This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47c77bf-81bd-4953-b571-777ec487b714.roa
File:                     c47c77bf-81bd-4953-b571-777ec487b714.roa (raw, json)
Hash identifier:          lqlOiebsTuIePIuHIovHDq45oP9ehR+bW2goT77tX/4=
Subject key identifier:   02:44:F1:6A:F8:D3:F0:36:D8:67:CA:D2:EA:C1:E2:05:31:7A:8E:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       027310859F51B5CA7CBFBD2B759A5956FBB57A3F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47c77bf-81bd-4953-b571-777ec487b714.roa
Signing time:             Sat 08 Nov 2025 01:00:57 +0000
ROA not before:           Sat 08 Nov 2025 01:00:57 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f69:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:73:10:85:9f:51:b5:ca:7c:bf:bd:2b:75:9a:59:56:fb:b5:7a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 01:00:57 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=eb251a0c35888fd4dca8e76a7455468c1517a3f81d2324215a3794e9d768abc1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:54:67:0d:59:9e:6b:19:cd:c5:71:82:49:
                    f4:47:17:56:c2:50:ca:78:d6:c8:a6:0f:6d:50:6f:
                    20:ff:89:92:3e:8c:66:c0:14:5c:d2:cb:4a:48:1f:
                    c7:15:50:6d:31:c4:71:ae:5c:5f:41:79:a2:21:21:
                    d4:e8:b2:e1:7c:53:73:5c:3e:ab:f3:c4:cc:44:17:
                    56:eb:62:22:b1:b3:f7:2d:a4:66:80:ef:88:2e:de:
                    6a:aa:69:c1:dd:25:70:1d:eb:20:06:64:36:bb:ae:
                    5c:f2:3a:42:fd:03:98:74:71:18:92:91:86:36:79:
                    2d:af:e4:6b:7d:37:6e:76:22:e6:eb:d6:7c:05:23:
                    d6:71:f4:e8:2d:be:fe:2c:29:ff:64:ad:5e:10:b4:
                    68:41:c0:b7:b6:85:3e:d4:29:05:e7:a6:4c:49:24:
                    5c:77:73:e2:a7:61:cd:04:a6:bc:ee:dd:e0:db:b8:
                    ca:f4:33:9d:b8:6a:57:1d:21:bd:8f:c0:70:fb:4a:
                    7d:a2:53:b3:43:1d:0e:9b:34:76:a9:a2:04:a7:b0:
                    c2:af:a4:25:58:23:e9:a9:65:dc:df:b4:13:1f:54:
                    4d:02:65:27:a8:a4:eb:ff:67:a2:7c:0c:a1:99:4a:
                    f9:dc:c9:1b:17:30:22:bb:81:6f:25:e1:2a:5f:f7:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:44:F1:6A:F8:D3:F0:36:D8:67:CA:D2:EA:C1:E2:05:31:7A:8E:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47c77bf-81bd-4953-b571-777ec487b714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:1e:c1:9b:f5:b2:49:74:33:d6:75:c6:ef:45:04:ea:92:
         64:54:72:53:10:77:2d:40:8f:91:1c:52:d3:9a:cd:8d:7c:df:
         72:8a:5d:ce:f1:92:8b:72:72:f9:8f:56:d8:b1:f7:f3:9a:86:
         be:18:e0:dc:25:fc:25:3d:b7:74:bd:80:86:2b:e6:51:b4:86:
         d9:a6:df:30:a7:1f:8b:2f:62:23:62:be:96:96:00:a4:f0:2f:
         39:9f:7b:ad:d9:32:70:ca:74:4d:e0:c7:1d:4f:28:7e:2c:ff:
         ad:9b:c8:8c:6e:29:a7:21:13:aa:6b:5e:9a:05:47:c5:c1:b0:
         41:da:8a:38:f1:8c:eb:46:2c:c7:37:ef:02:7f:db:5a:28:27:
         49:8f:ea:4f:6e:48:f7:9e:4d:05:2d:9a:f9:50:c0:4b:bf:0a:
         19:05:ce:b1:3f:f7:22:04:77:0a:83:eb:af:00:a0:9d:d0:c6:
         25:8a:83:76:76:30:21:ee:02:03:d5:6c:b4:77:29:7c:40:b3:
         1e:f7:96:a4:92:46:ac:1d:cd:7e:b7:65:97:88:5f:f1:9c:67:
         b7:98:48:42:97:de:5f:8c:44:5e:77:38:e5:14:2a:b0:9a:cf:
         37:9a:ad:f9:4a:2c:56:0d:23:c9:45:28:83:e4:5d:c8:6d:da:
         18:7f:b0:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:35:08 2025 by rpki-client