This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d53491bc-c995-40aa-b532-7c3c0d39d244.roa
File:                     d53491bc-c995-40aa-b532-7c3c0d39d244.roa (raw, json)
Hash identifier:          qlRH3tnoJPz7KwyTaHauavu4JxcfmXA7of1PCw/Qs8U=
Subject key identifier:   D5:88:E7:F9:2A:06:C4:45:E9:A3:12:73:94:4F:95:D7:C0:55:A3:53
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       15DBC12307F5A193BA6CFF6AC421427C37A6832D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d53491bc-c995-40aa-b532-7c3c0d39d244.roa
Signing time:             Wed 10 Dec 2025 04:30:35 +0000
ROA not before:           Wed 10 Dec 2025 04:30:35 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c40::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:db:c1:23:07:f5:a1:93:ba:6c:ff:6a:c4:21:42:7c:37:a6:83:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Dec 10 04:30:35 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=7a3119f6b5475d23a8b79b6d39443009148aaa3c7ff176dbae65ed5eabf1460d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:81:4a:9a:d1:0f:42:34:36:81:44:d9:e2:
                    d2:66:bd:93:3a:2a:a3:d2:ee:6a:fa:63:78:08:3c:
                    9c:aa:cc:d1:aa:d2:fd:cd:d8:7f:21:0a:a1:dd:32:
                    76:42:81:01:51:bc:2e:2e:96:65:ce:f5:1e:e1:37:
                    8b:79:e3:2a:c1:2f:1d:5f:6d:d3:85:e0:9d:b5:d5:
                    b9:19:0c:12:84:e2:58:84:96:12:e8:cd:64:2a:ad:
                    a2:3c:00:de:59:1c:19:91:63:87:ac:d4:39:1f:93:
                    4d:57:7a:e4:1a:4f:39:ee:f9:7c:ed:19:02:43:3e:
                    fd:91:02:c3:ca:44:b7:f7:01:58:f7:6f:ae:b2:34:
                    b7:e1:cf:c8:70:59:78:4b:3c:f2:31:df:6d:4d:48:
                    d7:a9:aa:28:8a:b1:2d:b1:52:d3:e6:65:6f:bc:80:
                    02:c8:3b:e7:03:0e:cf:2c:56:f8:d2:70:3c:ff:56:
                    bd:b4:27:6f:6d:d3:aa:4d:6f:0c:d2:e3:2d:f1:4d:
                    9c:c2:47:af:63:22:2f:92:e8:b9:aa:88:c8:26:25:
                    ad:cb:63:34:d2:61:82:22:e0:05:13:eb:e9:58:ce:
                    08:93:18:fb:f1:4a:6b:6d:0f:de:c8:58:70:b8:50:
                    7b:9d:bf:24:f4:26:be:09:e1:0e:44:f2:13:63:a5:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:88:E7:F9:2A:06:C4:45:E9:A3:12:73:94:4F:95:D7:C0:55:A3:53
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d53491bc-c995-40aa-b532-7c3c0d39d244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c40::/45

    Signature Algorithm: sha256WithRSAEncryption
         1d:26:49:89:e6:88:34:86:64:98:29:4f:b8:f5:20:18:7e:ba:
         d2:09:36:80:cd:80:aa:0d:a2:81:a6:8f:49:cd:e2:4f:74:2f:
         e1:fd:fc:4c:e5:09:3f:7f:33:47:c8:6a:cc:c3:4b:3c:5f:1c:
         d9:b2:f5:10:8c:5c:12:ef:25:04:a5:24:82:95:64:d5:83:e1:
         df:ca:77:cd:49:15:64:14:af:1e:8b:70:8a:71:ce:f0:94:45:
         92:1b:ba:e3:85:dd:ca:b9:2b:43:0f:49:ea:ae:b5:55:ac:b0:
         53:e8:b3:29:64:6e:e3:0f:c2:0a:4b:e3:a5:77:88:22:ae:46:
         ee:89:d1:49:fb:65:eb:62:24:ef:08:1e:67:f2:da:29:f3:fd:
         88:02:41:e7:4c:f6:11:c2:ed:38:f6:e3:2d:a7:aa:cb:7c:26:
         2b:0b:10:38:ea:6b:7a:b3:ba:a7:82:0f:5a:c7:59:8e:59:1c:
         e6:64:1f:48:c2:bd:5c:82:53:02:98:e6:47:7d:4e:eb:c7:4f:
         72:cb:3b:d7:4d:2d:ba:70:45:39:aa:10:a6:b3:ea:b5:d1:bb:
         7b:85:9a:69:2a:89:43:21:79:5c:e0:6b:04:c0:7f:54:95:6f:
         33:51:4d:f0:35:e4:4a:b0:6f:8e:14:14:df:b2:2c:52:4e:bf:
         43:d7:4a:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:46:19 2025 by rpki-client