This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e867a4f3-7521-4397-9b70-b2828d71f600.roa
File:                     e867a4f3-7521-4397-9b70-b2828d71f600.roa (raw, json)
Hash identifier:          aQm7uJWOEir/MsiaC/YKG7wvFW6i8musVL4t8MuMDvc=
Subject key identifier:   3D:83:91:AD:ED:98:0C:29:93:51:F7:25:EA:C7:D9:0B:FA:3E:C8:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7878D298BF84A8979E509C1284C407D9E5A4B87F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e867a4f3-7521-4397-9b70-b2828d71f600.roa
Signing time:             Wed 10 Dec 2025 00:30:12 +0000
ROA not before:           Wed 10 Dec 2025 00:30:12 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f26:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:78:d2:98:bf:84:a8:97:9e:50:9c:12:84:c4:07:d9:e5:a4:b8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:30:12 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=f99436952545eff01525ab798c3909cb09abfbca879667c48298a73f0b106d4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:1a:72:1d:5f:24:31:a7:04:02:99:9a:7c:
                    c3:e4:cf:a7:9a:b3:9e:28:61:50:5a:fe:85:6b:2a:
                    ce:4e:78:f7:25:6c:cc:b6:62:db:b2:59:8d:41:5d:
                    49:c0:9e:d8:a5:3c:7d:68:d4:fc:02:ca:bc:42:4a:
                    e3:5a:dc:79:8e:b8:88:00:ba:6a:94:87:0e:f6:71:
                    85:02:d1:52:31:6b:9c:c4:62:4a:5a:bf:ee:93:29:
                    db:6d:24:65:44:02:56:df:7c:08:7d:5d:af:16:4c:
                    e9:f1:ba:f0:d3:47:8d:41:25:20:83:a4:7e:05:ec:
                    0b:44:3b:9d:ad:16:3b:0a:d4:3c:15:4f:30:07:d5:
                    44:90:60:df:db:d9:99:6f:c2:f9:9e:d5:64:95:14:
                    e6:cd:cb:3c:f8:06:ea:2d:d7:38:86:d9:11:43:b2:
                    be:d5:9d:34:39:3d:22:49:77:db:3e:e9:19:28:1f:
                    84:35:97:96:90:aa:f1:38:d8:b1:4d:b2:82:8f:e7:
                    1d:6f:f5:80:21:0c:b0:83:9d:1a:b7:dd:23:b3:ba:
                    af:79:72:01:e8:8d:be:5b:97:8a:50:f4:70:dc:ad:
                    b6:07:fd:f1:10:9c:ba:1b:0a:3f:24:89:51:cc:c1:
                    a3:bf:fd:8c:ea:dc:ab:1f:5e:74:10:54:2a:8b:e9:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:83:91:AD:ED:98:0C:29:93:51:F7:25:EA:C7:D9:0B:FA:3E:C8:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e867a4f3-7521-4397-9b70-b2828d71f600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f26:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         55:c5:c1:4f:49:c0:32:f0:4c:50:4b:31:2b:65:87:30:fd:ff:
         07:8a:27:82:97:b1:d3:00:99:41:57:d5:a9:92:78:ae:d8:ff:
         40:ba:f3:5d:49:94:3d:16:72:fa:c2:0e:2e:36:c8:4c:98:3a:
         6f:28:18:de:34:c5:1a:ab:48:44:ae:47:5a:e5:b1:be:8b:97:
         8a:ef:d2:b7:9e:e3:4a:71:a3:f5:97:10:d7:25:88:46:c5:f7:
         4d:bf:8d:7d:63:91:ec:22:c1:6b:72:e8:ee:7d:63:4e:46:41:
         67:ac:da:f1:c1:5e:41:6f:4f:3a:7c:d1:b8:c2:65:9c:cf:fc:
         16:65:8c:2f:dd:d4:90:e1:0f:79:b1:fc:ae:74:3e:a3:5e:9a:
         68:d1:69:78:be:75:73:bf:dd:cc:89:c3:5a:ba:39:1c:39:dc:
         e9:de:c6:b4:df:7a:10:23:fc:08:6d:4b:b5:7d:13:f2:54:38:
         0f:a5:f4:a9:26:23:7e:02:f9:bb:85:fc:f7:d9:51:52:ee:45:
         1a:5c:af:7d:8a:44:9f:3c:16:0a:ea:f9:b7:23:76:e4:67:52:
         fd:2f:6d:75:47:9a:49:59:d8:59:97:4a:5b:8b:e5:8c:9a:cd:
         14:22:fd:e1:e6:d8:d6:0e:48:13:2a:dc:7f:9e:f3:4c:cf:b5:
         ca:73:92:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:58:06 2025 by rpki-client