This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535ea099-1417-4f80-aa37-e10c92ee2b94.roa
File:                     535ea099-1417-4f80-aa37-e10c92ee2b94.roa (raw, json)
Hash identifier:          AyOIU7Iily9IuVJEdsAhgJXEagwOG+m9br5UG688nY4=
Subject key identifier:   6B:16:A1:42:49:8F:AC:93:B9:5E:0D:29:67:69:4C:80:8F:70:24:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0291E6D6FE1BEA39815680D04EBC976ED22D7066
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535ea099-1417-4f80-aa37-e10c92ee2b94.roa
Signing time:             Wed 12 Nov 2025 00:50:09 +0000
ROA not before:           Wed 12 Nov 2025 00:50:09 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f25:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:91:e6:d6:fe:1b:ea:39:81:56:80:d0:4e:bc:97:6e:d2:2d:70:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:50:09 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=f9a05390846157cf7e45007abae5e7d7443f815be80e95b1b0d6a0eb9af4f94f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:e1:73:ac:39:50:8c:3a:4e:0a:ef:6e:4a:
                    0b:d0:ea:bf:27:24:cc:2b:3c:20:6f:fe:60:01:b8:
                    68:2c:90:95:5b:b0:cd:5c:75:6c:58:17:15:b1:c4:
                    e5:5b:b3:82:29:c3:65:7f:c2:3c:62:37:d8:65:f6:
                    b8:c6:27:83:4f:b9:55:2b:a1:f2:e9:d2:1e:6e:b9:
                    6e:24:ec:0d:83:73:15:f8:8a:ee:1d:45:8f:9b:71:
                    72:56:9e:90:89:c1:32:4f:13:c3:61:3c:7c:49:0f:
                    ce:87:9d:88:5d:2d:eb:dc:c9:30:31:55:17:d0:61:
                    be:fd:0a:57:d7:65:d0:87:92:f1:8d:6c:17:0f:4d:
                    b9:30:7d:09:1a:9b:51:05:8c:0e:e0:64:6a:f2:39:
                    1b:2b:8b:b7:5e:23:ba:7d:22:52:96:c3:51:81:88:
                    b7:2e:cc:8a:96:f9:79:86:19:b3:41:77:94:63:66:
                    07:11:88:e5:06:3f:01:02:a0:de:6f:22:7c:ba:0e:
                    9e:ee:74:1d:70:63:b7:48:76:ef:ba:6d:be:78:55:
                    0e:02:18:76:98:4f:70:c3:a2:bd:13:79:ec:65:1a:
                    38:9a:1b:33:c9:4e:ba:39:a9:20:e5:8e:fd:0e:66:
                    9d:6c:ee:a7:f1:ab:56:dc:e7:33:09:5f:ad:81:70:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:16:A1:42:49:8F:AC:93:B9:5E:0D:29:67:69:4C:80:8F:70:24:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535ea099-1417-4f80-aa37-e10c92ee2b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f25:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         47:52:1b:f3:8e:45:21:0c:7e:68:c3:a3:1f:74:87:2d:2b:37:
         15:20:46:41:c2:9d:f8:4b:90:4d:b5:4a:b4:ee:42:87:ec:ee:
         68:44:aa:4d:0a:33:84:ba:85:d2:dc:0b:1c:15:34:33:0d:2e:
         f7:96:20:59:f1:1c:17:ff:fe:57:9c:14:8c:6c:d9:8e:50:20:
         35:df:be:a9:d1:31:38:6c:5f:5f:34:70:cf:dd:41:81:2a:f0:
         b4:5d:97:7e:c2:d6:45:b1:d2:46:87:ba:76:39:6a:1e:d0:6a:
         87:bf:d4:a6:fb:52:2c:17:f5:a2:53:4d:31:a2:d4:12:ee:47:
         24:6b:2a:37:3c:0d:b4:1e:8f:cf:11:a8:f3:26:5a:ef:e4:e4:
         eb:95:f3:0f:56:9c:82:45:90:e1:21:54:8f:be:e1:a5:dc:ef:
         61:ad:46:1a:16:fc:f2:62:ca:c5:5e:71:01:2b:3f:38:d2:c5:
         42:67:dd:76:69:9d:d7:8d:75:a1:05:2c:1b:ac:86:e6:6c:c6:
         a1:73:6d:10:1e:9a:ae:57:74:27:b1:49:f4:cd:a7:6a:36:4d:
         9d:72:5a:e6:bb:b8:f0:87:8e:16:5a:07:37:a7:5f:11:8c:53:
         91:42:eb:7b:9f:15:97:c9:b0:72:fc:56:d3:ad:aa:dd:f6:e7:
         15:22:af:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----