This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/038bfc14-70d0-4845-80d9-ef20d84714c7.roa
File:                     038bfc14-70d0-4845-80d9-ef20d84714c7.roa (raw, json)
Hash identifier:          Dt2viVRh6rjMO8VZORxQAhxqWuo3r8FtYnT3iymrX9k=
Subject key identifier:   99:3F:F4:9F:A7:9D:8D:9A:B0:07:81:87:C0:CA:07:C9:48:41:6D:03
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3BCA8B4CB32428129E2250E121FD846D1B8592F6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/038bfc14-70d0-4845-80d9-ef20d84714c7.roa
Signing time:             Thu 11 Dec 2025 00:50:09 +0000
ROA not before:           Thu 11 Dec 2025 00:50:09 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f10f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ca:8b:4c:b3:24:28:12:9e:22:50:e1:21:fd:84:6d:1b:85:92:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 11 00:50:09 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=302d9dc71fbba39b3785c9f0c4beccbf7808c33b279b26458eb0e8cee6459994, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:3e:cf:c8:b3:32:32:89:56:7b:2b:3e:51:
                    49:04:f3:1e:54:c7:09:58:0d:cc:a7:be:cd:d3:b5:
                    88:8e:c4:ac:d4:f1:3a:04:31:58:cd:4e:a9:eb:8a:
                    e4:4a:05:6d:64:e5:1d:6f:f8:ec:94:bc:cf:31:fa:
                    e9:7c:b8:98:d4:b1:24:38:3e:45:58:16:44:7a:f7:
                    5e:72:aa:92:35:6d:ac:f5:4f:12:ca:61:2e:4f:5a:
                    1c:97:1d:64:79:fc:ad:d0:16:1b:2b:6d:e8:8b:ee:
                    4f:a6:a3:23:55:58:93:2d:0c:c4:2e:df:92:26:27:
                    06:fc:92:dd:37:40:af:ee:8e:cd:f6:42:2a:2c:14:
                    82:7f:09:38:47:00:9a:c9:f3:47:57:50:35:26:63:
                    ff:09:44:fd:3b:b5:df:5a:0c:69:f2:44:5e:55:58:
                    79:16:02:69:8f:0d:9e:c9:65:ed:92:dd:15:8a:a6:
                    ff:46:f2:8c:37:48:f3:6a:8a:f2:8e:94:fb:c9:06:
                    36:fc:ff:72:3c:da:32:c7:8e:bd:04:1e:40:6b:59:
                    f7:2d:a9:b0:b7:9b:4d:d8:fa:81:d5:39:ad:e1:d6:
                    f9:13:54:8b:f3:c8:8c:09:23:e4:2f:c8:de:20:7f:
                    da:9d:62:2c:54:59:1d:dc:d0:98:72:4e:ce:aa:ee:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3F:F4:9F:A7:9D:8D:9A:B0:07:81:87:C0:CA:07:C9:48:41:6D:03
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/038bfc14-70d0-4845-80d9-ef20d84714c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f10f::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:93:00:a0:08:6c:6b:7a:dd:f4:f5:1f:d4:cb:12:24:16:
         09:4b:03:4e:c3:bc:7d:46:84:15:d6:50:0c:d2:ef:c6:c3:ef:
         ae:e1:f1:e0:4c:8a:ba:d6:5b:9f:23:4b:55:54:9b:d4:a6:a2:
         33:b8:1f:cf:40:67:af:d8:68:f5:2a:38:54:89:d0:eb:37:fd:
         c1:11:45:c6:9b:48:f6:c1:d2:e4:8a:aa:4f:d8:e2:97:30:3b:
         17:fe:a1:ea:c3:55:c1:1e:26:8c:59:ce:f2:95:2e:bf:88:54:
         d4:2c:74:a6:e1:bc:11:c8:8e:6c:8b:41:76:74:ef:76:a4:bb:
         90:6f:97:83:9f:4f:65:13:d0:33:d5:e3:4f:a1:37:d4:c7:20:
         96:e5:69:34:c7:7f:cd:b9:7c:24:cc:73:bf:8d:fb:e1:d6:98:
         b9:28:7c:0d:26:4f:5f:ca:75:ba:26:07:b7:02:d6:96:4f:22:
         bb:ad:80:42:f0:a5:23:59:ef:da:46:9f:76:8a:8c:f4:83:74:
         1a:3f:ad:ea:13:c4:17:64:5c:30:f6:ec:2d:f6:c7:a3:17:fc:
         a3:94:a3:06:02:01:42:77:9a:eb:2a:94:31:ad:95:7c:a8:83:
         f1:2c:e6:01:63:5d:91:d7:bf:59:de:27:e7:6d:c5:e7:17:04:
         b5:3c:e1:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:31:51 2025 by rpki-client