This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e838ff70-6a69-4c82-93ca-6ef1672659e1.roa
File:                     e838ff70-6a69-4c82-93ca-6ef1672659e1.roa (raw, json)
Hash identifier:          ZvzC+oboOyn2t+/Tfg+lSuISbN2mTZbus9C2je6TqIg=
Subject key identifier:   FA:B1:58:FF:20:4A:5C:A3:DA:82:13:04:0A:09:AB:93:B9:2D:9C:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01A01A7F7205EBE42CD46B9FA5DCDE3341FECC26
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e838ff70-6a69-4c82-93ca-6ef1672659e1.roa
Signing time:             Sun 07 Dec 2025 01:30:15 +0000
ROA not before:           Sun 07 Dec 2025 01:30:15 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f14:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1a:7f:72:05:eb:e4:2c:d4:6b:9f:a5:dc:de:33:41:fe:cc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:30:15 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=6e99a466b728183c34d0c4f78be763e83d1cf9786150ae56636d28e408e58c8f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:fd:bf:99:37:85:52:c2:07:87:13:34:1e:
                    f5:1d:d9:14:2d:d8:71:83:c5:9d:f9:ed:52:2c:ac:
                    74:d1:0e:f2:14:4d:e6:0b:62:5a:6e:a4:4b:d4:10:
                    fa:4a:5f:f8:32:51:b0:11:9b:28:75:d9:29:23:73:
                    ec:2b:9e:7a:1a:5d:90:cc:1c:cd:b1:d5:0f:9d:de:
                    3c:3e:31:e9:66:e2:ca:60:59:a5:7b:61:79:5b:3d:
                    86:bd:94:26:f2:82:69:59:f9:fb:17:df:61:97:ed:
                    f1:8f:a4:4d:c0:f4:19:bf:0b:ce:97:46:fa:c1:8d:
                    57:11:fa:39:1c:a0:a1:3d:62:aa:9e:97:e8:1a:0a:
                    5b:d5:c1:fb:0d:0e:d7:eb:4b:13:ff:db:93:86:2e:
                    97:15:6f:44:09:10:51:58:e4:23:d6:ad:be:fd:51:
                    00:a3:16:c6:9a:fe:d0:9e:e4:3a:54:7f:fd:40:27:
                    f5:26:37:66:df:7f:d3:d3:f0:61:03:d8:94:3e:db:
                    dd:09:67:09:1e:8a:c5:79:18:0e:ff:04:8e:53:7c:
                    fd:0c:24:be:d9:f8:2b:0d:ed:b7:42:59:11:47:7d:
                    c9:ff:a0:48:e3:e3:ef:e3:3c:6c:9e:6c:2c:ba:1d:
                    ce:79:cf:c1:fd:0b:58:a7:13:1d:0b:34:bc:56:ff:
                    16:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B1:58:FF:20:4A:5C:A3:DA:82:13:04:0A:09:AB:93:B9:2D:9C:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e838ff70-6a69-4c82-93ca-6ef1672659e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:98:6c:61:1b:fa:5e:80:98:5c:51:25:9e:18:d8:da:11:0e:
         9f:9c:a4:4d:a1:dd:a5:cf:3c:90:5c:c3:7d:6b:06:a5:4e:3f:
         35:c7:9c:b5:82:23:b9:ca:a8:27:d8:4a:26:0e:8c:97:51:9c:
         c2:76:0f:f1:4a:97:b5:04:f4:15:0f:d6:be:28:92:9f:fc:05:
         d5:0e:b4:f1:ad:92:83:0e:20:04:05:68:69:98:bd:a1:83:56:
         91:c8:d0:8a:7d:d5:61:90:14:2f:34:f6:39:e7:e2:d0:f9:8a:
         fd:0c:f6:c4:2f:92:20:5d:18:cf:10:e4:1b:80:91:d7:c7:85:
         94:ee:3a:f6:20:f6:e5:2a:55:90:3f:17:8e:49:54:a0:47:23:
         62:10:dc:9f:70:4a:bb:a5:1a:a8:af:25:42:a6:41:ec:4f:f1:
         b0:0e:a6:26:53:fc:91:37:5c:0f:ab:24:9a:10:64:58:a8:5a:
         6b:57:c5:94:9a:a1:9b:a8:8f:f2:d0:94:33:6b:12:11:9c:ac:
         83:bf:60:bf:e2:0e:dc:a3:f2:f0:37:9b:34:6b:b7:1c:0e:6a:
         6f:92:14:37:a6:d3:ad:d8:33:3e:8b:c2:21:6d:c9:d6:88:24:
         8d:03:27:58:6c:17:cf:cd:35:fc:21:e2:e7:8e:88:d2:ae:27:
         1d:6a:9e:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jan 9 00:57:00 2026 by rpki-client