This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa
File:                     e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa (raw, json)
Hash identifier:          7kgNnh9Zy9JeLIM/OTB3cCJVo/GsiXWETXQACRXWH80=
Subject key identifier:   CE:84:B9:B7:8D:50:43:8C:E9:3A:01:29:77:A5:E1:BE:06:30:DB:EA
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       201466068D3261312E804A3D00FFE828AC13CD01
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa
Signing time:             Thu 11 Dec 2025 01:00:47 +0000
ROA not before:           Thu 11 Dec 2025 01:00:47 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:14:66:06:8d:32:61:31:2e:80:4a:3d:00:ff:e8:28:ac:13:cd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 11 01:00:47 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=36c45bfc633d1193e0efc3430aa596d96ec1abc7d22af6b96dd87bce495d0e76, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:05:25:29:bd:93:bb:02:8e:cc:2f:05:13:
                    39:17:00:00:55:b5:57:5f:9c:76:f9:50:98:c2:37:
                    ee:33:6c:e5:8a:d0:e8:9e:1f:57:3f:71:70:25:47:
                    66:72:58:40:1a:28:d8:e8:f2:0e:96:e1:1a:f6:af:
                    83:8b:ec:98:d2:22:4a:09:18:47:e7:f6:10:a7:47:
                    04:f5:50:40:71:1a:2e:f6:f2:a6:d4:50:43:17:04:
                    7e:b8:67:10:c4:54:be:20:a0:3e:f6:18:ff:c8:5c:
                    00:f7:99:e3:94:f8:27:00:69:fe:41:ec:cd:40:54:
                    54:e6:c0:3b:f8:f4:9b:ea:eb:14:3b:a1:79:0e:d1:
                    8b:1c:a2:41:e8:1f:58:26:fc:8d:8d:f6:01:06:19:
                    1e:06:21:c0:89:1c:cd:3f:10:98:2a:7f:ce:25:89:
                    42:4f:8f:0b:54:fc:ac:39:a5:af:e0:36:c8:90:84:
                    82:3b:bf:d4:69:06:f3:eb:68:71:c4:05:3c:93:7c:
                    64:1f:f7:d2:18:02:40:e4:fc:b0:7b:82:17:84:b4:
                    6e:46:94:07:c9:07:37:e9:dc:2c:1c:9b:eb:35:2b:
                    17:06:25:d0:8f:71:53:16:6e:40:08:ad:89:41:bd:
                    ab:62:f2:d4:ba:82:e4:a5:c0:85:5b:2e:9c:18:df:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:84:B9:B7:8D:50:43:8C:E9:3A:01:29:77:A5:E1:BE:06:30:DB:EA
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f106::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:50:d1:27:28:c3:5b:25:c9:a7:9b:f9:a6:a5:f8:47:d4:23:
         4e:75:d8:2f:f3:13:04:e5:84:aa:68:7e:17:9f:31:4c:ce:f0:
         c9:c7:3c:b3:8c:a9:50:48:9a:c4:03:db:65:9f:63:d0:74:14:
         f8:97:6d:fd:df:20:4c:de:50:98:5d:8b:03:2c:1d:1e:93:c3:
         ce:fb:5d:fa:9b:98:36:be:e9:3a:91:e1:30:99:d8:a3:8d:86:
         20:f2:3e:55:c3:78:bc:d1:45:11:ec:3f:ec:e2:51:7c:a8:91:
         d8:1d:b1:8e:ad:68:3a:10:b0:17:91:f5:3e:32:60:38:2e:08:
         d2:0d:f5:ca:cd:34:4b:4e:03:f3:d3:dc:35:1c:ef:e1:4e:3e:
         f7:71:1f:ec:06:a3:48:81:6b:c5:a5:6b:bf:17:65:17:b6:a1:
         b8:a6:09:a8:1f:35:fe:af:fb:d5:84:74:33:bf:52:55:b7:1e:
         5c:72:07:4c:ca:42:04:0f:18:16:2b:7c:70:df:90:34:28:4c:
         6e:36:e8:32:0a:a4:24:06:17:8f:09:37:74:e6:e7:20:4e:81:
         82:95:62:fb:5e:40:00:58:dc:fe:fe:aa:65:a0:de:44:c6:5a:
         ce:cc:c5:7d:39:f1:90:e1:ab:d1:37:e1:d5:87:58:43:72:40:
         60:9a:0d:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:16:25 2025 by rpki-client