This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9879d20-7d75-4e5c-8841-28289c14ef4d.roa
File:                     d9879d20-7d75-4e5c-8841-28289c14ef4d.roa (raw, json)
Hash identifier:          XQGlfrkjAUG+XeNsZoxsToktxEMgkHWkAOKDEbecbAI=
Subject key identifier:   1F:7D:02:DB:52:64:4B:EC:48:6B:84:C2:A3:09:F0:98:72:7B:D6:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E5CAF2BF16F991DF43640EEDA48E3769B2CD1DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9879d20-7d75-4e5c-8841-28289c14ef4d.roa
Signing time:             Sun 07 Dec 2025 01:21:20 +0000
ROA not before:           Sun 07 Dec 2025 01:21:20 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff1:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5c:af:2b:f1:6f:99:1d:f4:36:40:ee:da:48:e3:76:9b:2c:d1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:21:20 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=03973645c698105be244bff4636555513e15e0a37123d1dc54d7b59dec61215d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:24:83:bc:2f:f7:92:3f:fc:3b:5d:a0:75:
                    f3:83:4f:41:d3:1a:4f:15:80:b6:6a:45:00:03:0f:
                    95:09:74:b4:39:24:0e:3d:aa:3e:a3:4f:40:eb:38:
                    06:9a:fb:34:3f:88:b3:ed:e5:da:bf:9d:54:52:92:
                    fc:68:a4:0e:05:f7:51:b7:04:77:6f:f7:06:3e:a8:
                    8f:dc:32:a0:77:6e:d0:2e:57:35:94:7f:88:8d:23:
                    e7:36:69:73:d6:ac:92:25:c2:a1:b4:6f:b7:54:66:
                    58:e8:1e:dc:04:92:22:66:05:4f:e8:8c:c9:dd:f3:
                    fa:af:49:73:96:2d:25:52:d1:69:f9:0c:37:4a:e8:
                    aa:26:9a:7b:1a:ca:c7:e6:cd:99:4c:23:af:38:ce:
                    37:c2:0b:3b:bb:17:6e:c1:6d:77:f9:79:fb:a6:e6:
                    91:77:7d:84:5e:13:59:f1:7e:7b:43:55:77:73:2c:
                    7f:f8:70:8e:fa:61:e3:24:48:e6:5d:83:66:33:5a:
                    7f:b1:86:63:5a:af:4d:df:26:3a:fc:e9:cf:b4:ad:
                    b5:97:d8:07:73:ad:8d:f7:55:e8:20:01:4e:82:8c:
                    92:55:21:0c:04:b0:8a:4a:cd:fa:d7:a6:d3:e0:51:
                    1b:57:6c:32:8b:dc:77:f6:29:46:b1:44:ac:f1:81:
                    52:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7D:02:DB:52:64:4B:EC:48:6B:84:C2:A3:09:F0:98:72:7B:D6:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9879d20-7d75-4e5c-8841-28289c14ef4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:1a:62:92:25:89:81:d5:e2:ac:d6:e0:e8:67:00:8b:3c:c2:
         79:f1:b9:0a:3c:5c:1e:74:d7:cd:cd:53:54:0f:53:52:3d:37:
         fc:9a:1c:b0:22:ce:f1:54:8d:b7:f8:5f:be:ad:1d:04:53:f1:
         5d:04:3d:65:b1:46:11:8d:f0:51:0c:d2:79:88:49:27:56:80:
         69:f3:e5:d8:a7:53:a9:23:f8:b1:0e:a5:70:be:df:e3:eb:1c:
         d7:c8:0f:78:df:66:c3:d4:53:0e:77:f9:bc:c0:e1:10:16:f9:
         25:02:69:dd:7b:cf:74:f0:33:3d:ff:7b:74:40:8f:55:82:37:
         0b:99:92:96:e8:6e:6c:c7:25:d3:ed:0f:f9:0e:23:20:d9:2b:
         0a:74:58:b6:d8:fd:41:d1:25:ee:61:2e:aa:61:b7:69:a1:2c:
         7f:39:f3:8c:89:56:8c:fd:32:28:35:44:08:fc:ad:8f:cd:a2:
         32:f1:d3:79:ba:45:b9:41:5d:1b:c9:f1:49:2c:0a:40:43:7b:
         19:a6:1e:4e:d6:0c:d4:2f:24:cd:9e:5f:62:79:75:dc:ce:94:
         8d:1a:94:06:9f:bb:dd:e9:f7:72:53:09:0d:cf:82:11:c7:b8:
         21:f8:15:17:54:a6:38:f0:c7:5f:25:d9:8e:15:16:e9:63:e7:
         b3:32:e4:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:47:10 2026 by rpki-client