This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06ef9a-306c-48a7-a898-08249a2104fa.roa
File:                     2a06ef9a-306c-48a7-a898-08249a2104fa.roa (raw, json)
Hash identifier:          77zBWVbjjaEoPF8OXvKzO8g6HeNoHrqgOoEgDBUVpSE=
Subject key identifier:   A0:DC:87:3E:07:3D:9B:D9:0B:87:A5:2E:6A:54:E1:CE:51:32:1F:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A08A67062D00C23522D0916450CC83251662FC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06ef9a-306c-48a7-a898-08249a2104fa.roa
Signing time:             Sat 15 Nov 2025 00:30:39 +0000
ROA not before:           Sat 15 Nov 2025 00:30:39 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f60:2000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:08:a6:70:62:d0:0c:23:52:2d:09:16:45:0c:c8:32:51:66:2f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:30:39 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=843fbdc9272d74d30ae258fac4687cb8178b064dea4be34ed908c8de4f10abc3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:7b:87:37:28:17:8e:04:60:71:cf:75:58:
                    4f:69:27:26:90:b5:be:a7:9a:ed:1c:6b:0d:b0:36:
                    1d:8b:f6:d7:43:0c:a5:76:b4:bb:67:61:03:ff:38:
                    31:4b:db:f1:5c:75:f4:f8:72:6f:e3:15:9d:1d:4a:
                    c3:5d:a1:49:49:03:36:15:b4:4f:93:41:0d:a6:75:
                    49:47:6a:9a:69:92:46:71:20:16:5b:fb:2d:7b:69:
                    f3:21:67:79:8b:2b:49:e5:50:e9:bb:ab:eb:93:2d:
                    75:23:2e:f4:da:a7:28:4d:ef:b6:0d:ec:3b:b2:d7:
                    34:3f:17:b6:d8:09:29:dd:0d:64:4f:38:ca:96:83:
                    f0:c0:3e:67:88:a4:1f:fc:32:3b:8d:27:07:62:58:
                    54:1e:54:7f:a5:07:fc:52:dc:62:a3:4a:f4:89:d6:
                    61:e7:45:65:6b:a3:46:1c:6c:5f:9c:e7:d1:14:2c:
                    8f:08:75:e0:be:b6:62:f8:5d:76:dd:ab:c3:f6:1d:
                    05:b7:c8:1f:04:15:62:69:28:79:09:5f:73:91:fe:
                    a0:79:a4:9c:96:89:56:b8:02:55:dd:26:f7:fa:e0:
                    f6:95:2b:68:e6:cc:03:9f:37:b9:91:35:f2:8b:a4:
                    58:d8:75:73:49:b0:00:75:e6:a3:37:4b:05:63:c9:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DC:87:3E:07:3D:9B:D9:0B:87:A5:2E:6A:54:E1:CE:51:32:1F:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06ef9a-306c-48a7-a898-08249a2104fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:98:de:70:de:86:6b:47:70:63:20:f4:40:b1:6d:af:65:47:
         56:2f:74:3d:b1:56:ad:b5:07:a2:22:d2:dc:bd:6c:11:7e:84:
         79:cf:3c:e3:42:df:91:1d:8c:93:3e:19:fd:cc:50:48:95:54:
         02:cd:c7:30:e6:ce:c2:e6:07:e3:b0:bf:26:9a:0c:4b:cb:86:
         d4:65:fa:b1:62:58:9b:eb:b2:cf:b4:d0:b2:20:d0:66:c7:be:
         fb:1a:64:f8:ce:7b:94:39:74:ca:fd:c0:38:d6:ff:44:b2:a2:
         2a:d4:40:a1:11:e6:9d:db:30:e5:d8:4e:13:d7:43:89:91:9c:
         27:43:7d:a4:43:cc:5d:85:78:2b:37:80:1a:f8:10:d8:75:08:
         d4:55:21:17:d6:39:2d:f4:2e:8b:05:62:9f:83:05:79:08:b0:
         c6:6f:7d:3c:67:86:ac:a7:1e:bd:fd:59:64:cc:e4:f5:3c:b1:
         1b:ec:e9:4a:b0:17:94:f6:61:19:06:56:fe:bc:de:be:6c:7f:
         d1:3f:50:c4:34:1f:35:a4:4f:61:a1:b2:49:77:6b:b8:64:97:
         a3:c4:e9:28:46:86:3a:ab:ff:92:5f:07:20:71:86:06:ba:b5:
         3e:5f:30:94:98:ae:6a:db:da:9d:60:4a:ee:ae:e1:4a:12:e6:
         6b:86:35:15
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUWgimcGLQDCNSLQkWRQzIMlFmL8MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE1MDAzMDM5WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NDNmYmRjOTI3MmQ3NGQzMGFlMjU4ZmFjNDY4N2NiODE3
OGIwNjRkZWE0YmUzNGVkOTA4YzhkZTRmMTBhYmMzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCOvnuHNygXjgRgcc91WE9pJyaQtb6nmu0caw2wNh2L9tdD
DKV2tLtnYQP/ODFL2/FcdfT4cm/jFZ0dSsNdoUlJAzYVtE+TQQ2mdUlHapppkkZx
IBZb+y17afMhZ3mLK0nlUOm7q+uTLXUjLvTapyhN77YN7Duy1zQ/F7bYCSndDWRP
OMqWg/DAPmeIpB/8MjuNJwdiWFQeVH+lB/xS3GKjSvSJ1mHnRWVro0YcbF+c59EU
LI8IdeC+tmL4XXbdq8P2HQW3yB8EFWJpKHkJX3OR/qB5pJyWiVa4AlXdJvf64PaV
K2jmzAOfN7mRNfKLpFjYdXNJsAB15qM3SwVjyV9XAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUoNyHPgc9m9kLh6UualThzlEyH6YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJhMDZlZjlhLTMwNmMtNDhhNy1hODk4LTA4MjQ5YTIxMDRmYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9gIDANBgkqhkiG9w0BAQsFAAOCAQEAzJjecN6Ga0dwYyD0QLFtr2VH
Vi90PbFWrbUHoiLS3L1sEX6Eec8840LfkR2Mkz4Z/cxQSJVUAs3HMObOwuYH47C/
JpoMS8uG1GX6sWJYm+uyz7TQsiDQZse++xpk+M57lDl0yv3AONb/RLKiKtRAoRHm
ndsw5dhOE9dDiZGcJ0N9pEPMXYV4KzeAGvgQ2HUI1FUhF9Y5LfQuiwVin4MFeQiw
xm99PGeGrKcevf1ZZMzk9TyxG+zpSrAXlPZhGQZW/rzevmx/0T9QxDQfNaRPYaGy
SXdruGSXo8TpKEaGOqv/kl8HIHGGBrq1Pl8wlJiuatvanWBK7q7hShLma4Y1FQ==
-----END CERTIFICATE-----