This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/81ea6e17-e080-4e12-ab16-89fe13ce5ae4.roa
File:                     81ea6e17-e080-4e12-ab16-89fe13ce5ae4.roa (raw, json)
Hash identifier:          RSl7DmkKAlzBL/I43SJuIJXmKzWWDRdf8ZBEKNmNa6A=
Subject key identifier:   A5:63:7E:16:07:0B:91:74:8C:54:1E:EB:62:5A:8E:CB:C8:80:4B:B9
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4DBD7CD81900264EE75325275E7A3BE5CFFD5416
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/81ea6e17-e080-4e12-ab16-89fe13ce5ae4.roa
Signing time:             Thu 11 Dec 2025 00:50:09 +0000
ROA not before:           Thu 11 Dec 2025 00:50:09 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f10f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bd:7c:d8:19:00:26:4e:e7:53:25:27:5e:7a:3b:e5:cf:fd:54:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 11 00:50:09 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=d5ad71b431520248f64346ab77712e889f92fb77ab11ca45f68824ae71d5eafd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:78:19:dc:31:99:6d:4e:5a:4e:dc:e9:88:
                    cb:29:dd:ac:a3:fe:6f:3b:d1:4e:0e:6a:0a:95:9b:
                    c1:4c:61:52:2f:d0:3a:54:c2:85:34:e7:d1:d1:e1:
                    fd:75:1c:5e:40:74:45:d9:00:b7:56:7e:3f:99:17:
                    8b:a6:9b:9a:71:e8:74:03:28:3d:52:25:43:57:ba:
                    65:51:b7:c1:32:bb:0b:23:1d:d3:0b:6d:56:0d:da:
                    8d:ee:4e:1b:43:85:b3:ed:b5:22:ec:64:68:32:28:
                    de:20:b3:d8:6e:03:70:74:a3:f8:06:b0:78:86:f0:
                    b8:bb:4a:fc:34:f3:70:8d:b9:1a:c2:eb:18:be:97:
                    2f:1e:0b:9c:ca:25:86:25:8f:5c:f6:0d:ff:f2:d2:
                    8b:32:55:00:68:ab:a6:f2:6f:90:8e:3f:79:7d:f1:
                    a7:48:05:7c:1c:24:6c:0b:c4:8f:55:ed:1e:ff:9a:
                    ff:95:d3:95:8d:14:a4:ec:c5:38:9d:0a:b7:d8:08:
                    a4:66:e6:02:d6:ec:90:87:58:e9:5e:63:f5:92:41:
                    d7:87:b3:0d:a1:3d:75:d4:10:4b:d6:c4:dc:0d:bc:
                    3b:7e:f1:5b:be:7f:63:4f:36:3d:39:77:ee:b6:d9:
                    29:d5:ae:8c:01:97:44:fe:1b:a7:78:07:f2:d4:bc:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:63:7E:16:07:0B:91:74:8C:54:1E:EB:62:5A:8E:CB:C8:80:4B:B9
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/81ea6e17-e080-4e12-ab16-89fe13ce5ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f10f::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:f7:2a:fe:71:40:57:26:91:54:9b:3e:91:47:33:35:59:7f:
         f0:ad:99:3e:1f:46:80:09:40:90:d5:4d:d2:df:75:59:eb:1c:
         c4:14:28:54:5b:aa:88:42:5b:a9:eb:ea:bd:ae:49:71:e2:9f:
         74:2a:64:ab:f5:b3:54:74:dc:c8:32:85:82:10:83:ab:e5:3d:
         71:e5:0f:86:e2:05:46:46:a5:d8:26:55:9c:d2:f5:a0:cb:30:
         86:a5:72:b8:5c:c8:2d:64:d1:3f:fc:6b:d9:79:0d:16:66:82:
         c1:10:5b:2c:97:0f:9b:f1:ea:4c:e5:89:cf:9d:df:0d:e8:32:
         26:b2:53:d6:eb:5c:25:f6:e4:3a:a0:da:55:b5:86:75:1e:97:
         1c:f7:34:2a:a9:2a:84:13:50:02:d1:ad:46:5f:b3:38:65:c9:
         19:e4:6d:f9:ca:68:3a:a8:85:67:92:ef:82:4f:3e:72:f7:e2:
         7f:a0:d8:d6:10:1d:d2:46:22:1d:b4:f1:29:66:0f:c7:cb:1f:
         c8:1d:ea:5c:de:d8:c0:7b:65:2a:d1:2c:6f:66:3c:d8:74:e4:
         0e:04:22:ec:39:f7:c7:9e:79:d3:09:82:51:b6:b2:da:6a:e4:
         16:7d:bc:85:bd:bb:0a:e8:fc:51:a5:94:4f:c8:99:af:96:fb:
         4f:fc:dc:85
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTb182BkAJk7nUyUnXno75c/9VBYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjExMDA1MDA5WhcNMjYwMzExMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNWFkNzFiNDMxNTIwMjQ4ZjY0MzQ2YWI3NzcxMmU4ODlm
OTJmYjc3YWIxMWNhNDVmNjg4MjRhZTcxZDVlYWZkMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/LngZ3DGZbU5aTtzpiMsp3ayj/m870U4OagqVm8FMYVIv
0DpUwoU059HR4f11HF5AdEXZALdWfj+ZF4umm5px6HQDKD1SJUNXumVRt8Eyuwsj
HdMLbVYN2o3uThtDhbPttSLsZGgyKN4gs9huA3B0o/gGsHiG8Li7Svw083CNuRrC
6xi+ly8eC5zKJYYlj1z2Df/y0osyVQBoq6byb5COP3l98adIBXwcJGwLxI9V7R7/
mv+V05WNFKTsxTidCrfYCKRm5gLW7JCHWOleY/WSQdeHsw2hPXXUEEvWxNwNvDt+
8Vu+f2NPNj05d+622SnVrowBl0T+G6d4B/LUvEobAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUpWN+FgcLkXSMVB7rYlqOy8iAS7kwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzgxZWE2ZTE3LWUwODAtNGUxMi1hYjE2LTg5ZmUxM2NlNWFlNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPD78Q8wDQYJKoZIhvcNAQELBQADggEBAEH3Kv5xQFcmkVSbPpFHMzVZ
f/CtmT4fRoAJQJDVTdLfdVnrHMQUKFRbqohCW6nr6r2uSXHin3QqZKv1s1R03Mgy
hYIQg6vlPXHlD4biBUZGpdgmVZzS9aDLMIalcrhcyC1k0T/8a9l5DRZmgsEQWyyX
D5vx6kzlic+d3w3oMiayU9brXCX25Dqg2lW1hnUelxz3NCqpKoQTUALRrUZfszhl
yRnkbfnKaDqohWeS74JPPnL34n+g2NYQHdJGIh208SlmD8fLH8gd6lze2MB7ZSrR
LG9mPNh05A4EIuw598eeedMJglG2stpq5BZ9vIW9uwro/FGllE/Ima+W+0/83IU=
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:51:21 2025 by rpki-client