This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69f13de-e073-4fa4-b4d4-2cbc556331bb.roa
File:                     d69f13de-e073-4fa4-b4d4-2cbc556331bb.roa (raw, json)
Hash identifier:          5gzyc0jAkT6Tl5m/SF62mFa57ndqCwN+zJ4l2k5hzCU=
Subject key identifier:   4D:31:2E:4A:17:5A:3B:5D:4A:54:FA:01:47:ED:E4:4E:6A:F8:0E:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79AC9AAF219243A1E0592FE9ED53A4E2646CD84B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69f13de-e073-4fa4-b4d4-2cbc556331bb.roa
Signing time:             Sun 07 Dec 2025 01:00:05 +0000
ROA not before:           Sun 07 Dec 2025 01:00:05 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f15:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ac:9a:af:21:92:43:a1:e0:59:2f:e9:ed:53:a4:e2:64:6c:d8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:00:05 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=3c7cf57c44dd5fc92d2a4d7864d290e319d78c320bffde58c97b5ccb4dedbc63, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:e7:45:5a:88:c1:4f:40:c7:9c:77:f4:4a:
                    f9:e3:b7:7c:14:04:3d:87:66:31:f5:ab:e3:78:39:
                    9f:8b:af:99:38:50:58:5d:c7:52:03:13:ba:33:d7:
                    bf:7a:02:c9:88:91:1e:7e:c6:a7:76:25:99:0e:13:
                    22:2d:e7:9b:26:32:67:d1:a1:6f:0b:a6:47:5e:d0:
                    df:42:53:5f:aa:a5:57:b5:44:bb:71:fb:a5:1b:6e:
                    33:33:f3:93:9d:5a:1b:33:3f:d7:ab:a1:25:6c:2a:
                    15:2c:93:e8:03:5d:bd:33:ab:cb:6d:a1:58:19:37:
                    64:d1:c2:6f:7a:d3:7e:b6:1b:a6:2b:c4:5e:f2:20:
                    f3:ef:68:9f:4e:e6:26:4c:e9:be:e1:f0:52:61:a2:
                    c4:f4:27:c8:48:be:1a:c4:38:79:3f:b3:31:a5:35:
                    5d:2e:3f:97:65:c2:25:52:62:35:fe:fc:a7:ae:43:
                    54:4f:aa:b4:ab:64:25:2c:aa:73:a3:9e:1c:89:4a:
                    2a:ee:8b:28:2c:7f:77:16:6b:f3:c7:c5:23:28:ff:
                    f2:58:1e:90:87:11:6b:2b:46:9f:5c:43:2c:51:af:
                    14:8f:fe:13:6d:4b:b0:02:a6:c3:c7:c7:1e:50:e2:
                    b0:9b:2e:86:eb:41:6d:66:a1:45:a0:2b:97:39:83:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:31:2E:4A:17:5A:3B:5D:4A:54:FA:01:47:ED:E4:4E:6A:F8:0E:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69f13de-e073-4fa4-b4d4-2cbc556331bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:f5:4a:3d:c2:5a:b9:50:d6:46:25:ed:55:8f:f7:79:4e:
         20:8d:8e:89:26:67:ad:86:f6:e2:d9:9f:1f:9e:54:6a:64:fe:
         e0:23:b1:96:58:3f:93:d6:95:f4:f3:ce:c0:28:ad:76:d2:ae:
         4c:e0:ca:84:bf:6a:84:81:6f:e2:ad:2e:cf:91:ff:b0:6f:ea:
         40:88:44:0e:09:64:b6:39:61:4e:c6:c1:af:cf:0b:c4:0e:d5:
         91:85:33:56:88:31:fb:6b:4f:0b:26:cc:54:d3:b0:9c:27:d6:
         80:8c:7f:ae:a9:58:9f:9f:bb:5a:4c:31:2d:cc:95:3b:9c:61:
         9a:f6:40:f4:84:ef:6e:a6:f2:97:7f:e1:88:4a:da:c4:87:bc:
         07:b9:ab:a9:ed:89:b4:5a:d4:f1:3a:97:08:6d:70:16:90:e5:
         9c:33:ef:f7:14:46:6c:1a:b1:41:56:1b:36:08:f8:05:58:1f:
         5b:39:8b:a2:9e:09:a8:1f:ab:0f:e2:4b:63:70:26:15:64:84:
         da:83:7a:db:cf:39:df:2e:cf:d0:0c:04:37:ce:a0:ce:85:74:
         0e:18:a2:81:cc:ac:96:b7:66:2b:6e:d1:65:df:d9:31:10:bd:
         d3:fa:6a:a7:d1:51:73:bc:8e:f2:e1:50:38:83:ee:35:ba:f3:
         9d:16:cd:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:58:03 2025 by rpki-client