1a:8f:26:9d:89:91:df:d7:72:fc:37:88:fe:89:fc:05:04:
         30:05:41:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:43:38 2025 by rpki-client