This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fa66cbb-8c26-4db5-a3a6-9e49d44547c7.roa
File:                     1fa66cbb-8c26-4db5-a3a6-9e49d44547c7.roa (raw, json)
Hash identifier:          Rs0UqMvg/y0yfbLo9y/AEcSzARVdfYDtP9CIsGBlDvY=
Subject key identifier:   C7:B4:83:E3:8C:8D:09:54:50:AF:24:31:D3:2D:BB:6E:A1:80:DC:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7306E2071CEA7670BF53007F0183309D90480684
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fa66cbb-8c26-4db5-a3a6-9e49d44547c7.roa
Signing time:             Sun 07 Dec 2025 02:20:47 +0000
ROA not before:           Sun 07 Dec 2025 02:20:47 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:06:e2:07:1c:ea:76:70:bf:53:00:7f:01:83:30:9d:90:48:06:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 02:20:47 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=c13df0a053f82c51699dfef8549f1ad6ffc24ab30f7494630f551e4c980db694, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:b0:1e:5c:dc:c6:9b:8b:18:7f:a5:a2:4b:
                    c9:44:5d:a7:9e:1f:0a:4b:26:88:57:46:ba:6d:dd:
                    cd:17:a5:73:75:27:32:82:95:4f:e3:67:94:5f:d8:
                    ac:cc:58:6c:4a:00:37:15:7c:a2:cb:ec:83:6d:16:
                    3c:7c:d0:36:2b:db:79:cb:0b:f6:57:12:b3:c6:07:
                    c9:79:6b:f4:b3:b9:03:1b:75:bb:64:d4:14:7b:03:
                    31:a0:89:c3:4b:63:6a:c9:6b:d7:db:af:86:9e:5a:
                    4e:eb:f8:cd:e3:0b:bf:e7:51:22:f4:70:49:d9:0c:
                    2e:c6:6b:cb:14:41:5f:39:01:3e:1e:6f:0d:3d:75:
                    d2:9e:f7:fd:80:14:3f:5d:03:3a:52:5a:8c:72:93:
                    57:fe:c6:04:cd:ba:83:60:52:6a:07:b4:43:ce:4f:
                    39:0e:2a:b8:bb:45:48:fd:eb:60:c1:26:f6:d1:c8:
                    48:81:71:4f:0d:f1:63:9a:f3:8f:ff:97:80:72:a8:
                    cd:ee:bc:5e:29:38:ad:37:47:67:4b:59:1f:b7:a4:
                    7a:50:49:52:1c:ff:0c:67:04:f6:82:3f:46:89:93:
                    37:cb:63:f7:42:75:6c:90:05:0e:6f:6b:4e:7d:dd:
                    03:75:50:3a:f2:d6:96:4a:0f:94:6b:e1:c8:fd:de:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B4:83:E3:8C:8D:09:54:50:AF:24:31:D3:2D:BB:6E:A1:80:DC:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fa66cbb-8c26-4db5-a3a6-9e49d44547c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:2e:6c:c1:9b:97:a6:20:7c:0d:ba:5a:f1:93:c8:9e:a8:
         19:54:58:cc:43:ab:c3:fe:e6:90:ab:27:69:db:df:a8:4f:e8:
         cf:a4:67:8e:f7:98:c3:96:82:88:37:61:5f:9d:80:4e:c8:7a:
         bf:17:5b:4b:0a:3f:a7:c0:c2:5c:9a:28:36:db:9f:1c:7f:ea:
         4c:c8:41:c1:4b:ea:a4:5c:0e:d2:7b:e9:db:71:d9:b8:05:ba:
         f3:26:54:c8:29:a9:c8:cd:40:2b:6b:93:94:b5:e4:44:0a:8b:
         95:e9:f0:b4:a4:a1:47:8f:bd:19:27:c6:d4:b7:d3:c6:1f:58:
         fc:a9:1c:9a:1c:21:14:1a:81:50:c1:f5:65:bf:16:d8:86:4a:
         f4:09:97:8c:cb:09:90:92:87:ee:6a:07:61:ee:12:89:6a:c3:
         78:e4:2b:ed:9a:15:18:67:74:0d:ec:50:da:f0:06:c2:bf:e5:
         1f:e4:79:00:3c:00:ee:0b:32:23:4f:bf:b8:0b:4e:e3:47:42:
         5a:0a:c8:b0:da:f4:88:3b:a0:fb:b4:b7:37:99:cd:b9:80:1f:
         b0:d9:a6:a0:03:5e:74:7b:e5:84:fe:24:dc:6b:4f:93:37:9a:
         96:8a:3b:26:46:4e:73:a3:7b:05:7b:da:72:8d:ee:62:b0:b9:
         54:f0:1c:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:53:15 2025 by rpki-client