This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa
File:                     1713f755-e887-41fa-83fe-8bab1dc14311.roa (raw, json)
Hash identifier:          ePqi57zT+bfzAwm7GYmTdbcwmSxqvzIwMFV4w+L+xSw=
Subject key identifier:   2C:2E:88:DC:05:AB:32:B5:5A:77:E9:A1:2F:E9:A1:C8:BF:3D:BA:05
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7F138A6042403B9F7BC232A85D5FB01A7A034573
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa
Signing time:             Wed 10 Dec 2025 05:10:11 +0000
ROA not before:           Wed 10 Dec 2025 05:10:11 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:ea00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:13:8a:60:42:40:3b:9f:7b:c2:32:a8:5d:5f:b0:1a:7a:03:45:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 05:10:11 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=95f3dab688972729ef5f7d7846b898259835b2f25c24e1355a245bf90180facd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:65:d0:8f:3c:9c:3b:f2:38:c7:4c:2f:6e:8c:
                    cf:f4:2c:a5:39:e1:82:4f:2a:9a:c7:b2:9f:2a:45:
                    3b:e9:33:b3:6d:63:e9:7a:7c:ea:e6:d0:92:80:47:
                    d8:e4:fd:6a:cf:32:91:95:35:45:b7:58:07:81:7a:
                    26:2f:7e:60:99:12:13:aa:e1:5e:45:91:bc:6d:26:
                    44:b6:9b:b8:89:6f:a5:c3:0f:34:18:a8:df:36:86:
                    5c:3f:8d:fb:f7:e7:5c:32:17:13:28:c5:67:25:2a:
                    c2:46:c7:d5:4f:3d:ba:e3:71:b5:0d:ab:4c:15:cb:
                    cb:40:4e:34:84:ac:e0:e5:bf:af:a7:87:5f:38:ec:
                    f5:05:df:54:d2:29:41:7f:78:75:e2:d5:9e:8f:f6:
                    2b:f6:d0:bd:ab:93:3f:c4:31:ad:a2:fd:5e:dc:9b:
                    0c:2f:5a:fb:3e:ab:0b:5a:40:a5:41:94:9e:02:3c:
                    a9:33:b2:5a:fc:17:45:63:98:43:44:3a:8d:41:99:
                    c3:5f:1f:49:1a:3c:b2:e3:3b:92:d0:ee:90:8d:97:
                    cf:a9:cc:55:f2:9a:15:de:90:bc:5b:fc:51:32:ea:
                    a9:ae:c4:79:92:de:9d:98:f8:c5:7b:44:20:c3:1d:
                    c0:45:23:63:a9:33:56:51:d5:d5:a4:d7:ca:46:9e:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2E:88:DC:05:AB:32:B5:5A:77:E9:A1:2F:E9:A1:C8:BF:3D:BA:05
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ea00::/42

    Signature Algorithm: sha256WithRSAEncryption
         07:3f:c0:82:1e:68:2a:f1:b2:93:9b:2c:bd:e5:32:47:5f:02:
         24:93:89:35:cf:c1:1a:7e:0a:2d:42:24:ab:9a:9c:4b:dd:a2:
         31:f3:93:e5:7a:9e:dc:00:a8:aa:d1:67:ff:69:fc:8f:18:9b:
         f1:9f:8e:ad:3e:0d:c4:19:a0:82:1b:10:29:01:44:09:f1:ac:
         18:5e:cf:3c:33:48:d8:5a:11:4f:e6:4f:93:13:ed:a4:31:0c:
         86:82:7b:a7:a4:0b:c2:12:6b:16:3e:20:5e:de:a2:ae:26:0b:
         ac:56:07:27:c4:0c:5a:d7:f4:f5:bc:7b:2a:bd:b9:98:43:44:
         ac:ad:64:cd:b9:28:46:c7:66:12:86:20:65:32:36:5e:5a:80:
         65:ce:26:54:29:cc:3f:60:d2:09:e3:19:a1:f7:9f:da:f3:4e:
         7f:e3:50:ff:a7:b2:40:c1:02:f0:a7:26:d0:1c:a3:78:9b:b6:
         94:9a:e6:c6:f0:db:45:72:a3:40:cf:f5:29:82:73:f0:3b:3a:
         f9:c2:1e:0c:f5:d6:6b:2e:be:9b:6d:8e:1f:8c:d2:97:1c:66:
         98:02:bc:79:c0:4a:d3:ac:7b:b5:c2:84:4f:62:38:2b:9f:b1:
         9b:8a:92:1d:85:63:e0:06:6d:7b:04:f9:fb:81:6f:43:84:d5:
         c5:e3:f1:d0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfxOKYEJAO597wjKoXV+wGnoDRXMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDUxMDExWhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NWYzZGFiNjg4OTcyNzI5ZWY1ZjdkNzg0NmI4OTgyNTk4
MzViMmYyNWMyNGUxMzU1YTI0NWJmOTAxODBmYWNkMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkZdCPPJw78jjHTC9ujM/0LKU54YJPKprHsp8qRTvpM7Nt
Y+l6fOrm0JKAR9jk/WrPMpGVNUW3WAeBeiYvfmCZEhOq4V5FkbxtJkS2m7iJb6XD
DzQYqN82hlw/jfv351wyFxMoxWclKsJGx9VPPbrjcbUNq0wVy8tATjSErODlv6+n
h1847PUF31TSKUF/eHXi1Z6P9iv20L2rkz/EMa2i/V7cmwwvWvs+qwtaQKVBlJ4C
PKkzslr8F0VjmENEOo1BmcNfH0kaPLLjO5LQ7pCNl8+pzFXymhXekLxb/FEy6qmu
xHmS3p2Y+MV7RCDDHcBFI2OpM1ZR1dWk18pGnvvTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQULC6I3AWrMrVad+mhL+mhyL89ugUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzE3MTNmNzU1LWU4ODctNDFmYS04M2ZlLThiYWIxZGMxNDMxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD76gAwDQYJKoZIhvcNAQELBQADggEBAAc/wIIeaCrxspObLL3lMkdf
AiSTiTXPwRp+Ci1CJKuanEvdojHzk+V6ntwAqKrRZ/9p/I8Ym/Gfjq0+DcQZoIIb
ECkBRAnxrBhezzwzSNhaEU/mT5MT7aQxDIaCe6ekC8ISaxY+IF7eoq4mC6xWByfE
DFrX9PW8eyq9uZhDRKytZM25KEbHZhKGIGUyNl5agGXOJlQpzD9g0gnjGaH3n9rz
Tn/jUP+nskDBAvCnJtAco3ibtpSa5sbw20Vyo0DP9SmCc/A7OvnCHgz11msuvptt
jh+M0pccZpgCvHnAStOse7XChE9iOCufsZuKkh2FY+AGbXsE+fuBb0OE1cXj8dA=
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:30:51 2025 by rpki-client