This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f1c6ae-c3ca-4326-b75a-fa2d7d8712d9.roa
File:                     62f1c6ae-c3ca-4326-b75a-fa2d7d8712d9.roa (raw, json)
Hash identifier:          6pnht+PbRcXYpM/rNBgnAlMSzgIV9oXGeNOnUEYQpeg=
Subject key identifier:   B3:5A:43:B7:F5:A6:80:EB:CF:7C:2E:6C:1A:E6:7B:E0:15:14:AD:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F8C1D1164CE1039494F94E4E5CE9ACC107221D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f1c6ae-c3ca-4326-b75a-fa2d7d8712d9.roa
Signing time:             Mon 08 Dec 2025 00:11:08 +0000
ROA not before:           Mon 08 Dec 2025 00:11:08 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff3:8040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8c:1d:11:64:ce:10:39:49:4f:94:e4:e5:ce:9a:cc:10:72:21:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:11:08 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=659fc2dddea6dc73194bcd54de4766ee5c9184cf076d35d3fff44dd0c1684502, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:cd:af:7a:de:e2:09:0e:3d:dc:91:57:ea:
                    d0:04:3a:e7:a4:a2:04:f9:64:e9:ac:ac:27:1f:f3:
                    a9:ba:96:67:88:0c:2a:9d:48:11:21:a4:e3:16:ae:
                    3a:62:87:1e:81:3f:31:96:e9:cd:df:89:c4:44:5d:
                    43:d6:39:72:95:0e:cf:2f:31:4f:72:3c:68:60:2f:
                    c5:b9:ed:0c:9b:8a:89:6b:6e:9d:1d:54:7b:88:cb:
                    db:22:51:2a:8c:c9:34:1f:d1:ca:a0:d2:3b:8b:fd:
                    86:4b:e5:5c:3e:7d:fb:37:33:66:9e:1f:0e:36:1a:
                    a5:e5:23:da:ea:ec:b4:91:99:c6:23:f3:e5:39:8e:
                    16:a9:c0:24:1d:5a:31:7c:3f:35:e4:90:7a:b8:e9:
                    44:c2:05:9c:18:ad:30:f0:0a:0c:ad:1c:56:07:1c:
                    79:00:d9:26:c5:67:8c:84:ad:45:08:b0:f5:9f:5f:
                    7d:e2:73:de:02:0c:95:e1:20:90:c1:14:54:d2:23:
                    23:a8:11:ec:65:a0:61:a1:c8:fd:6e:fc:14:6f:77:
                    ea:15:db:1f:ae:c0:b3:e9:89:ba:2d:76:c8:e3:9c:
                    af:dc:6c:67:9c:75:b8:8c:29:1a:62:d5:1c:27:d1:
                    95:a9:57:e0:c0:3b:00:8e:4b:18:52:ed:94:b3:8f:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5A:43:B7:F5:A6:80:EB:CF:7C:2E:6C:1A:E6:7B:E0:15:14:AD:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f1c6ae-c3ca-4326-b75a-fa2d7d8712d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8040::/46

    Signature Algorithm: sha256WithRSAEncryption
         58:06:83:ad:10:03:e5:ce:16:cf:c5:d6:3a:87:98:2e:6d:19:
         82:a5:cb:b7:eb:b6:ae:8d:1f:e0:3e:42:a1:50:6c:3e:6d:22:
         07:ed:49:de:4d:a6:aa:a4:1f:ae:54:77:d4:46:5c:21:40:9a:
         19:e0:4e:5b:1f:f4:1c:9c:82:55:0f:db:87:64:c9:4d:c4:92:
         14:71:da:bf:69:0d:d5:82:90:01:6d:38:b6:d9:46:ef:a7:77:
         a3:08:11:bf:af:b6:fc:35:e1:47:7e:80:ba:f0:a1:e2:ad:61:
         1c:86:d6:eb:d4:7b:f9:7a:c9:50:9c:36:3e:ef:9c:e8:16:64:
         dd:c1:f1:c4:69:05:49:39:84:a5:cd:d0:2d:a0:89:0a:9f:50:
         e5:82:2d:e3:6f:c9:9c:31:67:22:0a:b8:cf:69:26:3f:ae:d9:
         b6:b9:9d:67:30:14:ed:fa:3e:bc:44:6b:ba:f0:53:ca:e4:ba:
         14:a1:37:ad:77:2f:ee:ec:e3:b7:49:79:05:68:d0:08:b5:95:
         e0:a1:38:f6:7f:42:37:bb:6e:94:24:6a:da:1c:db:8c:12:bc:
         c7:1b:a2:b2:b7:44:b2:a5:a2:d9:66:23:46:09:7a:b8:2a:ff:
         d1:76:5a:7a:70:53:7e:66:95:8f:e8:6f:5e:fe:25:f2:83:6e:
         46:39:c5:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:16:23 2025 by rpki-client