This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/895c8025-23be-48f6-aa0d-8f761b1c5bb1.roa
File:                     895c8025-23be-48f6-aa0d-8f761b1c5bb1.roa (raw, json)
Hash identifier:          xd7QJs6aSSWL4fHy6TpCh2a9To2u2hnqLWxUra6e4+0=
Subject key identifier:   7E:B4:5F:E7:BA:01:6B:FE:D4:BE:4C:AB:ED:D3:9D:B1:E5:7D:E2:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       417035B18DA86B7781832C34153882CBA71A6164
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/895c8025-23be-48f6-aa0d-8f761b1c5bb1.roa
Signing time:             Sat 22 Nov 2025 00:30:11 +0000
ROA not before:           Sat 22 Nov 2025 00:30:11 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:8508::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:70:35:b1:8d:a8:6b:77:81:83:2c:34:15:38:82:cb:a7:1a:61:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:30:11 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=8df3779a64a4f4df553e26fa02791f9b4e29031527f3bcf57082d91d6ab66334, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:84:70:5e:44:7b:8e:2b:e8:9c:1d:af:82:
                    4c:7b:0c:7b:50:f2:09:7c:1e:08:fc:f6:4b:a8:41:
                    c5:fa:57:4f:b1:b3:e6:3a:8a:03:c9:59:07:e0:19:
                    a4:11:0d:2e:73:57:3e:a8:17:5b:fe:6f:16:16:72:
                    11:6a:73:aa:b1:8c:8f:f7:bc:e5:e0:4b:dd:2f:9e:
                    ff:88:dd:37:d9:01:2a:74:bb:13:12:a3:5f:61:15:
                    46:6c:41:a9:42:52:0d:3a:3e:22:ed:b1:23:d5:46:
                    a7:32:17:6b:e4:ec:80:f8:9d:31:ae:80:ed:dd:00:
                    8d:61:e8:6e:fc:40:65:8c:b1:bc:c7:61:a6:f9:50:
                    1f:6f:97:14:52:c6:9b:29:c5:3b:c5:a4:23:8b:10:
                    a1:63:77:60:4c:83:5a:5e:98:72:fb:3b:97:79:b1:
                    13:95:98:e9:12:ad:bc:3f:d4:78:60:a7:e4:59:5d:
                    55:c9:17:7d:3e:f8:c1:a4:d5:75:ab:cc:14:7a:85:
                    2d:de:11:c9:26:33:52:09:75:98:b7:e5:56:96:31:
                    11:92:51:cf:25:01:c5:af:9d:26:f0:4e:f6:a1:ce:
                    4a:66:57:75:61:99:ae:42:f7:83:3e:20:3c:f8:e2:
                    d3:25:e4:e3:ee:bf:30:ac:ad:48:29:b6:86:cd:e3:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B4:5F:E7:BA:01:6B:FE:D4:BE:4C:AB:ED:D3:9D:B1:E5:7D:E2:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/895c8025-23be-48f6-aa0d-8f761b1c5bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8508::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:96:46:b4:a6:4f:1a:e9:c0:54:31:58:4a:ce:e5:f3:8f:c9:
         14:cf:20:15:65:3d:b1:21:87:dc:01:13:bc:e8:d5:ae:08:fb:
         e3:4a:41:fa:85:71:95:9f:aa:09:38:e3:df:5a:72:9d:e9:e3:
         51:93:41:64:f8:7b:9c:91:b7:25:14:3f:49:5b:79:24:b5:4f:
         12:09:3e:df:91:d4:2c:d5:56:f6:61:15:84:cf:71:8e:63:f7:
         a1:46:32:42:09:34:ff:cf:88:45:42:2e:10:4b:eb:87:b6:26:
         05:50:fa:a1:0d:90:bf:4b:0d:5b:5d:fc:54:ef:7f:73:48:54:
         34:1a:86:98:39:4b:43:e8:60:8f:91:38:fe:f4:65:08:a8:c4:
         83:f9:11:a3:5e:44:1c:6f:e5:06:36:9f:d3:76:9a:de:17:d2:
         a7:3a:ca:dd:17:ec:d5:33:9e:09:f8:79:a0:12:89:08:5b:2b:
         8c:bf:39:3e:c2:5a:92:c1:a7:d1:1b:32:85:77:8f:29:cd:d3:
         51:42:32:b1:9f:09:b2:b5:10:9c:d3:37:a4:c5:17:10:7c:eb:
         8a:6c:40:76:99:7c:aa:f0:ad:60:c8:f6:b1:a9:42:9e:8f:6d:
         e4:00:89:8f:3c:8d:92:a6:6e:8a:aa:50:48:5f:4f:1c:cd:f8:
         2a:16:5c:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 29 20:28:37 2025 by rpki-client