This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa
File:                     dc372e7b-796d-474f-9081-c4d593d48cd3.roa (raw, json)
Hash identifier:          thGe/kawj/L7cEJStz1hk87IJdVevZDA7Ajb1Wa75Lw=
Subject key identifier:   2D:F7:A9:FC:6B:BD:75:C7:E7:42:43:3F:7E:A1:7E:96:01:D2:CF:65
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       74DDCC72E71685F4C8B73431BAC9760F9F166375
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa
Signing time:             Fri 12 Dec 2025 00:00:09 +0000
ROA not before:           Fri 12 Dec 2025 00:00:09 +0000
ROA not after:            Thu 12 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:8100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:dd:cc:72:e7:16:85:f4:c8:b7:34:31:ba:c9:76:0f:9f:16:63:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 12 00:00:09 2025 GMT
            Not After : Mar 12 23:59:59 2026 GMT
        Subject: serialNumber=3128243518df7bd0f52e1d6e0b36f0dae1e40a865329c95fa7a5073e36f8db9c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:1c:59:59:4d:54:ef:c6:e5:71:6b:51:73:
                    92:76:ce:4a:12:80:77:de:90:c8:b5:19:de:0a:18:
                    58:3b:32:e3:1e:64:44:e4:02:19:65:53:a0:c6:ce:
                    09:0f:fb:6d:45:b0:c5:58:05:88:04:7c:7b:c6:74:
                    35:a5:a0:6d:0a:09:c5:fc:31:00:da:7f:6d:1c:dc:
                    cb:4b:0d:5d:55:ae:c5:c4:39:7f:45:a0:a6:6c:e5:
                    ea:5d:e1:2e:b7:c3:d8:5a:e1:16:f1:49:11:65:f6:
                    cd:36:34:f4:4e:7e:d6:63:99:75:43:2b:64:d5:65:
                    39:44:73:16:f5:2b:b2:ec:99:4e:cd:3b:fa:28:a3:
                    d7:5f:07:c1:58:c4:bd:0c:56:b8:bc:04:c5:09:1b:
                    75:44:bd:35:89:2f:43:19:62:23:da:16:f0:25:4f:
                    61:c4:f7:52:45:91:27:55:c8:88:38:f0:8b:12:4e:
                    59:78:b5:9f:1a:94:7e:94:d6:42:ca:a2:ed:82:db:
                    cf:b6:88:c0:c9:6f:29:6e:9f:c8:d4:c0:33:8d:a8:
                    7a:33:e5:d6:5c:21:67:cf:5f:f5:94:c9:ac:90:07:
                    61:24:92:ba:ef:9f:c9:1e:37:d9:8a:a3:4b:91:bd:
                    b2:e4:8a:4c:6e:0d:43:70:15:92:7c:b3:c8:8d:6c:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F7:A9:FC:6B:BD:75:C7:E7:42:43:3F:7E:A1:7E:96:01:D2:CF:65
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:3c:26:d1:5c:70:c2:5d:43:bb:23:ca:df:88:71:1f:ee:
         e1:04:23:8a:de:19:c7:0e:05:07:a6:b8:44:81:95:94:21:47:
         0c:be:22:63:69:df:ea:88:7c:56:b0:36:32:4a:61:00:b3:e9:
         34:41:8c:b1:60:26:a8:86:87:c9:13:c5:4c:e3:6a:3d:9b:0a:
         d6:d4:0a:6d:e3:3a:30:16:66:84:91:51:f3:01:a3:3e:e5:10:
         6d:f0:92:43:51:08:b2:d7:20:a0:21:dd:de:ed:13:bd:79:ff:
         fd:01:48:6f:34:5f:12:d5:08:06:1e:24:8e:53:de:83:06:bb:
         5c:9f:6a:63:37:1d:75:2c:f2:20:02:ca:b0:76:dc:75:c0:d5:
         4b:7a:81:20:52:91:83:d4:20:ed:c6:44:0f:43:90:c2:a4:9d:
         3a:46:4d:4d:3c:0a:87:bd:1f:22:c0:e6:06:9e:46:6b:f3:6f:
         4a:00:0a:ec:32:78:45:21:f4:f2:6e:ea:0e:14:eb:5d:80:d3:
         f2:cb:53:10:2a:00:e1:bd:c6:5a:93:12:e3:20:e9:3e:64:23:
         56:ab:a1:17:9a:d6:c7:b4:b3:fa:d4:e3:70:5d:74:dd:31:93:
         cd:96:29:3e:28:02:97:a0:e4:40:25:05:ec:2e:58:40:50:a1:
         11:d0:e0:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:43 2025 by rpki-client