This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa
File:                     bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa (raw, json)
Hash identifier:          zEg7ly5Af8iKS+MjqfPh8nNYhWw7ao7r8YrRhsSXyyQ=
Subject key identifier:   ED:66:7D:28:92:A9:04:FD:0F:3A:3E:58:01:76:B1:28:E2:5A:15:5F
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       68E0985089161AD9C3DD2766118FAA75B4FD1871
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa
Signing time:             Wed 10 Dec 2025 04:30:54 +0000
ROA not before:           Wed 10 Dec 2025 04:30:54 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:3a7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e0:98:50:89:16:1a:d9:c3:dd:27:66:11:8f:aa:75:b4:fd:18:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Dec 10 04:30:54 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=7306a7b6a9e89d0e97203e6f77fab3e958b260727fcce9a817849a1518339e3e, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:35:89:e4:97:a8:4a:7c:f9:ff:bd:ee:5f:
                    5a:f3:ad:12:be:a4:8d:ea:a2:a4:32:06:52:e2:f0:
                    de:fc:b7:85:ab:77:7c:ba:31:f1:f8:cc:40:25:e2:
                    a4:fe:86:7f:c3:5d:7e:27:8b:ac:1c:95:3b:c4:fb:
                    ad:b1:d5:8e:a0:af:f4:77:2a:1e:fd:11:ba:aa:52:
                    38:07:81:4f:2d:55:a7:f2:87:24:87:d0:da:08:94:
                    16:03:e3:1f:f3:a4:48:ea:fc:af:ac:c4:92:7d:2c:
                    0c:58:cc:e2:58:0a:05:84:d1:cb:5b:0c:e9:e9:18:
                    1f:1f:3b:d1:ae:56:0b:5e:d6:69:a1:5e:21:1b:e6:
                    f5:f5:d3:02:cf:97:76:6e:c5:5f:2a:e9:76:f4:90:
                    a0:30:40:f6:dd:93:67:29:14:c9:75:33:b2:a8:20:
                    9c:a7:44:e5:08:54:81:97:dd:5c:ff:53:83:3d:4b:
                    0d:98:fd:16:a7:ee:aa:85:bf:3a:60:c4:bf:c9:91:
                    7d:85:24:75:82:97:28:47:5c:eb:a7:ec:1f:88:22:
                    18:99:e4:17:7d:81:53:53:34:d2:ce:ee:22:9e:97:
                    5e:7e:9b:4e:cb:20:ff:1e:41:1a:5b:42:2f:78:c5:
                    c4:6c:0d:a0:e2:a5:11:31:2f:03:c3:78:2f:a7:90:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:66:7D:28:92:A9:04:FD:0F:3A:3E:58:01:76:B1:28:E2:5A:15:5F
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:3a7::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:da:15:96:54:d9:a6:3c:bf:cc:75:33:d5:1a:07:1c:d1:
         ac:d2:9f:f7:df:7f:bd:75:04:0e:68:93:00:55:78:21:30:e1:
         27:96:3b:4a:0f:69:1c:a1:7a:ec:4a:ea:53:7a:96:3e:99:73:
         b2:94:15:5d:e8:a9:1c:42:ea:46:36:eb:4a:33:eb:8d:cf:f8:
         a1:dd:c6:42:fc:13:cb:dd:64:e3:4f:30:21:da:80:54:74:82:
         cd:e5:90:45:6c:e8:39:a9:48:24:42:f0:e0:72:ca:05:9a:10:
         08:99:db:e1:64:fd:07:7a:d7:85:04:21:38:3f:7e:36:db:8f:
         67:a0:20:7d:b7:ff:b1:e2:f4:f0:08:02:5e:8b:a2:18:e8:4c:
         d0:c6:9d:df:2b:0a:6e:ee:97:f5:bc:b1:63:1d:60:00:c9:b2:
         a2:1e:f5:8f:22:e2:12:0e:cb:69:34:54:0d:a8:de:73:14:40:
         f6:a2:13:24:de:c2:1b:37:bb:b8:86:cb:fa:7d:df:e1:7b:9c:
         67:e1:e9:1f:55:78:12:13:67:89:6a:e5:aa:77:26:43:7e:26:
         e0:12:b0:8c:67:cb:f3:ed:9c:9b:d5:7f:1a:ea:2a:52:c8:c8:
         18:b5:de:72:be:bd:89:72:d1:9e:90:13:41:3d:5f:76:7a:49:
         24:50:00:f6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUaOCYUIkWGtnD3SdmEY+qdbT9GHEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMjEwMDQzMDU0WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MzA2YTdiNmE5ZTg5ZDBlOTcyMDNlNmY3N2ZhYjNlOTU4
YjI2MDcyN2ZjY2U5YTgxNzg0OWExNTE4MzM5ZTNlMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoizWJ5JeoSnz5/73uX1rzrRK+pI3qoqQyBlLi8N78t4Wr
d3y6MfH4zEAl4qT+hn/DXX4ni6wclTvE+62x1Y6gr/R3Kh79EbqqUjgHgU8tVafy
hySH0NoIlBYD4x/zpEjq/K+sxJJ9LAxYzOJYCgWE0ctbDOnpGB8fO9GuVgte1mmh
XiEb5vX10wLPl3ZuxV8q6Xb0kKAwQPbdk2cpFMl1M7KoIJynROUIVIGX3Vz/U4M9
Sw2Y/Ran7qqFvzpgxL/JkX2FJHWClyhHXOun7B+IIhiZ5Bd9gVNTNNLO7iKel15+
m07LIP8eQRpbQi94xcRsDaDipRExLwPDeC+nkFp5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU7WZ9KJKpBP0POj5YAXaxKOJaFV8wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2JlYmIxMTdhLTQ0ZGQtNGIzZi04N2YwLTI0ZmYzZWY2NTMzOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBADTW2hWWVNmmPL/MdTPVGgcc
0azSn/fff711BA5okwBVeCEw4SeWO0oPaRyheuxK6lN6lj6Zc7KUFV3oqRxC6kY2
60oz643P+KHdxkL8E8vdZONPMCHagFR0gs3lkEVs6DmpSCRC8OByygWaEAiZ2+Fk
/Qd614UEITg/fjbbj2egIH23/7Hi9PAIAl6LohjoTNDGnd8rCm7ul/W8sWMdYADJ
sqIe9Y8i4hIOy2k0VA2o3nMUQPaiEyTewhs3u7iGy/p93+F7nGfh6R9VeBITZ4lq
5ap3JkN+JuASsIxny/PtnJvVfxrqKlLIyBi13nK+vYly0Z6QE0E9X3Z6SSRQAPY=
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:36:09 2025 by rpki-client