This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
File:                     7109eae2-0e21-4e85-9b88-63b1777e3c13.roa (raw, json)
Hash identifier:          S0/temoPgRaAIWiGYAkWvG8hkG59Mbunuvn7HFko45E=
Subject key identifier:   E1:77:B1:0B:0A:55:9F:07:3B:2A:F5:68:76:0B:F8:91:D8:DE:99:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C4376C69D4C33FF4DD65BD2B11CACEFDE80B2A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
Signing time:             Sun 07 Dec 2025 00:30:14 +0000
ROA not before:           Sun 07 Dec 2025 00:30:14 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f70:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:43:76:c6:9d:4c:33:ff:4d:d6:5b:d2:b1:1c:ac:ef:de:80:b2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:30:14 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=23a3579151b17cde62c2fb6c9f066986f970fb64c1d013df6fdc281cd90494fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:bf:42:92:e0:2b:b0:f1:ba:ad:f8:4d:44:
                    29:ef:fd:15:63:0c:d2:57:65:1b:32:31:85:c7:bb:
                    ab:d0:2f:15:36:9c:45:d9:99:76:3e:a1:dc:d9:12:
                    dd:5f:02:4a:f2:20:cd:94:77:d6:27:d9:46:a6:97:
                    61:bd:c5:cc:05:07:64:21:2c:80:34:a0:0e:dc:8c:
                    1f:c7:ea:43:5b:c9:ea:39:b3:51:fc:a1:20:f2:a7:
                    b0:3a:98:68:4e:9f:40:af:e8:01:43:b0:be:c6:b5:
                    94:53:76:2b:c4:2f:c0:25:4a:95:c0:39:db:49:d5:
                    25:d0:6e:19:32:dd:c2:eb:83:3a:14:32:3b:a9:c1:
                    96:fc:e7:dd:25:f8:ad:25:f4:d6:9a:c1:37:0f:a8:
                    e0:94:39:5b:b1:14:d7:86:92:89:c5:41:1d:fa:1e:
                    47:e9:ce:89:98:80:82:70:45:21:e5:f1:d8:2f:94:
                    16:c6:a0:5e:43:35:69:7e:a2:18:03:52:08:d4:6e:
                    98:0a:d2:b6:4d:7a:23:3d:6b:c1:28:63:22:f0:1e:
                    cf:bb:a9:51:8d:4c:6a:24:b4:3d:fb:ef:13:d4:a9:
                    4b:0c:41:13:b6:b6:9b:b7:d1:33:eb:24:fb:98:4c:
                    9d:c4:f4:06:17:8d:5b:bf:77:44:af:23:a0:c0:ca:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:77:B1:0B:0A:55:9F:07:3B:2A:F5:68:76:0B:F8:91:D8:DE:99:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:fd:c5:29:01:ee:8a:07:b8:62:f0:58:13:73:2e:ad:0f:
         80:f5:25:ba:87:31:5e:17:16:24:35:f3:d3:bc:60:f4:95:d3:
         6a:c2:7b:33:83:99:5d:c4:db:b3:84:14:75:8b:37:44:23:b7:
         e3:fb:b6:c1:48:49:3a:2c:88:b1:43:6b:a3:d4:03:43:63:d3:
         7f:5e:c5:52:4b:5e:18:f8:00:ad:f9:d6:0d:90:78:ef:e8:50:
         5a:aa:9f:9d:20:ac:cb:c3:37:63:54:33:7c:57:f6:e6:9a:0c:
         7d:e3:b4:22:c9:f7:94:b5:d0:5b:5e:29:62:d6:60:64:3b:a3:
         a7:98:13:57:c7:ee:31:5e:63:2f:5a:e3:eb:70:89:89:c6:36:
         60:77:52:18:1a:5c:72:c0:05:80:86:74:af:9b:ab:fd:76:28:
         81:db:26:50:44:49:47:5f:ef:58:fa:0b:a5:98:12:f4:76:1f:
         f7:a0:70:2c:b2:a1:67:86:6f:18:37:88:3f:da:30:d7:70:fa:
         45:46:68:55:1f:7c:8a:9a:fb:cd:89:a7:a6:8c:41:ca:c0:0f:
         f9:1a:1e:4e:45:c2:fe:e9:7b:60:c3:b5:31:9a:df:65:e3:66:
         b3:d9:1d:cb:67:3c:13:3f:38:56:a6:31:51:9a:c5:07:f9:0e:
         74:89:c0:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:31:51 2025 by rpki-client