This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2605e5f-34b7-4bbc-a379-c2626958ef3a.roa
File:                     a2605e5f-34b7-4bbc-a379-c2626958ef3a.roa (raw, json)
Hash identifier:          mC3UvL484NuMDxeXstmhrVAjtkYjWN9wKGr6YJL3VIg=
Subject key identifier:   7F:C2:08:98:66:64:B9:B9:5E:AF:BE:26:C0:DA:89:7A:88:D7:74:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F1737E30FACDDDDDC13173364BCD7902BA266B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2605e5f-34b7-4bbc-a379-c2626958ef3a.roa
Signing time:             Wed 12 Nov 2025 01:51:14 +0000
ROA not before:           Wed 12 Nov 2025 01:51:14 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f15::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:17:37:e3:0f:ac:dd:dd:dc:13:17:33:64:bc:d7:90:2b:a2:66:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:51:14 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=41d97818c5afef54e883bbc0cead195e42219bc8222df8e31f476ae7b8514530, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:1f:23:d7:86:1c:a2:9f:9b:33:06:47:61:
                    a9:c6:3d:40:63:4c:36:68:55:db:12:0f:db:ca:bf:
                    f4:85:ba:fe:14:4a:d5:4e:b2:0f:60:b6:bc:0e:98:
                    61:00:c2:45:4b:66:25:65:83:d0:99:09:fa:84:c6:
                    fe:d4:58:1a:9f:76:b0:5a:40:64:41:d4:53:88:47:
                    b0:ee:79:29:8c:1a:b7:36:b0:01:1a:09:19:ae:b7:
                    e5:54:d9:ea:1f:08:40:39:27:0b:86:9b:ce:90:15:
                    bc:80:b1:c7:97:c1:b1:19:70:9d:05:e1:a4:2a:e4:
                    da:40:af:97:e0:e5:eb:d1:09:46:7d:20:30:bc:31:
                    22:c9:e9:cb:ed:67:b5:ee:81:a0:97:d9:98:ff:ff:
                    a7:fc:fc:b2:14:69:09:1f:ac:2a:54:73:e5:b8:52:
                    03:07:e4:17:81:4d:a4:08:2d:81:1e:68:b8:d6:29:
                    bd:de:80:20:05:8a:ae:57:1a:39:45:86:c6:ff:1e:
                    0d:75:7c:ca:ac:62:c9:6d:04:24:28:e1:c6:1b:5b:
                    35:41:50:30:4d:50:7b:66:01:95:61:46:bd:cf:a7:
                    cf:5d:24:52:8e:a2:67:db:49:75:0f:8a:98:2b:75:
                    c2:88:13:e6:7a:bd:76:85:2a:bc:1a:e9:42:c0:85:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C2:08:98:66:64:B9:B9:5E:AF:BE:26:C0:DA:89:7A:88:D7:74:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2605e5f-34b7-4bbc-a379-c2626958ef3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15::/38

    Signature Algorithm: sha256WithRSAEncryption
         b4:3b:fd:ff:19:94:de:af:59:3b:d4:5b:9e:6b:88:cf:fd:1d:
         a0:8b:8b:3e:7c:ad:0e:ca:6c:41:7f:e6:6c:c4:8f:e9:13:47:
         12:b5:ab:7e:c0:10:7c:c6:c9:90:57:88:6d:84:73:89:80:24:
         11:f6:5b:26:16:42:c6:07:b8:4c:0b:e3:c0:31:e4:c5:9e:b1:
         09:31:cc:18:27:4c:d5:f1:d6:b2:54:42:d2:a7:57:b9:53:b2:
         d1:93:60:7a:f6:26:bf:d2:8a:6a:b9:d7:e0:49:1d:3a:f2:d5:
         e8:84:91:38:88:bc:b7:64:93:cd:cf:77:44:fe:69:49:ef:ea:
         94:71:59:64:8c:f0:e8:22:67:78:57:b4:99:da:07:37:52:74:
         67:25:d0:35:16:2d:c9:d0:12:b5:25:e3:ba:f3:93:4c:96:7f:
         7a:5f:ce:10:59:32:46:aa:57:48:0b:9b:4e:e4:61:43:b4:af:
         00:ba:a6:c0:80:b2:50:9b:44:f9:c5:0d:b0:73:82:06:6a:94:
         14:39:0a:64:76:a5:e5:97:2d:c6:c4:0d:b9:35:f0:1c:3b:ce:
         6a:15:ec:c7:91:86:ba:4d:9a:36:a1:8e:e2:34:09:e6:d4:70:
         9c:48:55:4c:62:79:fc:45:ee:52:6c:29:0f:20:6b:38:13:9d:
         09:e2:92:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:33:07 2025 by rpki-client