This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60b87d32-0a4f-4766-9763-0e165ad166bb.roa
File:                     60b87d32-0a4f-4766-9763-0e165ad166bb.roa (raw, json)
Hash identifier:          cMh+3+safF9gOtNnNK4HpVFQozBQSO3iHRoln/bJ9JY=
Subject key identifier:   3B:FB:96:7F:B4:DF:56:0C:89:AC:A5:55:D5:FA:7E:8E:38:0B:F5:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E391289EFDB9B27D5DAAF5DF29B2D6E95F176CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60b87d32-0a4f-4766-9763-0e165ad166bb.roa
Signing time:             Mon 08 Dec 2025 00:10:42 +0000
ROA not before:           Mon 08 Dec 2025 00:10:42 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff3:8060::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:39:12:89:ef:db:9b:27:d5:da:af:5d:f2:9b:2d:6e:95:f1:76:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:10:42 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=d6834b8f92835f37e3aae9ab2135cea4bd62d8f1c2b11655e5c0bd47443ac524, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:c0:56:68:f3:e0:3f:40:05:19:5d:40:a5:
                    08:28:45:7d:02:5c:7b:ca:80:a7:40:87:5b:e2:37:
                    a0:bb:1c:94:b9:4b:50:71:a5:fb:67:9f:c2:83:4f:
                    d1:a7:7d:37:88:9b:c7:7a:35:d2:d9:9b:39:ba:b7:
                    1a:4b:ca:9d:3b:78:46:f0:ec:cb:d7:89:f4:57:61:
                    39:50:8c:40:07:6c:5d:7d:9f:0e:83:da:82:dd:40:
                    e4:f8:ac:a1:e4:0c:cd:6c:1b:ba:df:0f:4c:a9:09:
                    55:a6:2c:9d:b6:ca:0c:b1:74:47:66:54:da:8f:57:
                    c4:c9:ae:37:b2:f2:1d:e9:ef:b3:d7:b4:5f:85:4a:
                    b0:75:53:b9:2b:be:ea:34:ee:b5:5d:21:55:a6:8f:
                    8d:65:8f:62:69:ff:f9:52:96:b3:a4:7e:03:2d:82:
                    85:da:c6:2f:1c:da:49:09:b3:42:08:61:7e:1f:67:
                    54:e6:e0:86:98:3b:e7:e7:41:ff:89:16:af:67:54:
                    fc:4d:4c:77:e8:be:33:5a:54:c5:80:6a:fc:74:dc:
                    12:eb:cf:b4:ca:50:3e:ea:f9:b4:10:13:99:22:d5:
                    e8:c7:0b:6b:99:55:84:6e:2c:c4:7f:8c:d1:ac:bb:
                    80:9c:25:be:dc:ca:25:72:e5:3e:c5:d0:f6:e0:40:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FB:96:7F:B4:DF:56:0C:89:AC:A5:55:D5:FA:7E:8E:38:0B:F5:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60b87d32-0a4f-4766-9763-0e165ad166bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8060::/46

    Signature Algorithm: sha256WithRSAEncryption
         25:08:c6:ea:2f:1e:18:dd:32:55:28:42:2f:83:df:4b:6c:4d:
         2a:12:e9:c0:6c:54:d7:32:79:11:86:8f:4a:a0:64:77:4a:de:
         1a:f2:d4:71:20:7e:68:64:59:8b:f2:c8:0a:a4:43:68:e0:20:
         2f:76:96:03:41:9f:92:e1:08:6f:ce:af:16:57:a9:0c:70:cf:
         f8:cd:f5:c8:11:f4:4b:78:7d:6f:98:c3:93:e5:db:73:f4:51:
         c6:21:9f:92:9d:7b:dc:31:20:19:c2:d6:cf:19:02:dd:bf:54:
         e1:e6:88:75:69:fa:fe:d9:1f:10:f6:da:2d:d9:2f:be:af:b0:
         d7:e5:0b:10:ef:e1:ca:0c:d5:9c:60:28:ec:f3:b4:6a:ad:2d:
         54:b1:fc:4c:89:bb:c1:cc:4c:56:0e:9c:b3:2a:41:cf:99:32:
         ea:a0:6f:72:fa:43:0b:63:a2:2d:b4:ca:dd:d5:9b:b9:54:59:
         85:0c:a3:ab:37:df:d4:2d:59:a8:be:5e:c1:6f:2a:29:19:cd:
         c1:1d:5d:8c:06:c9:0e:12:36:cd:6c:e8:13:30:64:47:c4:97:
         8a:b3:01:aa:0a:cc:af:08:e5:4b:30:66:d4:83:66:fd:ff:0c:
         70:54:a3:23:aa:b6:91:6a:b3:09:a8:08:2f:10:ae:24:52:5d:
         fe:31:ab:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:30:22 2025 by rpki-client