This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/782623ec-d256-4ded-93c7-2ba1b2f03b63.roa
File:                     782623ec-d256-4ded-93c7-2ba1b2f03b63.roa (raw, json)
Hash identifier:          LoniXAGOzEFbeX03LS6pACnZ47acuLBVmYSTnnDSHw4=
Subject key identifier:   6F:89:69:58:2C:6B:14:6C:66:E5:ED:49:54:50:27:80:D5:2A:A9:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       479598ADEDA38FEBA0E24E2EDE191A7A30121C94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/782623ec-d256-4ded-93c7-2ba1b2f03b63.roa
Signing time:             Sun 07 Dec 2025 00:10:49 +0000
ROA not before:           Sun 07 Dec 2025 00:10:49 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1e:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:95:98:ad:ed:a3:8f:eb:a0:e2:4e:2e:de:19:1a:7a:30:12:1c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:10:49 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=3f7f870f1ee58222eff6b470cd66d0278238148486a4b27eae196ad05780f659, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:db:ca:70:57:1e:17:46:04:b5:f9:36:5f:
                    41:a2:4f:44:ce:4e:07:31:38:6a:bf:e4:f8:d6:c9:
                    3e:bb:de:b3:40:8e:c3:31:4e:09:17:36:fe:06:74:
                    38:e8:18:bd:0a:94:5d:11:c3:b5:49:fb:eb:2f:ae:
                    b8:98:b7:83:a5:a6:5e:62:28:a6:95:60:8e:32:48:
                    b1:e7:d4:16:9f:be:ec:d0:dd:25:ed:bb:16:b5:e2:
                    5f:87:6e:7a:2d:93:fa:5b:35:f6:de:59:a0:20:f4:
                    d3:b4:ed:47:76:48:6f:ec:a2:34:34:07:be:4d:44:
                    ad:23:4c:d1:b9:b5:1a:16:33:0f:c0:ed:4a:e3:1c:
                    46:26:cf:66:19:8e:38:25:9f:70:91:61:26:13:ac:
                    2a:69:ce:73:57:19:d9:e2:58:ba:25:f4:9a:b8:0f:
                    29:00:6e:c7:5a:e8:e1:a3:14:89:84:c0:0c:63:a2:
                    d0:42:4c:57:e2:8d:69:2f:fe:ef:e8:7f:70:bf:83:
                    87:da:20:b4:f7:b0:60:42:77:bf:76:fa:03:af:fd:
                    ec:b0:d8:c8:fe:6c:bd:70:61:26:37:42:53:4d:c6:
                    9d:89:5f:6c:36:bb:49:15:1b:33:11:a0:6d:66:74:
                    f7:90:ac:eb:b5:80:a8:4a:90:eb:36:97:74:55:06:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:89:69:58:2C:6B:14:6C:66:E5:ED:49:54:50:27:80:D5:2A:A9:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/782623ec-d256-4ded-93c7-2ba1b2f03b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1e:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:2f:a0:30:63:19:eb:c5:c0:94:c5:a5:1b:27:39:0a:a9:
         9b:67:a4:ef:dd:40:f1:60:5e:92:ec:b4:7b:d0:7e:d8:16:4a:
         61:ef:db:13:29:b6:53:fd:7c:37:60:d3:0d:3d:10:d2:ef:02:
         79:c1:bb:33:d1:8f:91:bb:c2:01:ce:29:9e:56:c5:82:88:ea:
         0f:dc:66:04:87:c6:04:2c:54:0a:fe:83:d2:4c:a3:6f:68:f5:
         9c:8d:f8:59:e6:22:d7:a7:dd:f8:ca:53:b9:76:69:31:d5:3a:
         9a:69:2b:9b:ae:f5:06:f3:80:f0:60:cc:44:cd:5e:64:6d:7e:
         1e:c3:96:42:12:68:8f:8e:49:84:ad:76:c0:ae:03:c0:90:fa:
         81:dd:0c:ae:57:56:ff:c1:21:eb:93:9d:d1:cf:89:96:cc:8a:
         d2:74:4f:9d:da:a5:38:81:cb:d1:47:2c:1e:cb:28:0e:98:a9:
         3c:64:6c:dd:fe:1f:cf:cc:25:be:d8:10:c8:2f:b0:6e:74:fa:
         24:40:b8:75:06:98:5b:95:5e:6b:8c:47:87:2d:59:b3:14:de:
         19:47:b8:49:ce:72:ce:0a:37:e9:81:39:56:2c:c7:a3:f5:b0:
         96:a5:58:d2:19:5b:1d:23:0a:f4:02:50:43:74:17:c6:56:c3:
         dd:e2:71:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:28:41 2025 by rpki-client