This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa
File:                     3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa (raw, json)
Hash identifier:          QLqPk9vX4En1BNTGsA/5BFzJ6A+VPeDKVX+O3JI045g=
Subject key identifier:   14:E8:23:9D:BE:EA:6C:87:57:76:7D:25:EA:1B:F8:51:76:E9:57:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       045BE2BF6018C89A96712FC16E2D0365FCC0A838
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa
Signing time:             Sun 07 Dec 2025 00:41:15 +0000
ROA not before:           Sun 07 Dec 2025 00:41:15 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5b:e2:bf:60:18:c8:9a:96:71:2f:c1:6e:2d:03:65:fc:c0:a8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:41:15 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=0045e8aa8639f88a8ab29ad14a8e635d059080e8f68a9d4b0c03c61d7c24becb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:21:10:91:19:7e:7c:9d:7d:c2:6d:88:b0:
                    64:dc:25:c3:4f:ec:fe:68:88:34:d7:08:4b:43:ad:
                    5f:dc:49:bc:37:12:4e:a4:73:2e:e9:cb:b1:6c:45:
                    f5:26:b1:7b:38:58:3d:e6:f7:c0:08:cb:f3:83:04:
                    21:1b:b2:91:32:84:b7:73:bd:8b:75:40:90:6f:4f:
                    08:f4:86:28:f1:13:65:35:8a:6f:7c:15:ce:d7:99:
                    3c:d2:e3:23:35:29:97:01:96:9e:77:de:61:c1:da:
                    49:e5:68:88:3d:79:4d:6f:b8:25:5a:d5:1d:93:22:
                    42:10:29:82:06:f1:58:ca:9e:c2:be:9f:2b:63:92:
                    f2:73:36:ae:c9:81:c7:d0:f3:3d:9a:d1:aa:d8:93:
                    07:f0:f5:ce:32:2f:45:f1:eb:bf:d2:db:bf:a6:bd:
                    63:81:26:9f:9b:1f:26:e6:36:98:d2:93:1a:8d:03:
                    e3:b2:c7:37:41:71:a4:e5:76:68:3e:08:f9:10:7c:
                    ed:4c:68:ca:2b:62:60:ea:c3:5b:2e:1e:23:56:23:
                    e6:cc:f2:9c:96:9e:6a:ab:2c:e0:67:04:8d:d9:d2:
                    d7:54:59:da:49:5c:cd:75:28:1a:87:00:68:ed:75:
                    d0:33:90:05:82:a0:40:43:f9:0b:fd:92:08:2c:1d:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E8:23:9D:BE:EA:6C:87:57:76:7D:25:EA:1B:F8:51:76:E9:57:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:cb:44:95:72:6f:f7:2d:8f:b0:4b:6e:da:7b:d1:69:dc:ae:
         36:7e:db:8a:d2:8a:7a:3f:5f:bd:51:66:16:83:18:d8:08:51:
         d8:63:01:3d:a2:c7:dd:0f:97:6b:ca:a1:fd:4b:11:82:52:88:
         5a:d2:1b:db:f9:69:44:4d:28:19:fc:be:15:9b:3f:a2:75:8b:
         81:7b:ee:53:2d:a6:8d:fd:94:a4:75:01:60:ae:f8:c5:97:87:
         75:f6:81:4e:c3:08:7d:92:2b:62:e8:46:71:df:6b:73:f9:86:
         ed:b9:9f:40:77:c7:d9:e1:f0:63:8c:2c:18:54:28:e1:83:18:
         98:2e:f3:0c:36:e7:86:e3:87:0f:51:ad:55:98:c6:e5:b5:3b:
         48:00:7b:10:7e:da:92:11:83:2a:89:ae:d8:61:05:58:2d:57:
         89:72:9c:eb:4e:f6:36:bd:3a:16:4f:56:d6:ed:54:d2:d3:97:
         79:43:3f:c2:21:21:05:db:07:ef:86:9a:76:fc:98:be:f9:7c:
         f2:8f:2e:e6:cf:e8:1d:3f:4c:7f:63:cc:88:a6:31:3a:33:fe:
         f1:12:2f:6c:76:ca:19:3b:3f:ae:d1:65:6d:6c:c5:32:ae:cb:
         65:06:07:55:2d:2b:f6:a6:f9:d1:6c:70:37:37:ae:7b:c7:d8:
         b7:3b:20:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:22:05 2025 by rpki-client