This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa
File:                     8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa (raw, json)
Hash identifier:          iYR6VSCZIBCzrxlrXYo24EveHtZCAtNuxxpHIVJLbls=
Subject key identifier:   E0:F4:CA:08:77:59:68:51:A3:57:4E:41:7C:E9:B0:B2:57:4F:69:75
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       428677756FEBE53172DAC618994579E9A18E0D95
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa
Signing time:             Wed 10 Dec 2025 05:10:07 +0000
ROA not before:           Wed 10 Dec 2025 05:10:07 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:86:77:75:6f:eb:e5:31:72:da:c6:18:99:45:79:e9:a1:8e:0d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 05:10:07 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=aac493d0e9d42852cb5b60c1389bd25e383cc11f125f9446b444ddaf658c0418, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:06:cf:1f:c5:71:73:07:3c:4a:b0:8c:8d:
                    80:9c:bf:3d:8d:da:f2:bb:db:58:08:77:00:b1:17:
                    e9:8e:a1:6d:04:89:d3:1c:6f:cc:4b:ed:2a:da:b5:
                    31:0f:ec:97:cf:3c:a1:00:2e:a2:6f:ac:77:07:ce:
                    3b:24:dd:c1:c1:48:1b:7f:2d:38:b4:cb:5e:92:f6:
                    5e:f1:c5:32:50:50:68:93:70:f7:31:d1:62:a0:31:
                    c8:c9:6d:ca:b5:a0:fb:84:d7:fc:9e:bd:68:79:bc:
                    ff:37:18:71:54:6b:16:21:9e:78:93:0f:ab:cd:67:
                    80:7e:30:43:4d:b3:2f:a1:b9:52:50:36:cd:88:92:
                    57:f8:3f:f5:bd:83:0e:4f:dc:55:24:90:45:f2:63:
                    8a:e4:14:70:27:75:d5:d8:1d:d8:0e:99:7e:d1:ab:
                    bb:5a:ca:7a:a7:25:03:fc:6b:37:a0:40:29:76:29:
                    ff:2d:55:5b:8b:b3:43:ed:f3:f8:0b:d4:d2:b9:cd:
                    3f:88:e0:e6:21:ad:c2:12:cd:8f:99:05:d5:6c:03:
                    65:36:d7:07:ed:06:bc:1e:ea:9e:4c:f2:16:e9:dc:
                    84:32:5c:a7:b6:e3:f3:26:0a:90:61:dd:d4:44:b3:
                    f3:03:25:46:d5:30:53:d6:3d:eb:a7:86:ad:61:6b:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F4:CA:08:77:59:68:51:A3:57:4E:41:7C:E9:B0:B2:57:4F:69:75
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:12:5e:ff:0d:54:ae:be:87:8f:e2:78:28:db:d9:db:a6:b0:
         0e:24:d1:c2:f1:a9:69:b7:b0:de:ba:ba:0e:bb:34:9c:0c:66:
         31:63:7a:ef:93:28:4a:af:47:7b:c9:2f:9c:2c:cb:c2:82:bf:
         80:c3:44:2d:ac:e5:00:4b:87:c5:25:2f:cf:f0:d9:e4:2b:be:
         a8:d4:10:3a:37:24:7a:05:71:ed:4d:b7:f8:51:36:fd:28:a5:
         1f:4d:bd:61:21:c8:3d:f1:23:d6:12:72:12:8a:fd:00:7f:d5:
         5a:e0:f5:14:04:66:be:95:e8:40:dc:0b:61:af:d6:59:a9:dc:
         ad:c6:99:e8:8b:e3:e3:97:df:c6:7c:24:ed:6b:d5:16:62:57:
         0f:f0:99:67:66:e4:af:0a:0f:0b:8a:97:51:c6:34:35:7c:42:
         e6:97:80:b2:64:d1:b4:4a:0d:a6:18:17:04:f7:13:3e:78:1e:
         c7:eb:eb:ab:0c:7e:fb:59:be:2e:51:99:57:2f:52:eb:a9:8d:
         c6:ea:42:8c:82:63:38:66:5c:7e:e8:be:12:d7:76:2b:34:79:
         4d:cd:79:68:a7:2e:a6:23:b5:d6:b7:49:e0:14:4d:47:d8:33:
         2c:af:f7:8b:3a:a7:df:ab:4f:b5:9d:d2:65:c4:b8:fa:2c:fc:
         05:6d:ef:df
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQoZ3dW/r5TFy2sYYmUV56aGODZUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDUxMDA3WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhYWM0OTNkMGU5ZDQyODUyY2I1YjYwYzEzODliZDI1ZTM4
M2NjMTFmMTI1Zjk0NDZiNDQ0ZGRhZjY1OGMwNDE4MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzfwbPH8Vxcwc8SrCMjYCcvz2N2vK721gIdwCxF+mOoW0E
idMcb8xL7SratTEP7JfPPKEALqJvrHcHzjsk3cHBSBt/LTi0y16S9l7xxTJQUGiT
cPcx0WKgMcjJbcq1oPuE1/yevWh5vP83GHFUaxYhnniTD6vNZ4B+MENNsy+huVJQ
Ns2Iklf4P/W9gw5P3FUkkEXyY4rkFHAnddXYHdgOmX7Rq7taynqnJQP8azegQCl2
Kf8tVVuLs0Pt8/gL1NK5zT+I4OYhrcISzY+ZBdVsA2U21wftBrwe6p5M8hbp3IQy
XKe24/MmCpBh3dREs/MDJUbVMFPWPeunhq1ha5W/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU4PTKCHdZaFGjV05BfOmwsldPaXUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzhmMTM1MzZmLTI1YTMtNGZmMS05MTQxLTliODVkN2U0MGI4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwAKAwDQYJKoZIhvcNAQELBQADggEBAIISXv8NVK6+h4/ieCjb2dum
sA4k0cLxqWm3sN66ug67NJwMZjFjeu+TKEqvR3vJL5wsy8KCv4DDRC2s5QBLh8Ul
L8/w2eQrvqjUEDo3JHoFce1Nt/hRNv0opR9NvWEhyD3xI9YSchKK/QB/1Vrg9RQE
Zr6V6EDcC2Gv1lmp3K3GmeiL4+OX38Z8JO1r1RZiVw/wmWdm5K8KDwuKl1HGNDV8
QuaXgLJk0bRKDaYYFwT3Ez54Hsfr66sMfvtZvi5RmVcvUuupjcbqQoyCYzhmXH7o
vhLXdis0eU3NeWinLqYjtda3SeAUTUfYMyyv94s6p9+rT7Wd0mXEuPos/AVt798=
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:41:37 2025 by rpki-client