This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf8d77dc-48f9-49c2-ac2d-febcf8af2bd6.roa
File:                     bf8d77dc-48f9-49c2-ac2d-febcf8af2bd6.roa (raw, json)
Hash identifier:          i2NacJHU0GNUt7GIjCMGKNGnBOY+tKjqMhFRxCRdmIs=
Subject key identifier:   78:38:3A:EF:C2:AC:C8:61:6D:E1:F6:76:EB:27:8A:C5:DF:C4:E3:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A977BA6971FB8FC8FED3D3F62B15748147E5C25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf8d77dc-48f9-49c2-ac2d-febcf8af2bd6.roa
Signing time:             Tue 11 Nov 2025 02:00:53 +0000
ROA not before:           Tue 11 Nov 2025 02:00:53 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:97:7b:a6:97:1f:b8:fc:8f:ed:3d:3f:62:b1:57:48:14:7e:5c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:00:53 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=cf2436a19dbf085222b17349ef7c482a11f8d72324dd51e7d9e6e278766aa0e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:92:68:49:e8:5a:3e:c6:bb:ee:71:c3:0e:
                    77:06:36:7a:89:df:ab:c8:02:6f:02:a0:66:94:20:
                    7b:2d:67:46:f4:18:63:ed:f8:5e:b4:e4:f7:5d:2d:
                    2e:a5:4d:b8:c2:70:ca:85:d2:a3:48:71:63:eb:c7:
                    f4:6f:a1:a2:c2:30:2e:04:6a:33:82:5f:b3:f6:22:
                    11:6c:3b:fc:e4:49:37:67:05:c5:c0:87:6a:88:27:
                    8d:71:18:0e:39:d9:ce:93:a3:34:2f:d6:86:31:42:
                    22:64:23:86:ea:3d:1b:c4:54:3f:76:19:ad:46:bd:
                    db:51:b0:93:34:a4:f2:49:f4:be:f7:05:b6:52:56:
                    11:43:66:30:2b:8a:e4:d1:bc:bc:de:dc:5b:3b:01:
                    be:b7:c8:ab:91:65:32:cc:66:f7:45:54:2b:0d:89:
                    35:f0:42:57:03:00:88:71:05:a3:1d:4f:2b:cf:27:
                    94:e8:3b:6a:a2:ed:4a:74:55:37:70:8a:5f:04:09:
                    dc:e0:bc:e6:4c:29:75:42:fa:df:c9:86:f4:1d:82:
                    4f:5a:85:6c:71:04:e7:d5:29:2e:85:62:a5:cd:ed:
                    e5:16:d3:70:2a:23:19:c0:ec:e1:8e:5d:dd:a7:6f:
                    ad:d4:02:e3:7b:6a:de:9e:dc:84:30:8a:69:17:2a:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:38:3A:EF:C2:AC:C8:61:6D:E1:F6:76:EB:27:8A:C5:DF:C4:E3:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf8d77dc-48f9-49c2-ac2d-febcf8af2bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8050::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:1e:eb:b7:db:81:de:b3:55:c3:08:fa:d7:94:b4:b9:1e:
         f4:92:35:17:f4:19:80:d2:95:15:71:fe:e4:f7:07:ca:85:bd:
         ee:ce:02:cb:e2:1e:ab:2a:b0:06:00:5c:0e:0a:e2:40:7a:84:
         66:67:f1:0f:71:21:18:27:3d:ef:ec:b7:68:c8:6e:d9:2e:12:
         14:a1:b9:f6:db:46:40:0a:44:0e:2a:f0:0a:02:9e:31:d2:15:
         37:20:83:2b:15:4e:ff:39:86:cf:60:67:cb:84:67:5b:77:93:
         91:e8:d6:b6:bb:c0:3d:9b:f1:3f:19:98:50:05:ed:4d:58:54:
         87:a5:19:d7:4c:6f:ac:ad:a4:f9:13:6f:17:f3:98:b4:71:e7:
         de:72:31:e7:55:78:8e:5e:77:93:9b:9d:00:2f:7f:ca:c9:84:
         4f:fd:ec:32:75:06:bc:e6:42:d5:b7:e0:4f:1c:5a:58:4d:2b:
         08:b6:64:0f:e1:46:45:48:34:9c:22:d5:ff:91:7b:51:a3:70:
         79:f6:7d:a2:d7:d4:11:c3:f8:be:ee:f0:e7:8e:d6:8e:30:1d:
         5a:ec:16:1d:41:4f:35:b4:ef:37:2a:86:31:04:30:aa:49:eb:
         10:77:d7:5d:b6:80:ae:62:0d:7c:31:45:03:53:9c:da:d5:77:
         cb:46:24:1a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUapd7ppcfuPyP7T0/YrFXSBR+XCUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDIwMDUzWhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZjI0MzZhMTlkYmYwODUyMjJiMTczNDllZjdjNDgyYTEx
ZjhkNzIzMjRkZDUxZTdkOWU2ZTI3ODc2NmFhMGUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1H5JoSehaPsa77nHDDncGNnqJ36vIAm8CoGaUIHstZ0b0
GGPt+F605PddLS6lTbjCcMqF0qNIcWPrx/RvoaLCMC4EajOCX7P2IhFsO/zkSTdn
BcXAh2qIJ41xGA452c6TozQv1oYxQiJkI4bqPRvEVD92Ga1GvdtRsJM0pPJJ9L73
BbZSVhFDZjAriuTRvLze3Fs7Ab63yKuRZTLMZvdFVCsNiTXwQlcDAIhxBaMdTyvP
J5ToO2qi7Up0VTdwil8ECdzgvOZMKXVC+t/JhvQdgk9ahWxxBOfVKS6FYqXN7eUW
03AqIxnA7OGOXd2nb63UAuN7at6e3IQwimkXKuU3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUeDg678KsyGFt4fZ26yeKxd/E4zgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JmOGQ3N2RjLTQ4ZjktNDljMi1hYzJkLWZlYmNmOGFmMmJkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AgFAwDQYJKoZIhvcNAQELBQADggEBAFOaHuu324Hes1XDCPrXlLS5
HvSSNRf0GYDSlRVx/uT3B8qFve7OAsviHqsqsAYAXA4K4kB6hGZn8Q9xIRgnPe/s
t2jIbtkuEhShufbbRkAKRA4q8AoCnjHSFTcggysVTv85hs9gZ8uEZ1t3k5Ho1ra7
wD2b8T8ZmFAF7U1YVIelGddMb6ytpPkTbxfzmLRx595yMedVeI5ed5ObnQAvf8rJ
hE/97DJ1BrzmQtW34E8cWlhNKwi2ZA/hRkVINJwi1f+Re1GjcHn2faLX1BHD+L7u
8OeO1o4wHVrsFh1BTzW07zcqhjEEMKpJ6xB31122gK5iDXwxRQNTnNrVd8tGJBo=
-----END CERTIFICATE-----