This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa
File:                     13d95532-571e-4655-86b3-383b815023ba.roa (raw, json)
Hash identifier:          C5PSGiTac2xe4wMwcorVSihWwNGOP93JrxdfS6XA4pw=
Subject key identifier:   79:22:20:7F:BF:A0:6A:79:07:68:CD:00:2D:67:F0:09:6E:11:79:F1
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1B721FC3D00D84AD89E20581A2E83054D1BC0709
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa
Signing time:             Wed 10 Dec 2025 04:50:07 +0000
ROA not before:           Wed 10 Dec 2025 04:50:07 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:72:1f:c3:d0:0d:84:ad:89:e2:05:81:a2:e8:30:54:d1:bc:07:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 04:50:07 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=d7244647993dec416f1b4add76655defaf25742525f1db02d0fa398f7996c8de, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:19:0f:73:41:8f:14:f7:5f:bf:95:1d:52:
                    18:f4:f8:51:12:9a:e5:4f:23:da:99:2c:7c:ce:e2:
                    1b:f7:3c:22:f4:53:25:d5:24:ba:95:39:b0:17:b2:
                    09:68:fd:22:ba:47:59:6c:65:97:22:be:a2:ae:00:
                    c8:2a:82:d6:a4:43:97:c5:02:3d:44:86:c1:7c:22:
                    1f:27:1a:d8:3a:4f:a5:39:54:f8:54:73:4c:24:a6:
                    60:4c:9b:2c:8f:f7:5b:be:b9:e1:ad:45:8a:e1:0a:
                    37:c7:c5:c4:94:02:a5:01:78:2e:e1:52:7a:78:f3:
                    ad:68:8f:26:8c:75:b3:b9:f5:90:c2:d1:5f:4b:5d:
                    e5:1d:87:73:6f:dc:ca:c0:4e:92:f1:25:34:1b:b0:
                    66:26:d6:b2:74:55:c8:b6:4e:32:a9:40:06:f0:ea:
                    ea:52:23:51:bf:e7:f7:4c:dc:61:65:aa:03:6f:c9:
                    0b:d2:b3:03:50:32:08:8a:a1:07:3b:3a:4c:a2:50:
                    34:32:41:33:a3:b0:17:75:f6:94:42:5f:e5:82:7c:
                    8d:16:92:59:35:0c:77:b2:2e:b0:db:8a:64:ec:4c:
                    34:09:76:9f:47:90:0b:f8:ad:22:81:b1:1f:07:97:
                    b6:c8:19:1c:69:42:62:75:dd:9a:20:84:3c:a2:53:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:22:20:7F:BF:A0:6A:79:07:68:CD:00:2D:67:F0:09:6E:11:79:F1
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e900::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:00:23:f0:72:ee:2d:6f:07:ed:b9:ff:04:17:ec:45:04:
         0b:60:b0:58:10:90:f0:ec:4a:c3:97:e6:64:d9:f7:ad:49:4f:
         85:e3:b3:11:4e:97:54:aa:44:d4:8b:75:a5:db:d3:35:90:8a:
         47:81:24:b4:37:16:46:25:34:ee:84:c4:84:e2:b8:8c:21:32:
         11:18:56:11:2e:77:7b:ac:f5:39:c6:7f:3e:c0:40:2a:17:69:
         58:1a:26:c7:0d:43:97:7a:4c:9b:2d:c9:9a:67:70:ad:94:0b:
         72:08:ec:d2:79:87:28:0a:1a:c2:9c:81:15:e3:f2:e8:eb:87:
         80:11:e0:58:5f:d5:08:14:08:0f:97:35:63:73:a1:92:cb:26:
         fb:36:a2:57:a3:1f:1e:e8:63:d9:9e:4a:d6:13:c1:f3:15:e3:
         f4:39:01:99:ec:3c:9c:07:66:ca:0a:a1:89:6e:d0:a6:e6:80:
         c0:04:a8:32:d3:12:a6:59:94:05:65:b2:3d:36:2b:98:3c:af:
         46:2c:92:60:03:41:5c:d6:ee:27:d3:0d:d4:52:d6:51:58:e7:
         8e:91:59:a6:a3:50:4c:6a:1f:1a:63:ae:15:31:43:f1:49:02:
         8e:b1:5c:4e:48:76:1d:2d:6b:55:b3:16:01:bf:2f:98:83:a1:
         58:f6:4c:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:04:52 2025 by rpki-client