This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa
File:                     b6c99ca5-333b-4905-96bb-8272aaedfc25.roa (raw, json)
Hash identifier:          6mKkvPZQDtWis8+FUYQ664rqYyCDGsqwu4NV5kaWTRk=
Subject key identifier:   3C:19:B3:6C:C6:F7:C6:31:D4:59:4B:E1:AB:18:F5:1B:2B:D0:3B:11
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       129B8E55CD32AC9949BB0E3E5C5744E0A6796195
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa
Signing time:             Wed 10 Dec 2025 04:40:38 +0000
ROA not before:           Wed 10 Dec 2025 04:40:38 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:397::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9b:8e:55:cd:32:ac:99:49:bb:0e:3e:5c:57:44:e0:a6:79:61:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Dec 10 04:40:38 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=1f704e3a4b131267559a8b148cf9ed269556a943695243b30fcb120513fe2aa0, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:0e:0a:f5:60:78:a0:0f:0f:3d:92:d3:42:
                    22:37:d9:26:8c:a5:80:74:3c:b5:fd:57:01:7b:87:
                    0b:0e:30:22:d4:c6:9d:0b:8b:60:e2:63:11:bd:76:
                    e9:95:13:58:e3:ce:d7:b2:3c:82:51:1f:09:67:71:
                    d2:ed:6e:ff:b4:fe:ea:ed:ab:96:2f:27:9d:a4:18:
                    eb:da:a9:9c:e0:74:a2:0e:4a:2b:0e:3c:e7:82:4b:
                    ab:21:c9:3b:6a:79:eb:27:41:7d:be:54:4c:67:a6:
                    ae:2f:d9:52:65:89:53:fe:33:5e:e6:8a:12:05:cc:
                    fe:fb:bf:2f:89:a0:a0:a5:b7:19:1b:8c:04:cc:12:
                    09:3d:4b:ea:b6:f2:40:03:af:91:1d:f6:10:3e:6b:
                    0c:e5:d8:3f:28:36:66:f4:11:4c:04:47:07:88:5c:
                    5a:04:7d:94:b9:7a:3d:59:44:bb:62:be:26:8f:50:
                    d0:1f:21:01:5b:28:4c:d3:ca:54:e7:c1:ab:1b:9f:
                    69:5e:36:ee:6e:37:ba:79:8d:c8:3f:5e:69:ea:18:
                    b4:c2:1a:8c:f3:0a:12:e2:87:b1:e3:5c:7e:11:83:
                    8c:de:79:a6:65:2a:ad:9c:78:19:c7:ea:47:f8:2d:
                    f6:41:fb:e2:d1:2b:95:7f:f9:56:81:37:72:2f:a1:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:19:B3:6C:C6:F7:C6:31:D4:59:4B:E1:AB:18:F5:1B:2B:D0:3B:11
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:397::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:38:cd:dc:9b:17:68:e9:b3:f2:3d:24:6b:e5:dc:77:5d:
         5e:96:b7:2c:f0:16:db:38:92:fb:ef:81:ae:0c:87:79:27:f5:
         c6:b5:81:0d:6d:38:88:dc:fa:be:ca:3c:22:dd:06:0a:b5:61:
         ce:24:e3:d8:7b:40:d2:a6:07:36:c5:89:4a:51:73:6b:8d:13:
         8f:a2:d9:c7:5d:63:88:15:81:f9:98:2d:7c:5f:4c:b3:55:65:
         0f:6e:8f:38:20:63:8b:b8:8d:1e:a1:d9:ff:0d:fa:2a:4d:5a:
         e7:93:70:18:d4:c5:9f:66:28:5c:65:ff:37:e5:fd:3d:2c:25:
         06:ab:9b:02:49:6f:53:58:ab:b0:d0:75:7f:da:29:13:4f:4c:
         2f:93:fd:38:a6:64:8f:77:ad:d4:9f:89:17:9a:6c:25:99:53:
         43:bb:87:fa:77:ec:e4:ab:e3:1e:ad:7a:87:e2:92:b7:25:29:
         07:8c:ce:72:2e:5b:f0:cc:a1:1b:02:4d:1d:c8:ae:58:81:21:
         b6:a3:b2:33:44:e7:df:b7:b5:89:43:b6:68:65:89:88:9f:f6:
         80:c6:6d:96:3e:06:25:36:d8:48:1a:2c:e9:65:c2:6f:47:bb:
         1d:36:7c:27:0d:3e:45:47:40:5a:f4:1b:e6:69:e2:91:f6:b2:
         b5:f5:6d:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 15:59:52 2025 by rpki-client