This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa
File:                     a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa (raw, json)
Hash identifier:          prAQVok6gzUydgREVvR8R3H8PLtT2brIY3Eu195/7U4=
Subject key identifier:   47:7B:53:2B:C9:A6:42:57:DE:62:3C:14:C8:79:C9:56:1F:DE:75:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AEA56314827FAC16132D86DA9D73B85FEBE232F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa
Signing time:             Tue 11 Nov 2025 01:21:27 +0000
ROA not before:           Tue 11 Nov 2025 01:21:27 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f38:8040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ea:56:31:48:27:fa:c1:61:32:d8:6d:a9:d7:3b:85:fe:be:23:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:21:27 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=b862d55de7883232174b8439fd9507d91ff37a483cc525b3e9b2b93208b20595, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:2b:5f:85:94:cd:3a:83:7d:f6:ce:56:20:
                    84:fb:84:d3:32:59:5a:98:a7:e9:eb:81:f2:8a:a5:
                    7f:f7:60:9b:03:0f:48:3e:d1:63:13:81:02:ab:f2:
                    86:35:9c:6a:01:1a:fb:fa:f8:ca:a0:f2:9d:3f:98:
                    d0:33:3b:69:ff:37:18:03:45:2e:16:b0:a3:d6:81:
                    5d:fd:5c:d2:46:29:7d:51:30:31:c9:8b:b0:55:31:
                    11:01:3e:30:2b:02:f4:d5:29:c7:b0:5c:68:d9:93:
                    8a:23:87:6e:94:b6:b1:46:1f:62:f2:e2:5b:ef:6a:
                    28:20:9f:63:ed:cc:6d:d5:87:95:8d:be:58:47:47:
                    27:18:4d:84:c3:c2:48:a5:1f:98:36:df:9f:0f:bd:
                    74:2d:74:11:b3:2a:aa:ac:61:6f:0c:c7:63:0c:90:
                    b9:29:27:13:fc:a0:5e:3e:7d:7c:f8:30:57:eb:0c:
                    12:60:e8:3c:e1:24:92:07:eb:ca:70:e8:e5:a2:cd:
                    03:58:33:92:f8:b7:aa:51:a0:81:fa:e9:a0:94:d8:
                    7d:e7:b0:1a:3f:40:55:d6:5c:db:dc:e6:f8:49:d9:
                    cb:a8:96:0e:f1:8b:3f:e5:9d:82:9b:38:13:25:99:
                    50:ce:f0:1e:b0:76:e4:2e:9e:d2:07:88:97:5a:be:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7B:53:2B:C9:A6:42:57:DE:62:3C:14:C8:79:C9:56:1F:DE:75:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:d0:e2:ef:ba:21:38:c6:19:0e:6f:10:f3:c3:6f:79:53:
         be:1f:a9:8b:fd:4a:c1:d0:2b:47:64:52:d0:6a:76:03:c3:41:
         7f:1c:10:be:27:d6:ab:e0:e7:ae:19:86:7e:87:b6:d4:27:63:
         1a:ca:c2:e9:04:50:7a:57:4b:f4:0f:3d:b1:44:2f:88:3f:d2:
         9d:d6:62:59:f1:1c:e9:2f:f6:c1:59:1b:dd:60:15:f8:c5:c6:
         c9:f0:e9:08:9d:eb:bc:76:10:48:61:92:e4:80:bc:6c:50:7b:
         b3:df:8f:38:b5:12:f1:91:a8:9c:b4:ae:3e:8f:35:1e:4a:14:
         6b:b5:93:de:09:fe:af:87:32:42:de:64:5b:44:ef:ae:fc:fe:
         40:23:19:42:d2:ac:b0:34:78:9f:77:48:4a:e5:0a:6c:48:f7:
         75:0f:9b:bd:e2:0a:66:b3:ad:92:f8:9d:a3:a0:bc:c3:e5:b3:
         5d:0a:d8:0d:a6:7b:e3:22:7c:ad:fd:47:40:ec:e3:16:5e:c0:
         38:fe:b6:6d:1b:75:e3:7a:4b:d0:d3:e7:de:d4:ce:99:f0:04:
         f1:76:b8:30:a4:f8:ef:ac:a8:5f:a8:d1:90:f0:f5:63:ad:28:
         f8:37:ef:a1:ea:5b:79:b0:f8:2a:33:f3:c3:28:79:60:16:52:
         11:26:0f:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----