This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/224d1561-7523-4574-8e26-f5c6b81d2019.roa
File:                     224d1561-7523-4574-8e26-f5c6b81d2019.roa (raw, json)
Hash identifier:          whXKrDXyfivraR25+Rl7+S7mzEfpzpy1nhh/DAUs/Qs=
Subject key identifier:   74:9E:1C:A7:5A:D0:EC:0B:D4:57:0E:21:2D:27:10:72:13:A1:35:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       176AF93BCC31E0ACF4F2FE4DD0AEA15B0E2C9E68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/224d1561-7523-4574-8e26-f5c6b81d2019.roa
Signing time:             Mon 08 Dec 2025 00:00:40 +0000
ROA not before:           Mon 08 Dec 2025 00:00:40 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fed:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6a:f9:3b:cc:31:e0:ac:f4:f2:fe:4d:d0:ae:a1:5b:0e:2c:9e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:00:40 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=60b2689142afaa1f196de51a97914f06880eb204a2e9f76854b6a1fef3780309, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:89:1a:23:8b:a4:fb:9a:02:c4:1f:8f:fa:
                    b7:81:ea:ec:5b:d3:38:e3:ca:30:9e:56:30:9f:a3:
                    c2:b7:16:96:8f:72:e8:10:b8:8c:27:c8:93:21:b3:
                    30:5c:cf:d3:d0:b6:79:ad:c6:60:30:03:7f:4b:59:
                    fe:c5:44:60:d9:34:42:b6:b9:9e:7a:48:6e:d1:b7:
                    ca:5f:34:d6:81:de:f5:21:dc:aa:4e:83:c5:87:b2:
                    84:f2:43:dd:d4:e4:14:87:e6:63:be:72:24:9e:2a:
                    f0:1e:af:93:0f:8d:fc:9a:5e:4f:50:c2:09:79:6c:
                    7c:1c:3f:99:31:2f:f7:79:79:9d:ea:e3:72:4e:81:
                    7d:e5:15:5b:44:f2:f0:9c:ec:bb:21:b7:8b:29:da:
                    99:43:c3:bf:fc:cb:ee:ab:ba:48:07:53:b9:71:58:
                    83:48:b0:b5:41:73:fd:88:dc:9d:00:f0:e6:92:d4:
                    1d:c3:61:7c:ad:bf:4c:1f:66:12:1d:77:18:95:a1:
                    54:51:20:2f:19:b8:f7:f5:22:80:25:72:51:17:eb:
                    73:98:c8:e6:00:2f:08:37:68:b7:ef:00:bf:b7:74:
                    b2:e0:54:2a:bc:14:7d:7a:76:50:a2:03:f0:5b:3e:
                    e0:eb:02:a6:0b:2e:2f:ec:6d:be:ba:a0:e9:27:87:
                    48:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:1C:A7:5A:D0:EC:0B:D4:57:0E:21:2D:27:10:72:13:A1:35:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/224d1561-7523-4574-8e26-f5c6b81d2019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fed:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:e9:ff:57:61:d5:36:82:b3:45:e9:02:1e:3b:51:94:21:cb:
         45:21:68:0e:73:09:c7:c0:55:0b:f9:72:b9:8d:f0:94:9d:6f:
         99:a3:0e:21:ad:98:7c:10:95:d3:fc:b3:ad:ea:99:79:7d:ad:
         14:c7:fe:8e:a2:af:79:f6:ec:6e:b4:8f:ff:c8:51:43:86:f2:
         7f:0a:e9:71:8b:4b:0a:06:6b:8c:6c:33:b7:84:75:96:20:1f:
         b9:80:c4:02:5e:6b:cd:cb:a3:69:cf:29:78:0c:bc:91:60:a0:
         25:b0:9a:a0:65:23:77:9d:84:a3:c0:f2:5e:5e:11:9e:89:64:
         cd:2e:56:2b:e7:a7:91:ea:97:8d:42:53:ae:97:42:31:33:5b:
         ac:74:43:22:dc:46:06:17:5f:9b:83:99:0a:65:11:0a:fb:c2:
         4a:a2:b7:ab:44:c9:ef:c8:fb:c4:04:d5:00:8f:47:d9:55:34:
         cf:76:70:a7:25:f9:76:3a:47:28:49:a1:ac:44:d7:2d:3c:07:
         12:4b:c2:36:0f:15:fc:2e:b9:a2:d3:e5:19:b8:b5:f4:35:5b:
         22:b7:09:e1:36:0d:15:77:12:15:86:03:69:fc:f6:6b:0d:35:
         53:aa:4e:f7:ba:d4:79:9e:73:40:c7:2e:fe:ff:7f:ac:bd:df:
         e9:31:d2:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 19 09:52:32 2026 by rpki-client