This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa
File:                     c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa (raw, json)
Hash identifier:          8BVyzdUyllqS58H3y468RvVyUg1YPvC0s3CTwgWkIk4=
Subject key identifier:   95:38:31:BA:27:01:E6:6B:AD:E4:20:D6:3A:AF:31:0C:FB:EA:4E:1C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       54CBE0FBB6CBD6405F6FC72E1EEB4E39830A0670
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa
Signing time:             Thu 11 Dec 2025 00:50:10 +0000
ROA not before:           Thu 11 Dec 2025 00:50:10 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f1:8801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cb:e0:fb:b6:cb:d6:40:5f:6f:c7:2e:1e:eb:4e:39:83:0a:06:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 11 00:50:10 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=3d801e9942dceb85805e822c7e392ccc824f4dfe0fb3ded70e23d7b4828977ef, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:d5:ac:c3:a8:82:42:17:af:98:d9:0b:c7:
                    0c:b7:8f:c7:9d:47:86:c7:c1:fc:11:40:48:31:3e:
                    39:05:4a:a0:7d:96:6a:5a:28:c7:2f:ce:f3:e3:45:
                    ac:19:0b:90:20:05:dc:2b:c5:41:e3:3a:25:07:02:
                    d6:62:f3:a2:fc:2c:e3:ab:bf:eb:89:93:b4:66:a4:
                    41:2c:96:25:e5:26:f3:74:fd:01:cc:02:b0:ee:b5:
                    fe:f5:d6:b1:9c:2c:9c:50:c5:07:ad:de:f4:a7:6a:
                    79:6a:03:65:c9:c0:e2:79:45:3f:55:e7:e2:e7:41:
                    60:f0:e7:da:7a:d2:14:62:ed:f7:39:7a:ac:44:fe:
                    bf:df:e5:37:2b:8a:57:60:e9:22:9f:be:e5:9b:26:
                    d9:82:07:fe:c9:a2:c3:ea:99:69:3e:e5:1e:5f:4a:
                    bf:f5:bf:99:06:4a:aa:f4:4e:1c:3b:ae:d7:40:be:
                    fc:8f:3b:3c:39:11:ec:9f:08:83:80:69:5a:33:a7:
                    73:59:27:13:a8:bf:52:65:35:a6:99:03:6d:35:84:
                    0d:6e:67:78:75:12:10:56:c9:f3:bb:4a:23:c6:74:
                    54:63:21:6b:26:b8:15:9d:f0:af:a3:9c:8b:d8:1d:
                    32:79:02:bf:ba:04:72:f8:16:93:bb:d1:f0:04:80:
                    b5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:38:31:BA:27:01:E6:6B:AD:E4:20:D6:3A:AF:31:0C:FB:EA:4E:1C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8801::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:1e:8c:3f:41:41:d5:52:3b:fc:4d:3b:08:39:f9:59:54:
         0a:d8:d0:6a:49:8c:4b:9e:a2:61:d6:84:ff:44:4b:a5:be:30:
         43:34:5f:90:ff:f9:42:b9:bb:fb:07:c0:02:c7:2b:89:c0:ce:
         0c:b0:03:74:d3:81:7b:2d:86:5e:d5:a8:fe:1b:88:13:66:ec:
         c2:c7:bf:85:e5:d6:2a:83:6b:dc:24:1b:cf:25:6f:c4:a0:3d:
         1a:12:f2:56:97:dd:78:17:c4:1c:4e:46:13:2d:f0:e1:0e:0c:
         b3:01:10:34:2e:13:fd:2c:a3:b9:08:08:93:fa:29:18:41:e0:
         89:fe:62:94:19:af:89:2a:08:7e:f8:5b:9d:58:3a:c7:f5:e2:
         a0:5f:b5:6e:95:a1:1c:5c:23:a4:d6:9d:d6:af:78:2b:2f:2a:
         51:2b:98:61:34:0b:c4:28:f4:2c:33:b2:64:ad:5e:9b:1e:66:
         8f:90:02:04:86:98:7f:a8:81:e6:44:5b:05:94:c6:cc:2b:c7:
         8a:52:ad:1f:93:ab:91:02:98:a5:03:39:70:b8:71:c0:66:f3:
         28:3e:39:29:94:b2:f1:32:64:5e:14:bc:a6:88:bb:7e:d2:8e:
         d6:6f:73:b6:a0:a8:4f:2c:1d:7b:9f:be:1c:e5:f5:62:c7:16:
         51:fb:8c:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 21 01:19:42 2025 by rpki-client