This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/88a5dee6-8e6a-4e36-826a-c664471dad1e.roa
File:                     88a5dee6-8e6a-4e36-826a-c664471dad1e.roa (raw, json)
Hash identifier:          7+oglYHsvNXr0BYPjlaL8BswdimaRPL9qyWlxdX56AY=
Subject key identifier:   E1:E7:70:71:D3:34:41:7C:5D:15:CD:2B:A0:D5:AD:8E:5B:D5:54:D0
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       448F8065B5FF0ABB554E478A37D1FA0299B2ADC9
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/88a5dee6-8e6a-4e36-826a-c664471dad1e.roa
Signing time:             Thu 11 Dec 2025 00:50:12 +0000
ROA not before:           Thu 11 Dec 2025 00:50:12 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:80:65:b5:ff:0a:bb:55:4e:47:8a:37:d1:fa:02:99:b2:ad:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 11 00:50:12 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=0c82516ce07fe7f79d56eecb9620981a1aa6bbef61731554a6f66f4812d7275c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:16:79:56:65:db:b4:89:9d:61:6f:19:01:
                    01:39:d7:98:00:8b:28:0f:7b:a7:65:b1:11:c8:39:
                    8b:a9:f4:73:1e:3f:29:42:42:46:63:98:9f:59:cc:
                    f3:b4:1f:97:16:93:c2:9c:d6:6f:76:5d:09:50:b8:
                    e2:5b:bc:dc:49:2e:ac:04:50:5c:3d:f1:bd:dd:d9:
                    f0:30:8f:e3:21:3f:4a:40:60:8d:2d:48:95:87:4e:
                    31:d3:c1:49:7e:b5:bd:1b:0a:c7:2f:05:a5:91:3d:
                    7f:6b:9e:d8:6d:71:da:08:fe:c4:15:d0:4f:93:af:
                    ff:ca:28:dd:1d:34:2a:90:8f:03:6e:05:87:4d:46:
                    9a:c3:82:40:b2:3a:23:e4:af:44:08:54:80:3d:17:
                    fc:e7:dd:59:38:ac:7c:d8:99:5f:e0:7a:80:4d:b3:
                    ed:6b:11:fd:32:90:b2:6e:65:95:b7:34:63:0a:be:
                    f4:79:70:b1:c2:97:20:8b:74:84:18:bc:d3:8a:32:
                    e7:65:79:d0:81:2f:95:e5:a6:10:68:f8:8d:7b:d6:
                    08:f6:60:b0:c1:3b:d5:62:20:ce:de:db:a2:5d:48:
                    33:3c:aa:f8:38:8d:8e:b4:84:78:17:1f:3b:b0:ec:
                    b8:d5:d7:a1:24:24:60:4a:87:d6:c2:da:56:b7:85:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E7:70:71:D3:34:41:7C:5D:15:CD:2B:A0:D5:AD:8E:5B:D5:54:D0
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/88a5dee6-8e6a-4e36-826a-c664471dad1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:f7:a6:2e:1a:dc:4a:30:07:5c:6f:e3:cd:c2:77:e6:bb:1f:
         8f:1c:e3:90:ae:16:fe:18:3c:3f:22:3b:4f:6e:a8:29:4d:5a:
         00:2a:00:c1:25:0a:ce:57:45:a3:c6:23:c0:08:7a:cd:40:f7:
         4f:12:f4:81:98:36:ec:76:10:39:fb:09:6e:62:a5:69:0c:46:
         62:6b:5f:7b:68:9d:a0:5f:d3:bf:af:92:5e:cd:2c:67:11:ba:
         f1:c1:24:db:00:7e:d4:24:46:ac:bb:8b:39:27:9d:24:a3:bb:
         7e:7a:1e:24:ea:8b:35:34:f3:46:cf:0e:f5:2b:0d:f1:a8:14:
         be:c5:3a:70:57:36:9a:77:38:ef:92:c5:69:08:e6:20:53:45:
         3d:01:1e:d8:ca:ee:3a:df:d5:b9:0e:3a:25:c8:07:76:75:9b:
         26:0f:2d:d6:9e:9d:1e:0d:34:18:7c:2a:b2:34:dd:c8:ca:5f:
         7d:19:2c:5d:78:64:5d:a4:4a:57:7a:00:96:ad:fd:ae:95:b2:
         b5:1d:d0:76:11:53:25:1d:c3:a1:4b:01:51:98:da:4f:73:86:
         68:f0:af:84:03:3f:d2:8d:b7:fe:9c:50:4f:cc:54:14:1a:b1:
         64:96:45:79:07:68:87:72:4d:9d:01:a3:8d:80:05:09:d7:33:
         fa:86:16:0d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIURI+AZbX/CrtVTkeKN9H6ApmyrckwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjExMDA1MDEyWhcNMjYwMzExMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYzgyNTE2Y2UwN2ZlN2Y3OWQ1NmVlY2I5NjIwOTgxYTFh
YTZiYmVmNjE3MzE1NTRhNmY2NmY0ODEyZDcyNzVjMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtFRZ5VmXbtImdYW8ZAQE515gAiygPe6dlsRHIOYup9HMe
PylCQkZjmJ9ZzPO0H5cWk8Kc1m92XQlQuOJbvNxJLqwEUFw98b3d2fAwj+MhP0pA
YI0tSJWHTjHTwUl+tb0bCscvBaWRPX9rnthtcdoI/sQV0E+Tr//KKN0dNCqQjwNu
BYdNRprDgkCyOiPkr0QIVIA9F/zn3Vk4rHzYmV/geoBNs+1rEf0ykLJuZZW3NGMK
vvR5cLHClyCLdIQYvNOKMudledCBL5XlphBo+I171gj2YLDBO9ViIM7e26JdSDM8
qvg4jY60hHgXHzuw7LjV16EkJGBKh9bC2la3hRUXAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU4edwcdM0QXxdFc0roNWtjlvVVNAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2Lzg4YTVkZWU2LThlNmEtNGUzNi04MjZhLWM2NjQ0NzFkYWQxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPDwwDANBgkqhkiG9w0BAQsFAAOCAQEAhPemLhrcSjAHXG/jzcJ35rsf
jxzjkK4W/hg8PyI7T26oKU1aACoAwSUKzldFo8YjwAh6zUD3TxL0gZg27HYQOfsJ
bmKlaQxGYmtfe2idoF/Tv6+SXs0sZxG68cEk2wB+1CRGrLuLOSedJKO7fnoeJOqL
NTTzRs8O9SsN8agUvsU6cFc2mnc475LFaQjmIFNFPQEe2MruOt/VuQ46JcgHdnWb
Jg8t1p6dHg00GHwqsjTdyMpffRksXXhkXaRKV3oAlq39rpWytR3QdhFTJR3DoUsB
UZjaT3OGaPCvhAM/0o23/pxQT8xUFBqxZJZFeQdoh3JNnQGjjYAFCdcz+oYWDQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:35:15 2025 by rpki-client