This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa
File:                     31263499-132a-4222-9382-b584a30ccae1.roa (raw, json)
Hash identifier:          UJbYW7SW4Wj97CpS8vsPFzxbv5XN+VQeMqaVxlV1g8I=
Subject key identifier:   1A:6D:F2:EB:61:04:1D:3B:69:67:FA:07:20:DB:61:BB:23:CD:E3:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13DB7E41698AAA1D2559FA35C01F7BABEFC6E9C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa
Signing time:             Sun 07 Dec 2025 00:20:54 +0000
ROA not before:           Sun 07 Dec 2025 00:20:54 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f28::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:db:7e:41:69:8a:aa:1d:25:59:fa:35:c0:1f:7b:ab:ef:c6:e9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:20:54 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=ce097b74d6501bdf4f041d49dd2a17b04be80c56c1b93784d87375708c563886, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:08:90:ae:38:0e:58:28:f6:e3:16:cf:e3:
                    ad:9b:0b:13:4c:46:38:4c:d3:21:c1:41:c5:98:16:
                    7e:88:97:06:0c:a2:dc:5e:39:ee:5b:1d:e9:c0:dc:
                    fe:ca:9c:bc:96:e9:7f:15:c9:4f:10:d4:4f:8a:d9:
                    47:5d:f1:5a:3d:ba:eb:3a:d8:8a:3d:aa:f9:a8:8a:
                    1b:7c:4f:48:27:15:28:45:78:13:39:0f:2c:29:6d:
                    9c:3c:65:41:a3:a2:46:f2:1e:64:cf:43:44:60:b7:
                    49:86:e6:68:8f:0b:70:70:24:1f:9b:d6:49:1c:0d:
                    6c:63:0f:30:8a:ef:1f:94:66:c4:33:06:ca:1c:f2:
                    71:81:dd:27:89:d9:22:2c:66:e8:9f:ca:39:44:60:
                    eb:d4:8d:89:a8:b3:f4:4b:1c:cf:f3:f6:8f:53:b6:
                    b9:29:4e:0e:81:b6:8e:62:4e:03:9e:b2:31:48:ad:
                    fa:8e:63:47:d6:09:93:8a:48:b4:82:82:4c:a4:5b:
                    f6:c0:9f:65:fa:30:a2:d5:94:e0:e9:84:60:dc:0d:
                    5a:e9:bb:a8:90:43:f3:bc:24:74:34:f3:2d:be:7c:
                    96:31:9d:94:94:01:f2:e2:68:e4:b0:ff:9d:5f:3f:
                    96:ec:2a:10:b3:e5:51:53:9e:81:5c:3a:93:a8:a6:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6D:F2:EB:61:04:1D:3B:69:67:FA:07:20:DB:61:BB:23:CD:E3:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f28::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:42:96:a3:4f:a2:dc:05:56:e9:b0:26:5f:e3:a7:37:10:b8:
         54:de:2a:dd:b2:e2:a6:7c:6c:ff:a3:67:b3:d2:7b:54:40:7f:
         6a:6f:62:0f:00:0e:ad:55:9d:bd:a2:c7:34:75:4a:f1:99:2b:
         54:d6:26:58:42:86:92:09:d3:d0:a0:e3:de:cc:ae:26:30:ad:
         2e:bd:bb:6f:05:88:3c:31:e2:3d:b1:44:f0:f1:35:67:53:05:
         25:bd:59:58:a3:fb:7d:c6:d1:ef:e2:cc:f3:c7:e8:ff:a5:fa:
         f0:35:8f:38:48:98:46:49:47:ef:c2:c5:43:ec:4a:a2:d8:1b:
         c6:c0:2f:d8:41:b8:69:e6:18:64:9a:0b:fc:22:da:1a:fd:66:
         5c:fb:29:2a:c2:d0:1f:5e:33:99:d8:d1:81:ed:b7:a8:31:4c:
         3e:68:57:c2:e4:a1:c3:93:9b:83:dc:3a:9e:b0:80:98:13:41:
         fa:f1:8e:ab:67:f2:65:b2:25:b0:7c:0c:59:51:7d:ea:c8:57:
         07:29:34:23:48:b4:fd:f7:2e:06:66:cf:2d:26:24:44:06:8a:
         72:70:e7:0c:6e:8d:ca:0a:af:bb:f9:c5:96:ed:9e:d5:7c:3b:
         da:d4:d5:a8:b8:cb:49:7b:cd:94:e4:1a:47:d4:8a:cc:00:dd:
         c5:1f:5b:13
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUE9t+QWmKqh0lWfo1wB97q+/G6cUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA3MDAyMDU0WhcNMjYwMzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZTA5N2I3NGQ2NTAxYmRmNGYwNDFkNDlkZDJhMTdiMDRi
ZTgwYzU2YzFiOTM3ODRkODczNzU3MDhjNTYzODg2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqzwiQrjgOWCj24xbP462bCxNMRjhM0yHBQcWYFn6IlwYM
otxeOe5bHenA3P7KnLyW6X8VyU8Q1E+K2Udd8Vo9uus62Io9qvmoiht8T0gnFShF
eBM5DywpbZw8ZUGjokbyHmTPQ0Rgt0mG5miPC3BwJB+b1kkcDWxjDzCK7x+UZsQz
Bsoc8nGB3SeJ2SIsZuifyjlEYOvUjYmos/RLHM/z9o9TtrkpTg6Bto5iTgOesjFI
rfqOY0fWCZOKSLSCgkykW/bAn2X6MKLVlODphGDcDVrpu6iQQ/O8JHQ08y2+fJYx
nZSUAfLiaOSw/51fP5bsKhCz5VFTnoFcOpOoprQXAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUGm3y62EEHTtpZ/oHINthuyPN43cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMxMjYzNDk5LTEzMmEtNDIyMi05MzgyLWI1ODRhMzBjY2FlMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8oADANBgkqhkiG9w0BAQsFAAOCAQEAhUKWo0+i3AVW6bAmX+OnNxC4
VN4q3bLipnxs/6Nns9J7VEB/am9iDwAOrVWdvaLHNHVK8ZkrVNYmWEKGkgnT0KDj
3syuJjCtLr27bwWIPDHiPbFE8PE1Z1MFJb1ZWKP7fcbR7+LM88fo/6X68DWPOEiY
RklH78LFQ+xKotgbxsAv2EG4aeYYZJoL/CLaGv1mXPspKsLQH14zmdjRge23qDFM
PmhXwuShw5Obg9w6nrCAmBNB+vGOq2fyZbIlsHwMWVF96shXByk0I0i0/fcuBmbP
LSYkRAaKcnDnDG6Nygqvu/nFlu2e1Xw72tTVqLjLSXvNlOQaR9SKzADdxR9bEw==
-----END CERTIFICATE-----
Generated at Thu Jan 1 14:24:59 2026 by rpki-client