This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/734aa407-2656-4503-bd27-1f445170dc56.roa
File:                     734aa407-2656-4503-bd27-1f445170dc56.roa (raw, json)
Hash identifier:          SGlH12hnVKRQIlgf3dkkJ7JeqQXX0znkhXOmgX0eku0=
Subject key identifier:   6B:48:23:3B:9E:B6:EE:60:9B:68:55:BB:1C:89:03:EF:9C:50:7A:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07CAB2E1BDE900B19E23107FA1CD9701AFAB55B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/734aa407-2656-4503-bd27-1f445170dc56.roa
Signing time:             Sun 07 Dec 2025 00:10:52 +0000
ROA not before:           Sun 07 Dec 2025 00:10:52 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff0:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ca:b2:e1:bd:e9:00:b1:9e:23:10:7f:a1:cd:97:01:af:ab:55:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:10:52 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=50f9d1b0e879083d206538f431a00f21002138a5bbb009693d11c57bcce00ea6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:9d:36:7e:33:df:9c:ed:39:f6:fa:40:47:
                    a6:9d:a4:35:e7:a5:c7:3a:80:50:f8:00:a4:e8:85:
                    c8:54:f0:a7:be:11:ff:0c:7d:12:78:5d:a0:21:2b:
                    6f:21:80:7b:49:4c:24:25:26:f9:ea:18:06:9a:09:
                    ac:77:2f:02:67:f1:53:42:22:db:95:cd:0f:98:20:
                    49:c6:f2:54:da:dc:aa:51:02:39:22:4f:65:f1:34:
                    53:e8:1e:ac:47:66:77:cb:30:bc:ce:59:8f:88:ae:
                    a3:fe:9d:2d:1f:30:cf:ee:0a:92:01:e3:29:ca:73:
                    ec:88:8f:e0:c7:f9:95:52:90:b9:94:97:cc:7a:37:
                    df:29:15:02:91:ad:a9:52:3e:98:72:d9:00:44:76:
                    50:f6:f8:e0:f8:5e:bd:a3:c2:7b:4e:5f:c1:86:5b:
                    87:7a:45:c7:cb:81:1f:ce:41:5b:10:25:5a:3e:34:
                    84:b2:2e:ca:e0:7e:ac:5d:ee:57:49:4d:dc:c2:c4:
                    52:b1:12:65:86:11:c1:ec:12:da:61:bf:21:9f:07:
                    28:c4:de:69:2f:99:60:dc:9d:fe:3b:bb:a0:66:45:
                    8b:bf:41:53:b9:e6:35:84:86:7f:f2:6a:57:45:b0:
                    3f:0f:d1:5d:76:bb:4f:78:04:7f:43:c2:4b:2d:28:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:48:23:3B:9E:B6:EE:60:9B:68:55:BB:1C:89:03:EF:9C:50:7A:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/734aa407-2656-4503-bd27-1f445170dc56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff0:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         ab:86:4f:a8:cc:8c:1d:36:03:50:91:65:2d:0a:0e:e8:49:90:
         50:ec:96:37:c4:31:1a:d6:38:1b:10:a7:f8:e7:fb:28:89:dc:
         98:6a:20:03:47:9e:bb:ec:08:4c:7a:6f:d8:02:ec:57:e6:71:
         19:c3:08:73:c8:5f:63:73:c5:50:45:52:8b:e0:0c:3d:de:69:
         55:19:da:28:a8:d6:02:4a:6f:b1:82:75:68:d7:53:cd:c3:e7:
         57:70:7e:de:ce:80:b9:99:ae:b1:01:08:59:50:70:99:1b:36:
         50:aa:02:eb:04:72:01:57:62:26:e8:f8:77:37:2a:4d:dd:51:
         b7:1c:4a:d4:94:e8:7c:54:0a:40:3f:f9:b9:9a:89:50:4f:e8:
         5d:e3:ed:18:97:13:ed:38:9a:c1:e0:c1:37:ca:57:f3:07:bc:
         dd:5d:b3:6f:dd:8d:1c:ad:b7:e8:72:64:89:01:60:55:ee:a6:
         00:ed:a0:59:67:77:da:ae:aa:b8:9e:f5:26:7b:1c:e8:e7:a7:
         a6:23:cb:0a:bd:a7:e9:47:a0:ff:56:64:63:d3:f0:7d:79:92:
         20:23:2a:81:88:ab:45:9e:06:28:b1:5e:15:f5:8f:2f:16:ff:
         0c:16:e1:7c:e1:ad:50:b7:5f:b2:1c:f4:3d:f5:5a:b4:08:81:
         f5:e5:74:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 31 00:16:46 2025 by rpki-client