This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/abbb9ed9-cd59-4312-980b-26a09589f144.roa
File:                     abbb9ed9-cd59-4312-980b-26a09589f144.roa (raw, json)
Hash identifier:          0TSBLplFb6Ta5G2Vkq1WpPwfT0kVpdwgZKkDpQVh1Dw=
Subject key identifier:   00:24:5C:68:16:4D:07:D6:89:5E:53:AF:7E:24:1D:F8:85:A9:1E:8A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3B21B91DA0E31597EFD9D3D0BBF11D2D4CCFE781
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/abbb9ed9-cd59-4312-980b-26a09589f144.roa
Signing time:             Thu 11 Dec 2025 01:00:46 +0000
ROA not before:           Thu 11 Dec 2025 01:00:46 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:21:b9:1d:a0:e3:15:97:ef:d9:d3:d0:bb:f1:1d:2d:4c:cf:e7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 11 01:00:46 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=174687472c19e063f3a4722b7109710c3fac4abe5d3393582c317ed60f83f067, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:f8:f3:9a:a4:02:c0:4e:9f:d3:43:d8:8c:
                    f3:c2:a7:06:b2:65:0b:dd:c4:43:36:8b:e3:81:43:
                    a6:cf:e3:66:35:3e:de:67:12:be:47:55:5b:b0:34:
                    9d:25:e9:21:18:35:59:28:bb:35:dc:88:d3:15:4d:
                    77:86:31:81:5e:62:22:8b:7d:af:c3:3d:ec:40:78:
                    76:16:d4:b4:0d:2d:8f:3c:fd:64:67:9d:43:38:2c:
                    13:2e:24:64:fb:38:3b:bc:d1:e1:88:03:f4:77:0a:
                    ce:c5:23:24:fe:8d:dc:2f:3c:c4:38:6d:5b:16:a6:
                    3b:dc:29:e4:09:f0:8f:db:9f:05:56:f8:d0:a6:e0:
                    8d:71:43:8c:4c:65:07:eb:a6:7b:e8:24:2d:74:50:
                    a5:9d:c3:c2:ed:7f:64:8f:49:7e:3c:bf:8e:92:41:
                    b5:c7:3d:b6:11:25:c8:b4:cf:c7:b6:48:e9:5b:1c:
                    37:16:e5:2f:76:5e:99:ba:09:82:38:ec:48:59:ad:
                    15:52:eb:df:bb:69:6d:3a:ff:73:d9:11:ac:8f:1b:
                    0e:6b:07:1a:aa:6c:7d:58:a7:6c:ec:13:1e:c5:2c:
                    c7:87:3c:b7:20:a3:3f:fa:02:58:a8:e1:93:02:21:
                    9a:59:fa:cf:66:e7:97:b7:0a:22:d5:6d:1e:75:de:
                    6e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:24:5C:68:16:4D:07:D6:89:5E:53:AF:7E:24:1D:F8:85:A9:1E:8A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/abbb9ed9-cd59-4312-980b-26a09589f144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f110::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:0e:57:48:63:42:ed:a4:8d:0c:65:73:ef:ff:69:12:6c:df:
         6a:b2:74:c1:d1:23:86:c3:5f:62:00:3d:dc:13:e8:3b:b8:0b:
         04:69:38:36:f8:a7:0f:db:bd:24:5e:c7:50:08:07:59:c4:e0:
         60:3c:2e:14:e3:78:e5:34:f6:22:02:ea:b6:f8:af:53:f0:0b:
         47:5b:cd:ce:87:a1:92:f0:96:c9:ea:ee:f8:ac:cf:0a:83:c1:
         0c:ac:f3:05:bc:23:a1:52:f9:e8:65:6b:09:c3:16:02:b3:6b:
         16:36:92:a4:bc:be:5a:72:bf:44:42:4e:76:ee:06:c8:bf:01:
         2f:20:4d:52:2b:2b:9c:b9:e8:24:2b:f0:16:5b:2a:7c:2c:2e:
         7d:9a:f0:57:64:4d:59:32:6a:48:95:57:30:f5:a7:f7:f5:b7:
         24:46:b7:14:78:49:5d:35:1c:6c:4e:de:7d:33:c5:8e:fb:82:
         8f:00:5d:36:bf:4e:35:bd:4e:04:01:df:87:6b:be:71:93:28:
         a9:cb:d5:bd:9c:f2:39:3a:1d:60:a2:73:b6:1a:d8:bc:1b:47:
         1d:f4:74:3f:15:6b:88:0d:92:a8:80:4e:8c:bd:46:1b:f5:64:
         f0:de:3b:5c:87:6e:8f:e8:4e:a0:9f:83:79:14:18:c8:69:c1:
         58:26:a6:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:17:46 2025 by rpki-client