This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3aba416-3bf5-4040-835d-289573b08e84.roa
File:                     e3aba416-3bf5-4040-835d-289573b08e84.roa (raw, json)
Hash identifier:          pwvcATUCb0Qlvy2B/27Lz90I0iTyF1aXE/QAy+5D1tY=
Subject key identifier:   74:08:BD:50:97:08:FD:80:0A:79:51:0E:56:2B:DA:EC:02:78:ED:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A29886E15ADC6E854BBF5368520C037C5B5218A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3aba416-3bf5-4040-835d-289573b08e84.roa
Signing time:             Wed 10 Dec 2025 00:41:13 +0000
ROA not before:           Wed 10 Dec 2025 00:41:13 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2a:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:88:6e:15:ad:c6:e8:54:bb:f5:36:85:20:c0:37:c5:b5:21:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:41:13 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=27b2a81bc544461d1f31fe87ea957e6c74d3d45b108c833f6062f2cc169298c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:0f:87:76:bb:0f:01:61:89:0f:c3:39:af:
                    7e:b0:7b:a7:2f:68:85:12:04:73:15:1f:af:71:31:
                    09:20:7a:3c:ee:79:51:14:a9:71:51:1a:eb:51:31:
                    ab:1a:7f:49:71:f7:63:cc:7a:b1:80:f5:78:25:4d:
                    72:c3:79:aa:15:c3:75:ee:a3:89:5f:10:27:8a:d7:
                    c1:71:1a:32:cb:75:1a:52:c9:8f:ad:4a:f9:e9:80:
                    9a:0c:ac:43:48:35:1d:2d:b1:72:9b:3d:77:0c:e9:
                    00:f5:0c:d3:7f:d7:ef:69:47:ef:4d:64:82:cd:ef:
                    3a:75:8b:8b:9b:21:29:ab:3a:ef:06:ab:a6:0a:8e:
                    fa:4a:a0:f7:7c:20:b2:b3:c9:ec:d3:8f:2f:c1:53:
                    dd:eb:ef:40:39:e0:e7:f4:ca:c1:68:a7:34:2f:55:
                    0b:11:74:52:11:65:90:2c:0a:78:00:9c:2b:2d:76:
                    33:92:82:17:77:7d:c7:3a:e5:1f:e7:92:ea:25:8c:
                    f5:d9:73:64:db:08:2b:56:10:c8:ed:70:41:cb:3a:
                    d4:08:e1:64:df:0b:82:6a:dc:a3:98:a1:8b:4a:01:
                    b2:46:2c:ff:b4:cf:bc:3d:37:2d:2b:fe:48:03:c8:
                    f7:a3:b0:69:c2:87:2d:26:d2:0b:4e:4d:12:86:c5:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:08:BD:50:97:08:FD:80:0A:79:51:0E:56:2B:DA:EC:02:78:ED:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3aba416-3bf5-4040-835d-289573b08e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2a:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         80:e3:7a:32:11:f4:3f:28:2b:ef:7a:fa:32:6a:a6:6c:3e:66:
         ec:a4:3e:98:f9:7a:38:08:06:42:33:d5:36:2b:75:b8:11:44:
         68:d8:5f:59:d6:6d:f4:3f:6a:2d:0e:93:d6:ae:a0:af:66:11:
         74:14:22:4f:14:a8:40:95:44:ac:b1:f8:ab:0e:bd:6b:d6:fe:
         8a:de:93:6a:c4:71:fb:93:92:ea:2d:61:ee:69:0e:b1:f9:ee:
         b6:22:20:c5:34:b5:d3:94:7d:21:48:80:19:e3:eb:e8:99:8c:
         78:af:c7:c3:c2:39:ba:86:e3:b8:7e:d4:5d:54:54:53:02:ca:
         87:86:f5:a2:df:ec:91:a7:98:46:90:c4:f8:c7:ac:b3:7a:80:
         d8:37:ae:a8:a6:41:eb:e2:08:36:81:c3:1c:1e:ed:dd:9f:97:
         87:f0:f4:16:87:8e:fd:55:4a:05:be:10:3c:82:ef:aa:0b:07:
         9b:c8:6c:33:04:16:d6:7c:40:4b:4e:dc:db:27:56:e3:d4:9b:
         99:57:cd:79:30:5a:5b:67:14:f9:b7:c2:a1:e4:4b:11:3a:60:
         0b:5a:2f:57:42:21:89:39:8b:c7:86:ec:06:0d:7b:12:d4:30:
         a3:8d:46:70:29:d6:ce:12:93:b0:6b:3c:17:2f:5d:23:05:65:
         8b:bc:2a:6a
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUWimIbhWtxuhUu/U2hSDAN8W1IYowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDA0MTEzWhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyN2IyYTgxYmM1NDQ0NjFkMWYzMWZlODdlYTk1N2U2Yzc0
ZDNkNDViMTA4YzgzM2Y2MDYyZjJjYzE2OTI5OGM1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfsQ+HdrsPAWGJD8M5r36we6cvaIUSBHMVH69xMQkgejzu
eVEUqXFRGutRMasaf0lx92PMerGA9XglTXLDeaoVw3Xuo4lfECeK18FxGjLLdRpS
yY+tSvnpgJoMrENINR0tsXKbPXcM6QD1DNN/1+9pR+9NZILN7zp1i4ubISmrOu8G
q6YKjvpKoPd8ILKzyezTjy/BU93r70A54Of0ysFopzQvVQsRdFIRZZAsCngAnCst
djOSghd3fcc65R/nkuoljPXZc2TbCCtWEMjtcEHLOtQI4WTfC4Jq3KOYoYtKAbJG
LP+0z7w9Ny0r/kgDyPejsGnChy0m0gtOTRKGxQgNAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUdAi9UJcI/YAKeVEOViva7AJ47TAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UzYWJhNDE2LTNiZjUtNDA0MC04MzVkLTI4OTU3M2IwOGU4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8qyDANBgkqhkiG9w0BAQsFAAOCAQEAgON6MhH0Pygr73r6MmqmbD5m
7KQ+mPl6OAgGQjPVNit1uBFEaNhfWdZt9D9qLQ6T1q6gr2YRdBQiTxSoQJVErLH4
qw69a9b+it6TasRx+5OS6i1h7mkOsfnutiIgxTS105R9IUiAGePr6JmMeK/Hw8I5
uobjuH7UXVRUUwLKh4b1ot/skaeYRpDE+Mess3qA2DeuqKZB6+IINoHDHB7t3Z+X
h/D0FoeO/VVKBb4QPILvqgsHm8hsMwQW1nxAS07c2ydW49SbmVfNeTBaW2cU+bfC
oeRLETpgC1ovV0IhiTmLx4bsBg17EtQwo41GcCnWzhKTsGs8Fy9dIwVli7wqag==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:05:03 2025 by rpki-client