This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74a3bfb3-3f14-495d-9015-8fb2d093a31f.roa
File:                     74a3bfb3-3f14-495d-9015-8fb2d093a31f.roa (raw, json)
Hash identifier:          CDIBeUnSXjjS1afmPO4EF1gKDdr44SzIFqOkeQpaGJ4=
Subject key identifier:   FB:3D:ED:84:70:34:C8:A4:67:EB:82:63:51:E3:D5:08:0E:22:7F:6C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3F5BFE561D6104E4280ADCCC8044B48C2A6C3BF8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74a3bfb3-3f14-495d-9015-8fb2d093a31f.roa
Signing time:             Fri 19 Dec 2025 18:51:40 +0000
ROA not before:           Fri 19 Dec 2025 18:51:40 +0000
ROA not after:            Thu 19 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5b:fe:56:1d:61:04:e4:28:0a:dc:cc:80:44:b4:8c:2a:6c:3b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 19 18:51:40 2025 GMT
            Not After : Mar 19 23:59:59 2026 GMT
        Subject: serialNumber=14d75330e8cb103fc8f1ecf403a94d6dc166be58aab4142a4e31f93fa273804c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:9e:3e:71:fc:e4:ac:a7:b0:d9:34:24:48:
                    34:df:40:f3:34:b8:ff:1b:f5:8d:28:0f:29:02:91:
                    59:3c:26:36:12:09:44:12:50:63:cc:6c:a9:41:d4:
                    bc:d6:6e:26:cc:b7:4a:fa:cf:fa:da:3c:df:c2:92:
                    cc:9b:1b:ca:2f:ba:3f:e8:88:f9:79:09:58:fa:eb:
                    61:4f:25:86:a4:b6:cf:d1:0e:21:ee:3f:24:67:33:
                    b0:ed:67:59:d7:26:1b:3a:42:56:f7:3b:8b:74:6f:
                    a4:bc:20:55:ed:12:65:7b:50:a0:9b:e0:a7:65:d0:
                    b6:e8:fd:60:8f:e2:0d:b9:7c:5e:1a:92:01:f9:56:
                    58:71:d8:2c:f3:a0:6f:53:94:0a:34:67:13:fa:fe:
                    ec:d4:1e:ec:6c:ae:49:aa:41:0f:99:65:4d:00:2b:
                    a6:aa:82:9b:84:82:97:58:7d:1d:ac:c0:6b:ed:29:
                    5a:b6:e7:d7:5e:03:1b:39:74:b2:31:79:44:c0:e4:
                    41:d7:30:fd:ed:27:46:9c:36:09:75:e3:d2:ae:42:
                    c2:0e:cf:31:09:fb:b2:34:a4:a3:56:94:a8:10:7e:
                    c2:ea:b0:6b:ce:87:d1:7c:49:8a:83:9b:7c:35:2c:
                    ac:2f:48:2a:c5:a4:81:51:81:9d:d3:1b:c1:45:14:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3D:ED:84:70:34:C8:A4:67:EB:82:63:51:E3:D5:08:0E:22:7F:6C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74a3bfb3-3f14-495d-9015-8fb2d093a31f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:43:ca:b8:59:74:cc:c3:6a:e3:74:b8:f5:61:00:2b:5e:f3:
         70:2b:0b:1c:89:07:66:66:f9:e8:cf:a7:02:fd:ac:88:43:42:
         0a:07:65:9f:a0:71:1c:93:d9:24:f0:ab:bf:78:87:27:ca:86:
         ad:9e:13:75:6e:14:1d:52:da:7e:d1:97:7f:b8:ce:31:00:f0:
         3f:0a:57:66:42:6a:f5:ad:4f:a2:31:c0:38:1b:89:d2:b7:ad:
         f5:1e:f7:e4:df:fd:3d:8e:f6:66:2c:a9:12:b3:6a:fd:c3:a8:
         d9:10:dd:e8:14:c3:6f:17:57:12:f6:e3:2b:14:c4:34:3f:91:
         36:05:07:c6:f7:d8:5a:6f:56:6e:22:0f:dd:0e:86:c5:56:2c:
         ae:f6:b2:fc:aa:e7:8a:1f:ba:ca:29:c1:4d:3c:3a:ab:72:15:
         98:35:67:87:6c:da:09:05:ca:6c:89:76:88:64:91:05:3d:e9:
         48:6c:45:1e:68:fa:39:cc:c6:d8:3d:2a:50:df:cf:0b:86:c6:
         9d:6c:fa:28:32:2b:2a:9d:86:ea:b6:89:88:fc:87:44:09:b3:
         13:8b:d9:7f:41:96:21:35:7a:3d:46:98:b9:a0:d3:1e:7b:65:
         c7:d9:d9:30:6a:15:c0:0b:ce:98:a1:dd:0c:ce:99:b5:e3:cb:
         4a:e0:42:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:54:27 2025 by rpki-client