This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f30a276d-715e-46ee-8158-fd4576a10978.roa
File:                     f30a276d-715e-46ee-8158-fd4576a10978.roa (raw, json)
Hash identifier:          0OoBEO4UrAoqfHRH8r3XHThZuJnAq+X/rerh06SYovw=
Subject key identifier:   D2:7C:8B:87:4A:55:AD:66:62:34:A7:A7:0C:4D:38:03:77:F4:0C:8E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0FE10D07BA172F1D88B7C3D0DA71ECB89E2BA24A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f30a276d-715e-46ee-8158-fd4576a10978.roa
Signing time:             Wed 10 Dec 2025 04:50:09 +0000
ROA not before:           Wed 10 Dec 2025 04:50:09 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:ec00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e1:0d:07:ba:17:2f:1d:88:b7:c3:d0:da:71:ec:b8:9e:2b:a2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 04:50:09 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=96c54880793166d204fd6d2e4f27005a78766793922e26547bebf3c091b09876, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:22:31:40:50:f2:43:18:8c:ed:b9:c7:6c:9f:
                    3d:6d:99:8b:38:0e:88:59:34:f6:b8:52:9f:46:9c:
                    47:c6:81:f9:00:f9:aa:e8:ad:a1:aa:e0:d7:9d:34:
                    de:f8:cb:3c:be:82:b8:8b:68:91:26:11:a9:fd:d0:
                    4b:03:6a:e2:8b:48:63:ad:e0:52:67:6c:e4:5c:88:
                    18:1f:10:66:7c:ae:7a:bf:7a:3c:64:98:1d:23:de:
                    4c:66:12:d4:e7:1c:bb:d8:34:c4:a8:94:24:69:e1:
                    69:69:cf:13:9d:ba:d8:4e:8d:88:a6:5b:6f:1b:c7:
                    12:d3:8f:56:68:36:95:f5:91:6d:0d:04:37:bf:38:
                    be:89:34:16:27:c4:e7:7b:a3:87:78:c8:a8:fa:b7:
                    40:e0:7f:a1:0c:6f:a2:91:54:a8:05:13:e1:45:2e:
                    60:ff:3a:39:97:02:95:b9:3a:f2:8d:8f:0a:19:77:
                    0c:60:31:cc:ec:b8:cb:dd:06:48:db:4b:14:8c:49:
                    26:3f:22:ab:20:59:be:9f:da:ed:b2:e4:9b:ca:db:
                    97:86:83:70:1e:28:e2:75:d8:e7:08:dd:cb:41:2e:
                    d6:0c:a5:f2:34:b2:74:86:ba:5a:75:82:32:7a:67:
                    5c:2c:c3:52:28:d8:82:df:3c:48:d6:89:f2:90:bf:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7C:8B:87:4A:55:AD:66:62:34:A7:A7:0C:4D:38:03:77:F4:0C:8E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f30a276d-715e-46ee-8158-fd4576a10978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:a4:cd:53:1e:90:36:30:06:61:d1:be:89:86:ef:9b:ae:c7:
         0f:2b:e4:97:36:41:b4:e8:5c:75:4f:ad:64:f3:ec:64:2b:46:
         64:62:8a:37:c2:9d:0b:a8:44:f7:32:6a:d9:bc:dc:8c:fa:ed:
         77:87:91:28:c6:7e:ec:01:f8:b3:c8:5b:cf:8d:21:ea:df:8c:
         73:0d:b2:5c:fe:78:82:6c:72:22:da:10:b7:22:f1:db:ee:7b:
         10:5c:9d:e5:0f:79:69:94:40:e0:61:e2:b9:7c:fc:22:c0:71:
         d7:8b:d8:49:db:53:64:10:42:14:ce:f5:c4:e8:3a:3c:40:dc:
         3f:ba:6a:e6:59:38:c4:df:1a:ff:2f:b6:4f:05:48:a0:9e:d1:
         93:ce:90:68:63:dd:31:8b:c3:d5:11:a9:b6:18:11:ce:e0:74:
         75:03:23:0f:8d:78:56:ed:c7:01:17:16:c8:b8:2f:31:b2:1a:
         79:3b:f9:a4:2d:d8:75:df:84:e4:6b:57:49:d2:59:80:55:ae:
         23:71:2b:56:bf:9a:bf:96:05:50:28:a8:c8:89:00:86:c6:2b:
         a9:50:d7:ec:e5:a6:29:67:f9:08:fd:1f:4b:0e:1e:a5:b8:e4:
         df:67:dc:be:0a:60:29:3c:46:6e:a3:48:38:e3:a0:6c:d9:55:
         b4:61:32:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:42:35 2025 by rpki-client