This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a03add-dca3-4e9f-91f6-2c009da63848.roa
File:                     f8a03add-dca3-4e9f-91f6-2c009da63848.roa (raw, json)
Hash identifier:          0uxfCrD6eklmTPo7kCQ+zZ5msItsS62yUwOu+cczxzo=
Subject key identifier:   E5:37:0E:93:74:1E:3F:CF:40:74:B4:5A:39:D6:24:75:19:81:9D:03
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       54967938F8E5BFD7F7E663E378E05062579A0F56
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a03add-dca3-4e9f-91f6-2c009da63848.roa
Signing time:             Thu 11 Dec 2025 01:00:34 +0000
ROA not before:           Thu 11 Dec 2025 01:00:34 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f10a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:96:79:38:f8:e5:bf:d7:f7:e6:63:e3:78:e0:50:62:57:9a:0f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 11 01:00:34 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=6a6e30485861cd197050ee208bb6e4794417c3537c31998df50be2f8c031b4fa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:15:10:72:be:13:11:15:5c:3a:fe:c8:0c:
                    3e:ab:c9:46:2a:32:f3:f8:de:f0:1f:89:80:2e:c8:
                    d2:be:a2:e6:84:0a:9c:7a:6b:6f:89:0d:7e:1b:bd:
                    e1:f3:40:4e:cb:06:89:35:eb:77:04:53:1c:ef:bc:
                    46:3f:40:61:97:1e:28:fa:90:1c:16:3d:88:fd:de:
                    4a:29:a8:25:db:3a:ce:33:5e:22:ba:42:fc:24:3a:
                    05:7d:8a:07:a1:f1:6f:46:2d:fd:b0:c2:3e:6b:b2:
                    0c:25:9a:08:a0:db:aa:c9:b5:6c:f8:a8:c1:30:82:
                    47:91:b8:ea:b4:25:d4:71:c1:da:09:c0:5f:4e:e3:
                    ce:97:24:23:9a:de:00:43:8a:4d:25:72:e3:3d:01:
                    75:15:e3:06:95:65:a8:e1:28:21:f4:49:91:50:e5:
                    43:4d:53:45:81:28:8c:cc:4f:5b:e5:a2:27:aa:f8:
                    8a:95:dc:04:49:0c:45:4e:4c:4c:00:da:3a:be:0f:
                    22:1b:4c:7d:cc:42:ee:a4:a6:5a:17:09:f2:30:bb:
                    50:5b:1e:84:1c:c6:c3:e0:e1:ab:2e:5f:17:51:a4:
                    c2:7e:c4:6e:2d:b9:76:d3:83:90:5f:e9:b1:da:c7:
                    c9:c7:5c:29:0b:0b:32:55:05:6f:af:8f:9c:1c:cf:
                    82:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:0E:93:74:1E:3F:CF:40:74:B4:5A:39:D6:24:75:19:81:9D:03
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a03add-dca3-4e9f-91f6-2c009da63848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:46:52:1d:00:72:78:1b:df:e8:0e:91:59:6c:b5:89:e5:
         da:d0:63:4f:71:1f:77:b1:58:a5:97:7d:9c:69:dd:f9:13:8e:
         4d:d4:c9:ad:50:f8:0b:84:ee:79:c5:af:f1:fd:7a:9d:69:a9:
         63:e5:fb:d9:5d:32:52:d6:b4:fb:ac:a0:b3:aa:71:a0:06:71:
         23:45:c6:50:69:14:8b:c7:db:7c:35:0c:97:98:a8:37:23:bc:
         bd:3c:e4:e0:59:7a:e3:a3:57:b1:a6:eb:fe:d4:86:9a:32:b8:
         83:08:2e:95:9d:ea:b6:96:bc:da:c2:c2:25:b1:00:88:04:49:
         85:b4:5f:ba:7a:2e:53:52:c2:fc:8a:35:08:16:d0:27:a7:00:
         97:42:4e:58:88:43:dd:e9:69:3b:4b:97:e9:09:48:4a:57:7b:
         16:3f:e1:94:b0:6f:b0:50:3c:38:b1:69:7c:d4:89:fa:44:ae:
         9c:44:2e:07:7a:f7:d9:ba:7a:34:85:66:7d:e4:9c:e5:46:d2:
         a4:13:55:2a:41:8d:e2:ff:bc:ed:ff:32:ea:f0:47:2e:59:6c:
         09:40:e0:e0:e1:d3:9b:4e:77:90:d0:b7:a7:c2:3d:46:20:17:
         1f:1f:4d:e8:93:8f:48:1e:29:75:5c:ae:24:52:e0:00:f6:00:
         7c:e0:bc:d8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVJZ5OPjlv9f35mPjeOBQYleaD1YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjExMDEwMDM0WhcNMjYwMzExMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YTZlMzA0ODU4NjFjZDE5NzA1MGVlMjA4YmI2ZTQ3OTQ0
MTdjMzUzN2MzMTk5OGRmNTBiZTJmOGMwMzFiNGZhMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm1BUQcr4TERVcOv7IDD6ryUYqMvP43vAfiYAuyNK+ouaE
Cpx6a2+JDX4bveHzQE7LBok163cEUxzvvEY/QGGXHij6kBwWPYj93kopqCXbOs4z
XiK6QvwkOgV9igeh8W9GLf2wwj5rsgwlmgig26rJtWz4qMEwgkeRuOq0JdRxwdoJ
wF9O486XJCOa3gBDik0lcuM9AXUV4waVZajhKCH0SZFQ5UNNU0WBKIzMT1vloieq
+IqV3ARJDEVOTEwA2jq+DyIbTH3MQu6kploXCfIwu1BbHoQcxsPg4asuXxdRpMJ+
xG4tuXbTg5Bf6bHax8nHXCkLCzJVBW+vj5wcz4KXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5TcOk3QeP89AdLRaOdYkdRmBnQMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2Y4YTAzYWRkLWRjYTMtNGU5Zi05MWY2LTJjMDA5ZGE2Mzg0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPD78QowDQYJKoZIhvcNAQELBQADggEBAH3RRlIdAHJ4G9/oDpFZbLWJ
5drQY09xH3exWKWXfZxp3fkTjk3Uya1Q+AuE7nnFr/H9ep1pqWPl+9ldMlLWtPus
oLOqcaAGcSNFxlBpFIvH23w1DJeYqDcjvL085OBZeuOjV7Gm6/7UhpoyuIMILpWd
6raWvNrCwiWxAIgESYW0X7p6LlNSwvyKNQgW0CenAJdCTliIQ93paTtLl+kJSEpX
exY/4ZSwb7BQPDixaXzUifpErpxELgd699m6ejSFZn3knOVG0qQTVSpBjeL/vO3/
MurwRy5ZbAlA4ODh05tOd5DQt6fCPUYgFx8fTeiTj0geKXVcriRS4AD2AHzgvNg=
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:13:36 2025 by rpki-client