This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47f6cffb-2076-405b-a4f0-644d56b8ae91.roa
File:                     47f6cffb-2076-405b-a4f0-644d56b8ae91.roa (raw, json)
Hash identifier:          3Wis7hoInKuyzL+NoVRRU0EVHtr7DYqgG1d0lfZGRfQ=
Subject key identifier:   F0:93:99:2F:00:D1:AA:AF:DB:12:61:C0:57:B7:83:2A:68:20:33:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38367EBFCC6DF039A1FA1B882338FB60C36A94A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47f6cffb-2076-405b-a4f0-644d56b8ae91.roa
Signing time:             Sun 07 Dec 2025 01:30:32 +0000
ROA not before:           Sun 07 Dec 2025 01:30:32 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:36:7e:bf:cc:6d:f0:39:a1:fa:1b:88:23:38:fb:60:c3:6a:94:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:30:32 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=705f791a0e8bf5bbf0fc816f5b2e1c95e7b3127bac24d13f5b43c0957ef4b110, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:81:29:40:73:6f:6a:ac:9a:45:46:36:9d:
                    5d:9f:03:da:77:8d:8b:f6:77:c2:1c:8f:58:96:7b:
                    c6:fa:81:df:df:c4:f2:77:d4:19:2a:6f:52:7a:90:
                    f8:b8:48:01:4e:60:3d:be:f3:92:25:f7:dd:e7:de:
                    4c:12:b7:bf:6b:bc:8c:31:e5:8a:65:37:63:f6:9d:
                    70:79:3c:23:0a:58:5a:ca:a1:0c:44:e7:77:d0:c3:
                    dc:15:96:bf:b9:5b:a5:c2:87:a3:29:e7:f0:a7:cc:
                    66:55:24:87:5b:88:08:24:88:a9:0b:42:c2:94:e4:
                    d2:a7:27:d2:2e:3f:68:7d:62:08:68:6d:d9:2b:35:
                    76:98:10:c1:79:25:be:b1:44:e9:6f:0e:e3:2e:40:
                    be:ee:9a:ba:34:3a:29:cd:cf:53:53:9c:83:4a:fe:
                    59:1c:85:97:30:1e:35:a3:df:22:7a:fe:94:50:33:
                    23:6a:99:f5:80:bd:72:65:f9:54:3c:53:94:8f:07:
                    00:99:54:fd:a4:17:46:f5:4b:19:39:18:cf:ee:5f:
                    e2:40:53:2c:fb:df:f1:1a:0a:09:4d:40:22:36:fd:
                    de:39:24:9a:c1:87:0e:5e:a4:72:4e:41:15:e0:ea:
                    c5:0f:41:55:d3:63:93:70:2d:a5:bd:a3:05:59:34:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:93:99:2F:00:D1:AA:AF:DB:12:61:C0:57:B7:83:2A:68:20:33:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47f6cffb-2076-405b-a4f0-644d56b8ae91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c::/36

    Signature Algorithm: sha256WithRSAEncryption
         cd:33:ef:46:8c:0e:12:9f:17:fa:4e:f2:88:e6:d1:c0:fb:ac:
         a5:41:65:d4:93:34:35:ac:80:9e:d4:d1:5d:b1:d5:ce:ba:ee:
         9d:0a:95:67:ac:e4:7e:65:a9:db:64:dc:76:f7:b9:5f:fb:ec:
         4d:21:2a:b7:44:92:85:77:db:a8:2e:3e:0f:79:c0:6c:fd:c3:
         0d:c5:ff:53:0f:60:1b:b7:b4:31:df:7d:c5:61:a9:05:0a:92:
         1b:90:89:27:49:0a:04:55:22:19:2f:28:20:f0:b9:54:38:e5:
         60:3a:a1:f9:7f:c0:9c:6a:49:35:d8:a6:66:44:1d:43:81:e1:
         1b:64:a6:dc:c7:90:a6:6a:f5:9b:4f:5b:21:62:e8:2d:47:bc:
         a5:89:a3:75:5a:d3:7c:11:a1:b9:40:78:36:f7:56:54:43:de:
         c8:59:71:86:36:fc:ee:15:2e:75:30:9e:82:ab:41:83:a5:59:
         3a:84:a7:a6:83:c4:59:3d:91:3e:37:55:e2:e2:d3:bf:5f:60:
         50:91:ae:be:aa:77:6a:2c:e8:32:77:2d:89:21:5a:89:43:1a:
         66:f8:ca:d5:ad:d4:4b:99:a3:de:90:ca:80:fb:5b:9d:42:84:
         68:0f:13:52:d3:79:f7:13:d3:7b:9a:5c:45:de:d8:56:bf:3c:
         e4:58:2e:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jan 2 11:03:01 2026 by rpki-client