This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa
File:                     c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa (raw, json)
Hash identifier:          h3z8xncY6s5FxZB3qHTFp7BjfgmBsZvWHqFkacyVgbI=
Subject key identifier:   B5:C9:BE:20:F4:9E:F7:18:92:B1:05:6C:6F:E4:AB:2E:37:7E:8A:A7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       37B25D96E633CE33AEA73039E9C0F7DD42B49B20
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa
Signing time:             Thu 11 Dec 2025 00:50:11 +0000
ROA not before:           Thu 11 Dec 2025 00:50:11 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f109::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b2:5d:96:e6:33:ce:33:ae:a7:30:39:e9:c0:f7:dd:42:b4:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 11 00:50:11 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=ad15bbcbe771efa5a11f5553db4d13aca22b3ced3acb6a390d75443edd462f47, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:01:fb:8d:30:af:e7:ec:ad:f9:ee:62:cc:
                    2d:35:0b:90:43:5e:ff:ee:88:cf:ec:c3:3d:44:28:
                    5a:d8:b7:c7:4c:16:04:12:7f:fa:36:fc:f6:ec:f0:
                    18:59:43:a6:82:5e:81:c2:7c:3b:ed:52:97:42:e3:
                    14:14:5e:2e:79:1a:de:96:09:c9:53:eb:76:44:7c:
                    6b:52:2e:4d:82:54:36:5c:55:5d:06:ee:02:82:25:
                    11:c4:be:59:95:59:b9:82:67:76:e4:8a:03:86:bc:
                    dc:ae:03:2d:38:f9:60:c6:56:77:de:3f:b5:e0:89:
                    85:90:3a:e1:ee:c3:c3:58:54:9c:e6:6b:b9:e5:84:
                    e0:01:36:86:c4:7d:a4:ed:a1:de:91:46:ce:9e:e0:
                    6c:8f:5d:2c:63:74:09:97:c3:f4:bf:98:56:5f:ca:
                    6d:cc:e8:5e:b7:03:2c:61:ef:eb:10:2b:15:1b:5b:
                    4a:d5:59:13:93:09:2e:5d:c2:21:55:78:44:d5:20:
                    ea:1a:4c:6a:fe:1e:58:89:f5:98:7e:d4:d0:9d:8c:
                    31:1d:69:ff:15:11:ac:d4:e2:90:0c:a4:67:0f:98:
                    4d:a5:d5:92:a8:30:37:8e:00:d0:27:9a:f5:f2:28:
                    73:e8:dd:36:b4:8c:65:1c:2c:18:0f:af:26:d5:4a:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C9:BE:20:F4:9E:F7:18:92:B1:05:6C:6F:E4:AB:2E:37:7E:8A:A7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f109::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:07:91:80:69:e2:3f:a3:6f:b6:6b:15:ec:fc:c4:86:05:01:
         d1:89:fe:be:d6:01:2b:cf:ff:21:43:8f:40:6a:26:bb:22:6c:
         77:e8:0c:42:90:4c:c6:ff:7d:0b:64:6e:98:f5:ed:e9:28:d8:
         21:4b:41:5a:84:b2:ae:7c:02:5d:47:fa:3f:5e:b0:b5:2e:26:
         73:d8:e7:07:95:f4:c1:d9:aa:f3:c4:d3:8d:d9:50:6f:24:db:
         18:42:f7:0b:5a:de:21:ab:8e:28:9f:94:c0:ab:15:30:c7:6a:
         78:fd:d1:3c:4b:64:d0:f0:1f:1e:f3:36:ea:4d:25:11:7d:4c:
         98:8e:6a:f6:c8:e5:95:d2:51:9f:0d:a3:6e:71:7c:5b:af:92:
         87:1a:15:1a:44:5c:93:3a:bd:44:28:dc:fc:bf:4b:11:74:2c:
         2b:87:ab:38:d9:55:1e:a0:bb:a9:2c:bb:a7:5d:0a:86:68:4d:
         f2:f1:5b:27:26:ff:e7:fa:1e:f2:13:77:ba:f3:0c:45:c4:64:
         34:42:74:e4:c9:ff:0a:51:ad:d0:56:b5:ee:50:a9:0d:93:5b:
         c4:55:c3:4b:c3:23:2c:1d:f3:cb:5f:1e:ed:e3:1f:d7:67:4a:
         d4:3a:55:b6:96:17:37:63:cf:b5:a6:ca:0f:5b:d3:d1:d6:66:
         b8:e7:3c:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:39:19 2025 by rpki-client