This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ec42dc47-0cc9-474a-9470-19700f756d36.roa
File:                     ec42dc47-0cc9-474a-9470-19700f756d36.roa (raw, json)
Hash identifier:          Z++bm+mWt0XhR+JpTmHF+3OPsv0Lur9dio6EMR58QmM=
Subject key identifier:   6A:4B:BB:41:07:6E:95:F6:6E:92:C1:8C:54:20:C6:9D:8F:1D:5A:A3
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       163D2F5D1373135DE3B3D24F3C7E19325E5EE785
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ec42dc47-0cc9-474a-9470-19700f756d36.roa
Signing time:             Wed 10 Dec 2025 04:50:05 +0000
ROA not before:           Wed 10 Dec 2025 04:50:05 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:551c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3d:2f:5d:13:73:13:5d:e3:b3:d2:4f:3c:7e:19:32:5e:5e:e7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 04:50:05 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=f38524a5559d5c5a3027692771b1efbc886ed31d1de914e77677f5e19a547762, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:b5:57:bb:d4:07:8b:19:7e:02:51:3e:31:
                    0c:b8:9e:06:67:18:be:30:f1:6b:21:3f:de:e2:98:
                    6a:e7:01:c1:50:78:3c:10:93:2a:74:d0:c0:cf:93:
                    5f:53:3b:0e:48:17:76:7d:46:0f:42:58:0f:b8:1c:
                    40:9f:6f:e8:29:a8:23:69:2e:4f:9b:f6:1c:33:af:
                    ec:84:71:45:60:98:6b:33:8f:82:63:fa:f9:68:18:
                    e9:cf:c5:5a:b4:00:3d:63:70:0a:b0:28:12:c6:09:
                    a7:ed:fb:89:e3:3d:cd:11:28:df:69:cf:5e:3b:25:
                    77:e9:da:c6:5b:ba:52:dc:cb:46:d5:b7:5d:56:dd:
                    e1:a6:ee:21:80:aa:80:41:ed:51:e5:d3:65:b1:af:
                    a5:8d:f1:11:62:2d:f0:f3:aa:de:8c:b6:4c:de:63:
                    f4:1b:46:42:d2:73:2f:d9:2c:af:27:f4:5d:3a:e6:
                    28:2c:a7:bb:5d:af:43:67:4a:5c:09:ba:c9:59:d1:
                    15:56:44:96:94:e6:2a:ef:07:fb:b6:f1:7d:72:72:
                    de:d7:35:bd:be:38:37:66:4a:eb:77:da:f3:18:17:
                    5b:05:03:25:b7:67:a5:ea:90:5d:37:bc:b0:e4:f4:
                    cb:f9:fe:dd:8a:67:f7:ab:9d:59:ab:58:d7:25:4d:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4B:BB:41:07:6E:95:F6:6E:92:C1:8C:54:20:C6:9D:8F:1D:5A:A3
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ec42dc47-0cc9-474a-9470-19700f756d36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:551c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:9b:7a:41:f8:9c:6c:95:ff:58:8d:b4:c4:4c:6e:4b:24:52:
         da:df:23:f2:bf:91:95:1c:8a:de:cc:7b:fe:3f:8a:c7:25:0f:
         1a:fa:f5:7b:3b:ce:b8:ba:4a:9a:b6:ff:26:ba:c0:63:a5:85:
         26:e5:65:1c:2f:1e:72:e4:ae:f6:9c:b9:52:0c:7a:3d:f8:83:
         11:52:3a:a2:44:12:6a:36:c0:ad:77:60:ec:91:c2:dc:08:60:
         48:28:e1:62:e1:fa:09:17:22:6d:1e:8a:a2:8a:1e:6f:6c:ed:
         d3:15:86:5e:b6:c6:d8:f4:e6:0e:6b:2d:bb:96:3f:f8:c8:43:
         fd:97:05:2b:c1:63:60:3f:e9:5b:b6:ff:54:ab:17:27:74:3c:
         96:61:c8:ac:e9:69:fb:da:d3:9e:b8:84:e7:58:80:0b:11:26:
         1e:c6:65:f2:3f:54:55:b6:11:29:81:37:ad:3f:8e:ab:b7:5d:
         2a:fd:96:7e:9a:0e:c4:a1:9d:2f:04:9e:dd:30:d5:02:87:1b:
         77:5b:8a:82:1c:71:28:e6:ef:1a:49:27:ac:02:a5:03:69:38:
         46:b6:35:1f:ef:38:c1:9a:2d:8a:d1:0f:1a:88:35:bc:27:5e:
         4f:63:04:ae:72:d5:ff:38:22:08:05:db:7d:a1:6a:8e:a6:ab:
         9b:e5:6b:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:59:16 2025 by rpki-client