This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3f4c0304-0805-46b0-8efe-07d1cf610908.roa
File:                     3f4c0304-0805-46b0-8efe-07d1cf610908.roa (raw, json)
Hash identifier:          JhZdUd10FYRscV5fCEABATwBxXEv+TN7Jolbyvw3PbE=
Subject key identifier:   96:93:9D:31:7D:62:39:8E:86:2A:55:97:73:CC:B8:4C:C9:A9:7A:6F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       495D79FE71F59B14C97488A762721E5D0B7CEEEA
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3f4c0304-0805-46b0-8efe-07d1cf610908.roa
Signing time:             Mon 08 Dec 2025 01:50:07 +0000
ROA not before:           Mon 08 Dec 2025 01:50:07 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2631::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5d:79:fe:71:f5:9b:14:c9:74:88:a7:62:72:1e:5d:0b:7c:ee:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Dec  8 01:50:07 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=c04ec47e4a8fb7c18c3183f5b6c7a7477e1fce425caa50f19593c66ec9799a12, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:0b:a9:20:53:1c:df:5e:ce:bf:31:ec:32:
                    b3:26:5a:18:e1:bb:0a:b5:fe:d8:67:91:66:d3:3e:
                    25:61:2b:80:f9:58:0e:13:b2:b4:53:71:6b:43:8b:
                    ee:c1:3b:c8:a6:ba:66:b3:dc:d5:f4:77:57:03:91:
                    63:5a:37:64:f5:5a:fc:f7:d1:6f:3e:f4:65:6a:55:
                    15:20:aa:79:f7:bb:2b:c2:a2:cd:c8:8e:b0:44:42:
                    41:40:e5:52:34:c4:88:e1:a5:b7:7b:2a:06:a2:ad:
                    75:42:6e:ca:46:3c:1f:4f:22:6d:b6:73:f0:f9:15:
                    48:5d:3c:15:47:ae:b6:0b:4f:94:31:92:b0:20:41:
                    99:f1:fc:d4:80:16:62:a6:e1:fc:d9:96:9a:cf:96:
                    6c:ff:64:25:da:c6:ac:18:ca:e7:b9:42:24:d2:77:
                    a7:99:b4:07:bd:1e:12:32:91:1d:d1:dc:1c:0d:c9:
                    88:e0:ae:7d:38:50:e9:47:e6:33:96:bb:5a:db:a2:
                    6c:90:dc:8b:ed:1c:7a:3d:b4:a4:54:cb:dc:32:e6:
                    98:8b:69:44:bb:31:f6:a5:60:4d:6e:ef:22:a5:c4:
                    72:e8:42:5e:58:58:23:d1:3d:2a:0a:2f:76:21:c0:
                    64:93:03:29:26:a0:ae:8f:c1:45:1f:bc:00:14:2f:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:93:9D:31:7D:62:39:8E:86:2A:55:97:73:CC:B8:4C:C9:A9:7A:6F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3f4c0304-0805-46b0-8efe-07d1cf610908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:fd:20:13:47:5b:64:d0:e9:df:af:0c:79:5b:f3:50:10:
         6e:6b:75:d8:6a:82:9d:76:c6:17:13:ec:9b:ff:e6:0e:f3:a2:
         da:ef:b2:76:ac:66:43:c4:ae:62:19:cb:0f:ec:f2:24:56:54:
         16:38:29:28:38:af:75:f6:19:d6:ed:2b:e2:1a:d3:a8:e1:1d:
         63:a3:e7:9f:3a:9e:2c:4f:89:f1:76:48:c8:ab:fa:52:84:0d:
         d9:53:22:ea:b5:17:7c:b2:71:28:df:06:0c:f5:c7:aa:18:59:
         12:14:af:9d:8e:7a:41:e5:04:52:05:16:1d:dd:05:a4:bc:68:
         29:bc:46:dc:ed:1a:35:44:0e:e5:8c:6b:d7:2b:d3:07:b0:65:
         d4:a3:87:df:47:2d:87:b4:b2:a5:b2:b3:0d:76:e7:6f:e0:63:
         23:80:50:8d:e4:e0:8b:1b:e1:34:0e:9a:52:34:b9:21:b8:1e:
         7f:37:d7:21:7e:6e:65:d9:8d:5a:01:d2:75:a5:4d:80:d6:ce:
         c3:42:05:ba:d5:e3:b9:51:4e:32:12:76:37:1e:b3:cb:2a:40:
         22:44:9c:99:ad:17:42:d3:9f:11:62:38:46:b2:54:90:31:b2:
         c3:9a:bb:16:a8:ab:04:03:47:ec:69:02:2e:9c:14:12:90:64:
         b3:e4:b5:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 21 03:54:50 2025 by rpki-client