This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa
File:                     d7e60239-def6-4254-bb11-383c707d64aa.roa (raw, json)
Hash identifier:          FAQ3DRJK1r4Rt7kQWVu7WxVUPMWsND5ga6CaIbZ1woc=
Subject key identifier:   C8:5D:7B:FF:A3:65:2A:1E:97:C3:10:D3:CA:51:DE:A4:37:6E:79:9B
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       20A08BB921768E88E1659F7CD794A241A55BA03C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa
Signing time:             Wed 10 Dec 2025 04:30:32 +0000
ROA not before:           Wed 10 Dec 2025 04:30:32 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:549::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a0:8b:b9:21:76:8e:88:e1:65:9f:7c:d7:94:a2:41:a5:5b:a0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Dec 10 04:30:32 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=dd2e11a8afc1801dd1c0a1c289a8888e906f0365ee28c7f8bbaa7ed10e80b804, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:79:8f:5f:ee:68:e1:ad:94:f7:db:17:a4:69:
                    0f:87:32:b2:ae:1f:2e:76:b9:0c:9b:38:1c:37:74:
                    e4:41:67:55:00:96:01:bf:34:67:b1:86:51:6a:b8:
                    01:32:2f:1c:fb:ae:ed:30:e2:37:66:bf:8c:d5:dd:
                    d4:98:25:64:23:fb:6b:d5:6d:c3:f1:c5:ee:e7:91:
                    45:d7:89:21:eb:0d:4b:2d:83:1f:c2:55:b5:53:09:
                    63:09:b7:a2:d0:2a:6c:66:6c:e4:06:9f:87:f7:2d:
                    ef:bc:10:7c:63:80:d9:fa:88:16:a2:c5:96:a2:05:
                    6e:89:2a:b7:96:f1:9f:e5:01:0b:c7:47:5a:72:eb:
                    1d:a4:16:13:6b:a8:8d:f2:8d:d7:ba:65:ff:52:a9:
                    bc:75:46:8c:75:73:b8:f9:4a:11:6a:9a:6b:a5:06:
                    1c:57:45:a9:1b:89:22:98:88:9d:69:1f:30:34:20:
                    6b:51:02:89:12:8d:19:67:e0:fb:da:a2:97:ed:2f:
                    66:ef:30:ae:bb:c4:c7:ff:d8:3b:e6:76:b6:2e:f3:
                    50:f1:e7:38:49:2c:74:64:ba:cb:24:7e:70:3c:87:
                    6f:39:5e:8c:7e:cf:db:a1:0e:bb:03:18:18:b4:5d:
                    2a:be:d1:b3:68:52:1a:5f:8d:b4:ed:44:8a:b1:d6:
                    e0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5D:7B:FF:A3:65:2A:1E:97:C3:10:D3:CA:51:DE:A4:37:6E:79:9B
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:549::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:f8:df:80:bb:a5:2a:53:d4:bc:de:b5:5e:e8:66:17:d6:
         d5:ec:1d:5d:ea:44:4d:95:d3:28:94:3e:49:57:cc:79:2c:a1:
         d6:b7:01:4d:f8:d2:3d:3e:78:00:fa:24:4b:22:34:a3:86:4a:
         21:cc:07:31:28:00:80:ae:e6:c9:b9:a8:8a:43:8c:4d:94:19:
         fc:d2:c4:73:42:c9:18:5c:86:b0:b7:88:2f:e8:61:34:7d:fe:
         3e:ca:fd:6a:d0:ed:ee:56:86:ec:34:04:ce:29:fc:7e:a6:7f:
         92:71:73:bb:1a:04:ac:97:96:06:97:46:86:de:c8:8d:02:91:
         7e:dd:ce:bc:20:3c:d6:c0:ee:e6:3b:a9:b9:c1:65:89:12:b8:
         73:33:e7:21:ee:40:5e:32:b8:ee:28:01:19:15:03:0d:f0:11:
         6f:60:a1:49:c2:ab:bf:a6:2b:70:f1:1a:25:e8:b9:55:13:bd:
         48:11:4f:0c:82:fb:96:f8:c1:66:67:66:57:7a:a7:40:15:56:
         b7:a7:8b:7e:8a:0b:0b:61:86:cb:0e:51:12:b9:75:2d:f9:9e:
         06:07:38:36:d9:47:41:2b:46:89:90:01:9e:12:fa:6e:01:01:
         3b:73:4c:d3:0e:05:6b:8a:9e:aa:d4:c9:79:2f:46:70:e1:80:
         eb:ed:99:4f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIKCLuSF2jojhZZ9815SiQaVboDwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMjEwMDQzMDMyWhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZDJlMTFhOGFmYzE4MDFkZDFjMGExYzI4OWE4ODg4ZTkw
NmYwMzY1ZWUyOGM3ZjhiYmFhN2VkMTBlODBiODA0MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZeY9f7mjhrZT32xekaQ+HMrKuHy52uQybOBw3dORBZ1UA
lgG/NGexhlFquAEyLxz7ru0w4jdmv4zV3dSYJWQj+2vVbcPxxe7nkUXXiSHrDUst
gx/CVbVTCWMJt6LQKmxmbOQGn4f3Le+8EHxjgNn6iBaixZaiBW6JKreW8Z/lAQvH
R1py6x2kFhNrqI3yjde6Zf9Sqbx1Rox1c7j5ShFqmmulBhxXRakbiSKYiJ1pHzA0
IGtRAokSjRln4PvaopftL2bvMK67xMf/2DvmdrYu81Dx5zhJLHRkusskfnA8h285
Xox+z9uhDrsDGBi0XSq+0bNoUhpfjbTtRIqx1uDXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUyF17/6NlKh6XwxDTylHepDdueZswHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2Q3ZTYwMjM5LWRlZjYtNDI1NC1iYjExLTM4M2M3MDdkNjRhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABUkwDQYJKoZIhvcNAQELBQADggEBAG29+N+Au6UqU9S83rVe6GYX
1tXsHV3qRE2V0yiUPklXzHksoda3AU340j0+eAD6JEsiNKOGSiHMBzEoAICu5sm5
qIpDjE2UGfzSxHNCyRhchrC3iC/oYTR9/j7K/WrQ7e5Whuw0BM4p/H6mf5Jxc7sa
BKyXlgaXRobeyI0CkX7dzrwgPNbA7uY7qbnBZYkSuHMz5yHuQF4yuO4oARkVAw3w
EW9goUnCq7+mK3DxGiXouVUTvUgRTwyC+5b4wWZnZld6p0AVVreni36KCwthhssO
URK5dS35ngYHODbZR0ErRomQAZ4S+m4BATtzTNMOBWuKnqrUyXkvRnDhgOvtmU8=
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:20:04 2025 by rpki-client