This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa
File:                     4550dcb5-431c-4b07-9e46-224c71cb2b00.roa (raw, json)
Hash identifier:          42oteBNv0h0WoOZBSGAKnFM+f26DypUISJaFYWhU6ug=
Subject key identifier:   96:8B:A9:81:8A:58:89:2A:0C:55:9A:CE:2B:E3:06:BE:FB:F4:C6:BB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       29C2CBC39CD4CBD46250AB11A08177B530188AFA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa
Signing time:             Wed 10 Dec 2025 05:00:26 +0000
ROA not before:           Wed 10 Dec 2025 05:00:26 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:5518::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c2:cb:c3:9c:d4:cb:d4:62:50:ab:11:a0:81:77:b5:30:18:8a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 05:00:26 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=73c5bb9f65eb61bebee486a58c297f9be4bc31f0b43593c2f3f7575dc120660f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:26:96:18:09:18:3c:be:b4:95:7a:40:9d:
                    09:b9:25:8b:3f:a9:98:c2:45:6c:2a:a9:ca:68:56:
                    10:42:ee:67:81:0b:03:02:44:d4:d9:5b:b8:e2:ed:
                    60:14:b7:d7:e1:26:e3:56:44:4d:3f:07:b4:a1:ca:
                    50:dc:34:2a:be:4d:b0:48:06:59:3e:71:e5:08:c3:
                    11:60:03:3b:ed:a1:96:15:b0:40:44:d1:f5:5e:3a:
                    4a:41:30:79:41:13:e4:83:94:f2:37:b8:31:ed:72:
                    2a:4d:e3:3b:1e:e4:ac:fb:ef:bd:a2:d1:9b:58:cc:
                    d6:50:c3:3a:51:1e:16:84:da:e7:d7:16:33:0c:00:
                    63:26:73:06:79:fc:83:32:cf:a7:1d:b9:75:42:03:
                    0e:7a:70:13:99:45:25:a8:92:94:79:c2:44:7b:d9:
                    43:06:ec:dd:51:e5:38:98:57:5d:29:0f:08:0f:38:
                    53:94:1a:6b:29:a0:10:8b:0f:6d:23:28:e6:c4:43:
                    7d:27:c7:40:47:60:a2:28:8e:b3:05:1b:22:5c:27:
                    e2:aa:bc:1a:fa:c4:95:67:2b:47:9b:f6:1a:6b:1a:
                    fb:0a:9e:78:a0:bc:29:00:6a:6c:6f:14:7b:bb:35:
                    fd:ec:ac:bd:ce:48:a0:e9:63:a4:2e:cf:5b:00:8c:
                    35:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8B:A9:81:8A:58:89:2A:0C:55:9A:CE:2B:E3:06:BE:FB:F4:C6:BB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5518::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:fc:80:95:44:d4:55:e3:0b:b0:2b:f3:71:a4:79:08:98:0a:
         ee:7c:72:63:64:b6:f7:27:56:f5:14:8e:ed:5c:52:84:2d:14:
         40:90:41:96:e2:3e:32:99:b6:fb:88:08:07:ed:7b:5d:bc:a7:
         eb:1b:27:63:5d:fe:ec:ee:1b:3e:26:d8:b7:bc:1e:64:b4:b1:
         43:0d:2c:54:a0:0c:34:4c:b8:ab:84:42:48:7b:50:58:f8:43:
         51:dc:80:a2:1c:24:8f:f9:59:01:a5:93:e0:75:03:2b:9c:9f:
         43:db:9d:46:cf:51:98:89:a3:b2:ee:94:df:78:68:5e:3b:de:
         c0:42:7f:df:fd:de:08:5f:1d:72:e0:0c:ce:a8:12:f6:dc:05:
         b8:62:36:11:8f:2b:2a:c0:87:aa:7e:d0:9f:16:0f:a3:53:ce:
         cd:6c:6c:f1:1b:d0:62:76:66:8a:51:d7:66:ab:fc:b0:69:e3:
         b3:0a:09:9e:0d:57:59:29:00:71:78:be:69:e3:ff:05:0b:bf:
         ec:93:10:f8:41:8f:83:9f:f0:a0:75:e8:ff:5f:1d:fc:3a:98:
         b6:1e:36:e7:1c:03:b1:e4:94:56:0d:2f:2d:a5:40:d8:35:fe:
         18:48:4d:61:7d:5f:5b:9a:24:21:0f:26:32:9e:ee:69:5d:08:
         f4:0c:57:8d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKcLLw5zUy9RiUKsRoIF3tTAYivowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDUwMDI2WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3M2M1YmI5ZjY1ZWI2MWJlYmVlNDg2YTU4YzI5N2Y5YmU0
YmMzMWYwYjQzNTkzYzJmM2Y3NTc1ZGMxMjA2NjBmMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnAyaWGAkYPL60lXpAnQm5JYs/qZjCRWwqqcpoVhBC7meB
CwMCRNTZW7ji7WAUt9fhJuNWRE0/B7ShylDcNCq+TbBIBlk+ceUIwxFgAzvtoZYV
sEBE0fVeOkpBMHlBE+SDlPI3uDHtcipN4zse5Kz7772i0ZtYzNZQwzpRHhaE2ufX
FjMMAGMmcwZ5/IMyz6cduXVCAw56cBOZRSWokpR5wkR72UMG7N1R5TiYV10pDwgP
OFOUGmspoBCLD20jKObEQ30nx0BHYKIojrMFGyJcJ+KqvBr6xJVnK0eb9hprGvsK
nnigvCkAamxvFHu7Nf3srL3OSKDpY6Quz1sAjDXTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUloupgYpYiSoMVZrOK+MGvvv0xrswHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzQ1NTBkY2I1LTQzMWMtNGIwNy05ZTQ2LTIyNGM3MWNiMmIwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVRgwDQYJKoZIhvcNAQELBQADggEBACP8gJVE1FXjC7Ar83GkeQiY
Cu58cmNktvcnVvUUju1cUoQtFECQQZbiPjKZtvuICAfte128p+sbJ2Nd/uzuGz4m
2Le8HmS0sUMNLFSgDDRMuKuEQkh7UFj4Q1HcgKIcJI/5WQGlk+B1Ayucn0PbnUbP
UZiJo7LulN94aF473sBCf9/93ghfHXLgDM6oEvbcBbhiNhGPKyrAh6p+0J8WD6NT
zs1sbPEb0GJ2ZopR12ar/LBp47MKCZ4NV1kpAHF4vmnj/wULv+yTEPhBj4Of8KB1
6P9fHfw6mLYeNuccA7HklFYNLy2lQNg1/hhITWF9X1uaJCEPJjKe7mldCPQMV40=
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:51:44 2025 by rpki-client