This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95b69fbb-e14d-4a29-bd41-4e50e9857860.roa
File:                     95b69fbb-e14d-4a29-bd41-4e50e9857860.roa (raw, json)
Hash identifier:          1CSn9jiwaSKlOsBfQ6ZpH/aMRDEZQRLab5XqqKgH0oM=
Subject key identifier:   05:8E:32:81:ED:ED:BE:CB:53:FE:0F:38:CE:71:34:B4:D8:3E:78:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10591960DB327DA620BB91375DF97540F795D6E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95b69fbb-e14d-4a29-bd41-4e50e9857860.roa
Signing time:             Sun 07 Dec 2025 00:20:06 +0000
ROA not before:           Sun 07 Dec 2025 00:20:06 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f15:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:59:19:60:db:32:7d:a6:20:bb:91:37:5d:f9:75:40:f7:95:d6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:20:06 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=bbd2fec7e64b7c9d65aad9f02df47a43c789c9745873aa6c5a461f14f9377362, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:7a:fb:b3:69:bb:0f:09:3d:c3:7f:57:19:
                    3f:dd:43:cb:3c:af:42:f4:83:88:b3:90:7e:63:1a:
                    56:d7:1d:74:b8:76:b7:f7:2c:b7:24:6d:69:80:d5:
                    2d:85:35:dc:5a:34:27:96:ce:6c:da:e9:af:f6:7d:
                    56:a7:c9:40:1c:d9:53:43:41:d5:02:72:9a:33:dc:
                    e8:4d:cd:ff:88:82:63:a7:64:34:b0:d6:78:97:bd:
                    e2:33:3d:78:35:17:d9:ff:83:3f:af:7e:b2:9e:a9:
                    4c:86:49:af:6b:29:82:05:8b:11:b8:2d:6e:21:fc:
                    f4:6b:2a:f9:03:28:9f:3e:5b:1e:e2:78:2d:58:2d:
                    de:82:ee:89:1e:47:ae:b6:0a:d5:5f:f1:78:a5:5d:
                    b9:ee:7c:bb:74:15:1d:e4:e2:59:50:ac:87:aa:dd:
                    d0:6b:a3:f1:01:8e:8b:b5:fb:a9:4e:84:d6:fd:6a:
                    ca:9d:8f:55:99:eb:1b:26:34:2c:46:e0:b8:1d:7e:
                    d2:2a:13:1d:ab:c7:e3:52:b9:2d:ab:ff:b2:25:f2:
                    2d:c9:83:b8:d9:e1:fa:44:18:44:20:97:07:0e:64:
                    bc:7c:ed:eb:c2:c6:bd:56:ae:e1:dc:8c:9e:4f:f0:
                    1f:82:6e:d7:62:ad:d1:60:6e:ad:90:8b:7d:9c:93:
                    3a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8E:32:81:ED:ED:BE:CB:53:FE:0F:38:CE:71:34:B4:D8:3E:78:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95b69fbb-e14d-4a29-bd41-4e50e9857860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:16:a3:fd:c5:0d:a3:31:20:0e:5c:77:7a:bc:93:86:6b:2d:
         3a:f4:3d:d7:ae:7d:78:51:0e:6f:14:5d:ad:4a:88:fa:c3:7a:
         62:53:e9:af:9d:37:80:c3:b6:7d:73:8a:a7:cc:12:d8:90:0e:
         9b:5b:bf:41:48:26:50:09:1f:14:29:06:28:b1:63:96:63:b3:
         a5:22:52:ef:53:a2:48:3e:6f:a4:58:56:22:26:1c:85:d5:1b:
         0e:4f:b4:c9:93:e7:e6:d2:63:4d:11:df:b2:ae:6b:af:af:39:
         a4:4f:c0:b4:c8:02:8d:f6:8c:36:8c:44:e3:ea:69:cc:83:75:
         c4:31:0f:63:29:91:af:1a:b3:8c:86:06:e2:9d:bf:93:ba:dc:
         92:10:ae:5a:12:77:0a:0a:e6:34:ed:ac:08:ef:05:6b:7d:e0:
         c2:87:bf:39:7a:2e:a6:00:4f:93:a1:ea:28:b6:3c:a9:77:a2:
         5f:db:66:fa:cf:39:97:18:f7:3d:f1:c9:77:7f:d8:41:f4:a1:
         be:50:42:03:87:a3:ee:f8:7c:32:77:44:0a:c6:26:21:df:be:
         7b:50:cf:f2:31:35:b8:d6:14:95:34:00:82:12:51:7a:9a:1a:
         d5:db:ee:69:f8:be:46:f2:2d:fc:25:13:cf:ca:76:15:3b:2b:
         eb:c2:76:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:32:10 2025 by rpki-client