This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
File:                     4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa (raw, json)
Hash identifier:          bOloJWMQm7kXMifNA1xskMpU+rFxjoFD3r/7b46L7ZE=
Subject key identifier:   00:51:E6:A6:F4:CD:55:0C:D0:E0:4A:34:F3:22:5A:3B:A5:0D:B8:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B7BED66E8EC99F31919C3D6348D91BAD5C4CC11
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
Signing time:             Sat 22 Nov 2025 00:21:43 +0000
ROA not before:           Sat 22 Nov 2025 00:21:43 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fa0:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7b:ed:66:e8:ec:99:f3:19:19:c3:d6:34:8d:91:ba:d5:c4:cc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:21:43 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=43ae2a4554321b020ecfb61663cf4f5b445dcbc25f223855f98c98491607f2a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:0d:38:41:8a:ea:37:b8:50:1d:11:c3:42:
                    3b:42:d8:c1:39:ef:1f:3d:12:0c:55:8d:3d:e5:ef:
                    07:c5:e7:3b:6e:8b:eb:f4:46:8d:81:d5:33:d8:62:
                    07:8e:f8:64:07:2e:fc:db:11:aa:ee:d8:51:dd:ce:
                    66:0f:1d:2b:9f:63:58:c4:56:84:c7:ce:4a:30:f3:
                    38:ee:c3:17:97:dc:d1:6b:72:fc:ce:4a:49:63:0f:
                    c3:b8:24:65:07:0a:84:bf:b4:24:50:02:6c:f3:5f:
                    4a:09:75:00:3b:b4:3c:8f:8a:07:bd:93:31:08:85:
                    30:de:7b:8a:b7:59:d1:c7:4c:2a:54:b9:6c:45:75:
                    64:af:fd:aa:47:f6:d9:37:a8:f1:9e:44:88:b8:4d:
                    8d:d0:86:d7:d0:d3:cd:36:cd:b0:bc:55:e6:be:b2:
                    c7:f4:51:54:ed:21:e5:50:3a:15:54:f0:bf:90:e7:
                    e4:7e:d1:22:bd:b2:cc:06:56:d1:4a:f3:64:a2:3a:
                    ec:b7:23:a9:1d:9a:01:51:11:bd:fb:95:a9:6e:35:
                    f8:44:f7:d0:c9:e1:ac:1b:6a:b9:77:47:0a:97:e2:
                    10:84:8a:0e:66:91:ff:f4:c8:60:1d:62:9f:4f:e7:
                    83:1c:7b:72:05:b8:dc:7e:58:9a:2b:1a:b3:f5:46:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:51:E6:A6:F4:CD:55:0C:D0:E0:4A:34:F3:22:5A:3B:A5:0D:B8:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fa0:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:1d:db:43:66:1e:92:c6:e0:b4:92:c4:26:fc:4c:39:99:c5:
         95:9b:bc:04:0d:9c:98:44:df:be:d5:84:b8:76:e2:9f:73:22:
         49:19:ce:ac:65:c9:9b:1b:88:f6:c2:79:9c:7f:8f:16:24:71:
         e1:50:58:83:3d:3d:f6:51:06:d1:55:85:2d:62:52:35:86:44:
         4f:e0:e2:49:94:cd:cb:6e:a3:8c:a8:b6:24:f6:2b:da:1d:80:
         a7:a3:ff:88:fe:19:50:5e:94:fc:66:f2:1d:38:e7:b6:ac:ec:
         aa:5f:6d:ca:8a:f2:15:00:2b:14:e1:81:24:dd:bf:3f:4a:57:
         15:64:ec:98:c5:ed:0f:14:9f:52:3e:40:51:00:72:96:59:ad:
         27:63:c6:ce:96:59:8a:14:0f:18:2a:5e:98:e2:dd:de:79:06:
         3f:df:c1:16:73:19:b9:62:76:e8:1d:9b:72:e4:6b:2d:96:91:
         f1:d9:b2:d0:26:fd:08:af:d6:00:c0:62:2d:fe:d9:78:ea:c1:
         fc:ea:4f:5b:b2:3d:5a:6e:d2:4f:95:20:8c:e2:fd:db:f5:0d:
         77:be:96:a2:12:15:82:0d:08:37:c5:a9:0c:d9:3f:87:73:c5:
         99:17:19:8f:01:88:3d:b3:20:3e:cd:0d:19:dd:f3:bb:f1:d7:
         18:d8:de:44
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUe3vtZujsmfMZGcPWNI2RutXEzBEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAyMTQzWhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0M2FlMmE0NTU0MzIxYjAyMGVjZmI2MTY2M2NmNGY1YjQ0
NWRjYmMyNWYyMjM4NTVmOThjOTg0OTE2MDdmMmEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBtw04QYrqN7hQHRHDQjtC2ME57x89EgxVjT3l7wfF5ztu
i+v0Ro2B1TPYYgeO+GQHLvzbEaru2FHdzmYPHSufY1jEVoTHzkow8zjuwxeX3NFr
cvzOSkljD8O4JGUHCoS/tCRQAmzzX0oJdQA7tDyPige9kzEIhTDee4q3WdHHTCpU
uWxFdWSv/apH9tk3qPGeRIi4TY3QhtfQ0802zbC8Vea+ssf0UVTtIeVQOhVU8L+Q
5+R+0SK9sswGVtFK82SiOuy3I6kdmgFREb37laluNfhE99DJ4awbarl3RwqX4hCE
ig5mkf/0yGAdYp9P54Mce3IFuNx+WJorGrP1RucLAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUAFHmpvTNVQzQ4Eo08yJaO6UNuEQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRlYjFkNDVjLTBiZmMtNDZhMy05N2M2LWQ3M2IyOGNkOGEwZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+gUDANBgkqhkiG9w0BAQsFAAOCAQEAWR3bQ2YeksbgtJLEJvxMOZnF
lZu8BA2cmETfvtWEuHbin3MiSRnOrGXJmxuI9sJ5nH+PFiRx4VBYgz099lEG0VWF
LWJSNYZET+DiSZTNy26jjKi2JPYr2h2Ap6P/iP4ZUF6U/GbyHTjntqzsql9tyory
FQArFOGBJN2/P0pXFWTsmMXtDxSfUj5AUQByllmtJ2PGzpZZihQPGCpemOLd3nkG
P9/BFnMZuWJ26B2bcuRrLZaR8dmy0Cb9CK/WAMBiLf7ZeOrB/OpPW7I9Wm7ST5Ug
jOL92/UNd76WohIVgg0IN8WpDNk/h3PFmRcZjwGIPbMgPs0NGd3zu/HXGNjeRA==
-----END CERTIFICATE-----
Generated at Sat Nov 29 06:27:50 2025 by rpki-client