This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/534a4496-0528-49b5-872a-bc697a3e148f.roa
File:                     534a4496-0528-49b5-872a-bc697a3e148f.roa (raw, json)
Hash identifier:          jJJgMf2Pu/09TjY83BPTpZ3dnwvlhppWfD+ZviZyqdY=
Subject key identifier:   92:17:43:00:CB:33:75:CF:87:D1:67:83:93:F3:D9:A6:5C:E4:52:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       770D673D18A460D7FA97FE72DDEE043950580363
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/534a4496-0528-49b5-872a-bc697a3e148f.roa
Signing time:             Sun 07 Dec 2025 01:00:04 +0000
ROA not before:           Sun 07 Dec 2025 01:00:04 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f19:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0d:67:3d:18:a4:60:d7:fa:97:fe:72:dd:ee:04:39:50:58:03:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:00:04 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=45e2a78c37977120b88c26e558a7e114af3583d81856a53ee43da8ca1156cf10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:0b:04:01:d4:bf:6e:4a:e2:27:d2:bc:0e:
                    b7:0c:81:c6:04:75:73:e6:da:40:51:6c:f9:21:a4:
                    db:25:2f:53:5d:9d:b4:ab:a4:96:fa:25:37:56:c7:
                    ce:a3:0e:fb:1a:b9:81:33:81:46:3e:28:d7:ea:d9:
                    cc:c9:52:1c:6b:fe:9d:fa:26:d6:e0:7e:5f:d2:77:
                    9d:76:bb:83:e2:15:a6:1f:e0:88:da:19:50:0e:e8:
                    cd:c6:ed:43:62:99:87:2f:5d:da:f7:6c:e6:dc:ba:
                    ce:49:e1:5e:f9:4c:dd:67:5a:0d:bb:fc:ef:1e:98:
                    bf:ae:7c:1d:cf:58:03:05:e6:48:a5:a2:34:38:f8:
                    c5:23:9a:79:35:0d:ec:9e:00:bc:45:7f:e2:e3:e5:
                    96:dc:69:75:13:37:fa:b7:e3:cb:9d:07:60:0d:09:
                    98:4b:d7:33:2c:c0:d7:04:3c:37:ce:35:fc:0a:ea:
                    0e:17:14:8b:6f:37:ed:68:c9:e8:8f:55:5e:83:63:
                    4d:7f:36:b9:79:ba:cb:c9:1e:ef:95:15:ba:bf:69:
                    fd:9a:5d:aa:fd:ea:ad:b2:00:4e:b3:78:94:e8:12:
                    1d:f5:18:5a:c1:26:c7:9f:9d:2b:8f:91:5c:80:2e:
                    ab:5b:d6:01:81:d2:0c:cb:0b:2b:39:59:cf:32:6f:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:17:43:00:CB:33:75:CF:87:D1:67:83:93:F3:D9:A6:5C:E4:52:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/534a4496-0528-49b5-872a-bc697a3e148f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         34:44:01:eb:9e:13:e4:d8:d7:6b:52:da:0d:9d:82:59:43:12:
         bd:ec:18:80:25:32:e6:1b:7d:99:11:82:47:48:a1:12:54:1b:
         9b:50:f5:3c:ff:46:86:c8:72:bc:c7:d5:1f:b2:07:4b:4a:31:
         9f:90:89:4a:37:30:52:f5:6c:00:58:a4:8e:33:30:b5:34:ff:
         7e:00:71:64:8f:69:93:5d:a7:2b:8d:0a:4f:f7:32:db:38:3a:
         11:0b:ea:f2:53:0a:2e:68:df:e1:16:01:27:b2:ae:d7:12:22:
         0e:ea:2d:7a:da:90:f6:7d:18:25:71:ab:1c:60:56:25:e3:9d:
         d1:04:57:bb:96:4e:c4:ae:27:1f:e0:25:23:31:2b:dc:14:40:
         85:9b:0c:59:b9:65:bf:86:18:52:8a:26:c8:98:69:a8:f7:e8:
         cf:d3:50:3e:f0:4e:c9:b9:bc:43:26:df:12:bb:e3:f0:e3:3d:
         6a:6b:5c:97:f7:84:4f:3a:76:a3:0f:e0:62:b3:e4:8e:f5:96:
         8a:79:7c:33:41:08:f9:a4:e6:89:4c:69:7d:37:9a:a5:4d:8b:
         b0:40:68:75:67:8d:eb:76:7c:45:af:c1:84:d6:7d:1d:b6:14:
         e0:ed:61:4e:6d:ca:6d:b0:f2:94:15:6a:51:b4:c3:04:dd:31:
         52:83:26:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:16:33 2025 by rpki-client