This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa
File:                     5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa (raw, json)
Hash identifier:          G7aJ6XBz/6j3+UZWE35JRb3zTuSwFcF30pkbxRISIMU=
Subject key identifier:   23:B7:DC:CC:16:9E:2A:06:46:92:A8:6C:0A:32:C2:F9:E8:4B:E5:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F5D04283067DF9AE7718D30FF0538C8C5DD6CC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa
Signing time:             Sun 07 Dec 2025 00:10:05 +0000
ROA not before:           Sun 07 Dec 2025 00:10:05 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f21:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5d:04:28:30:67:df:9a:e7:71:8d:30:ff:05:38:c8:c5:dd:6c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:10:05 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=28e70d5dfbf38d5a193f69962955645a7aa9c70af3bc907c7aba561fd1728706, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:d1:e7:11:35:33:3e:92:cf:e2:fa:e2:71:
                    01:b5:df:68:dd:37:12:77:2c:2b:2d:fa:72:80:60:
                    50:cf:f1:82:cf:ae:90:6a:c3:cc:52:08:6d:5b:07:
                    89:d7:10:26:d7:41:53:ef:99:00:47:f6:bf:cd:b4:
                    96:7e:ae:d9:6c:a9:62:34:53:d5:03:d7:e2:a9:c3:
                    7a:4f:01:e0:0c:43:0a:96:ae:3f:e2:3f:ae:37:5e:
                    60:7d:d6:be:f3:af:37:ef:a6:9e:6b:22:8b:5f:49:
                    27:47:14:6b:3d:1d:d6:24:6a:5a:a1:f1:f8:6b:d6:
                    e7:22:51:d8:44:26:fa:6e:c7:89:23:be:28:90:de:
                    79:92:af:3d:f2:bf:d4:a6:47:5f:9f:a0:22:50:de:
                    10:5a:16:3a:c8:74:21:bc:8c:6f:a1:b1:5e:58:a2:
                    21:ff:79:b2:ff:3e:5a:7c:a5:58:c6:29:fb:85:84:
                    29:ca:91:20:56:6e:a0:25:79:81:26:82:70:1b:e0:
                    6a:df:b6:fe:99:64:50:5d:a6:0b:c4:12:d2:51:8b:
                    e3:f8:4d:18:ab:3d:2f:cb:9d:59:7e:3d:0d:dd:3f:
                    4c:15:4e:b4:ef:d6:40:ae:5c:4c:b3:28:2a:13:10:
                    28:42:b2:6a:38:8b:72:a3:55:02:0d:aa:45:eb:54:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B7:DC:CC:16:9E:2A:06:46:92:A8:6C:0A:32:C2:F9:E8:4B:E5:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f21:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:89:09:f2:5a:31:23:5b:b1:a6:ac:92:76:d7:fc:c7:4c:bc:
         87:8e:57:85:4a:44:90:92:2f:4e:a6:e3:3a:6e:a9:23:2d:19:
         a6:7d:b3:40:4e:13:9b:08:2c:5a:28:f4:08:04:83:39:17:24:
         da:61:49:8f:d0:38:67:c1:ad:bf:3f:5c:3b:55:0a:98:89:42:
         86:05:c1:59:69:61:72:94:c2:e7:89:34:b9:48:f4:9f:c5:d8:
         f1:c1:19:49:2e:48:ce:47:9f:12:63:15:2b:b0:93:15:88:2f:
         c8:39:b1:02:aa:67:2d:4e:6e:e6:2f:17:e9:6d:09:7d:f7:b4:
         b5:2c:5a:52:ce:68:59:ec:2a:ea:2b:fa:f0:35:b4:38:a7:2a:
         9b:42:2c:45:5d:ba:67:bb:c9:75:4b:d2:3f:da:66:5e:cb:f4:
         e1:41:68:fa:2b:0c:86:10:10:34:0c:15:dd:a9:9c:55:a9:c8:
         6c:1d:47:02:47:9f:11:39:ea:9d:90:5d:98:61:4b:5b:da:b9:
         91:2f:0f:31:24:8d:80:a3:fa:53:17:82:31:f4:ec:41:cc:19:
         fa:38:42:00:60:49:0d:09:d7:9a:5d:3c:53:27:f4:9f:b6:eb:
         00:86:42:37:b5:c3:a0:8e:0c:e5:ee:28:e8:fe:70:6e:7d:98:
         cf:1f:77:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:44:00 2025 by rpki-client