This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
File:                     402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa (raw, json)
Hash identifier:          Bo98LsIGBrdHQp8nysDhLTjT1e8VoR/DOMVfNn1Klh8=
Subject key identifier:   47:F6:7C:92:D4:A6:E0:12:14:72:17:5F:21:98:C9:CB:BC:1A:6F:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       654D6EB685EDE3F804918336D0C710C083BC0835
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
Signing time:             Sun 07 Dec 2025 00:30:54 +0000
ROA not before:           Sun 07 Dec 2025 00:30:54 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:7400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:6e:b6:85:ed:e3:f8:04:91:83:36:d0:c7:10:c0:83:bc:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:30:54 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=f4919568fef12f274816abf559ccad5c9cba7e28ed51975a8292477e8ba67732, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a1:cb:1e:ee:8b:c1:0e:5c:bf:d1:c8:22:8c:
                    7e:df:1f:45:b8:8c:66:d8:7a:7a:bf:00:ed:69:2b:
                    fc:0d:40:69:bb:96:bc:d7:0f:eb:01:1a:0f:c1:f2:
                    c0:e9:c8:3e:0e:c4:49:af:e0:a4:78:88:b2:b0:91:
                    0b:a7:af:7b:d8:e7:aa:46:72:4e:6c:6f:1d:6b:bc:
                    ea:87:d4:f2:1a:df:c7:d5:f9:32:c2:c1:14:90:b6:
                    de:5f:d8:40:c2:c3:61:a9:0e:8c:2d:6e:1e:43:8f:
                    70:b3:64:45:6c:cf:4c:ae:4a:db:47:cc:63:18:3b:
                    bf:51:79:c0:6e:c2:c6:f9:a6:8d:c0:d8:a8:89:df:
                    8a:f7:3f:b2:e5:1c:7d:8d:56:ed:7f:c8:65:61:8f:
                    2d:9d:e0:cb:db:a5:e1:55:e5:b3:e8:b0:85:bb:ed:
                    c9:17:98:00:42:f4:bc:fa:1a:2e:4c:56:3e:a3:15:
                    07:ce:13:27:a8:b7:f5:30:5c:61:ac:8e:61:f6:97:
                    0d:bc:ef:0b:7d:ae:0b:34:a0:01:d2:a5:8f:e7:95:
                    fe:78:6f:37:7d:69:5d:ca:d4:3d:ca:d7:34:9f:9e:
                    dc:34:f5:11:30:ec:f5:3c:85:54:83:cc:3d:58:6d:
                    a2:6f:ba:4c:1c:52:4f:45:76:43:c8:25:b0:93:e8:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F6:7C:92:D4:A6:E0:12:14:72:17:5F:21:98:C9:CB:BC:1A:6F:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:82:2f:35:7d:da:d0:92:03:50:2e:01:5d:c9:16:43:ed:4c:
         04:81:93:9a:5f:dd:dc:ee:45:59:29:9d:45:d8:ce:95:76:98:
         66:cf:8c:5d:93:44:64:e1:db:d1:45:1f:c1:73:97:35:4a:70:
         79:17:be:c3:8b:bc:d9:84:1f:bf:b6:5d:52:bf:61:e2:66:6f:
         8c:59:d1:7e:34:86:54:d3:ac:1f:19:01:28:d8:70:60:4e:c1:
         f1:c5:2c:04:53:f8:18:22:9f:14:b3:93:31:93:9f:fb:41:f0:
         63:08:a1:6b:03:5d:7b:13:37:9e:ba:af:b0:07:62:00:e2:5d:
         07:16:63:37:c4:91:31:3d:92:39:ce:db:1b:5b:00:46:cf:1d:
         15:ea:13:08:4e:9c:1c:9b:33:ff:57:ac:d3:2c:a6:e9:23:f5:
         f0:5f:50:c1:78:6e:65:48:c5:5d:c3:63:00:1e:05:d3:ff:01:
         03:4e:9c:b9:63:f8:a6:40:2a:dd:2b:c7:8d:9c:4a:7d:af:9f:
         16:7f:f6:56:3c:c5:c2:a5:83:8f:e9:5a:39:6c:35:74:09:f7:
         f4:86:8a:a1:e9:20:9d:6d:f6:37:c9:ab:52:9c:8c:36:c7:bb:
         75:6d:db:f7:ee:74:68:75:4a:7d:67:d8:e0:47:2a:31:51:72:
         15:b6:1d:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jan 2 11:06:22 2026 by rpki-client