This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7f6d42-1aff-4690-874d-886d6e8ab667.roa
File:                     ef7f6d42-1aff-4690-874d-886d6e8ab667.roa (raw, json)
Hash identifier:          GJ1lHZfsbLt9712vbmNvd3oDrcd1vm2D5koi5Lq8onU=
Subject key identifier:   F5:6D:20:5D:65:51:F4:C8:C6:48:4C:7F:BE:C1:87:31:74:0B:84:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7135BE02FDEED0170D6B6B7C1E50C0E773E2E2F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7f6d42-1aff-4690-874d-886d6e8ab667.roa
Signing time:             Wed 12 Nov 2025 01:01:24 +0000
ROA not before:           Wed 12 Nov 2025 01:01:24 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f12:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:35:be:02:fd:ee:d0:17:0d:6b:6b:7c:1e:50:c0:e7:73:e2:e2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:01:24 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=96f061a57d49f4784bfb35f08045c0ac6bdc8e5a6ce39705970a5632a1d594bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:d6:69:cb:a1:2a:fa:68:f4:1f:d8:f2:2a:
                    99:8a:0b:67:18:7a:42:40:b4:6f:f8:a8:42:8b:f5:
                    f8:2f:1f:0c:94:ca:d1:53:f9:7e:78:7c:41:7a:07:
                    c5:40:5c:99:67:87:4d:81:e3:10:f1:e0:17:d6:88:
                    11:58:1c:58:9a:aa:46:d8:48:9c:be:9e:36:12:09:
                    05:68:6a:8b:61:0e:99:d6:a3:81:fd:fe:5d:9d:54:
                    7f:eb:aa:e5:04:f1:41:ac:8d:20:87:41:77:f3:58:
                    b9:ed:39:e2:cf:06:ea:9a:aa:a9:85:fc:d1:2a:c9:
                    c9:45:4f:7d:e6:c4:c3:37:f9:64:69:f0:39:85:b1:
                    8b:d3:8f:73:43:bf:7e:81:20:30:6b:fd:7b:e1:29:
                    4a:be:a1:8d:f8:c5:3e:bc:a4:21:15:17:a0:25:55:
                    68:75:83:26:ad:f0:90:3b:c0:dd:59:99:53:b3:59:
                    a7:ed:e3:94:03:cc:ca:43:02:85:bc:0c:c1:a4:f4:
                    9c:c2:d8:83:d0:9b:69:70:90:3e:85:7e:c5:a7:0e:
                    c2:c5:6d:03:cd:bb:da:53:73:85:f3:3a:d3:97:c7:
                    9e:2b:a8:98:42:6a:ee:41:9f:5e:c3:0b:c7:e0:b9:
                    89:01:7c:5e:32:88:a5:fe:11:05:e7:6f:aa:50:24:
                    95:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6D:20:5D:65:51:F4:C8:C6:48:4C:7F:BE:C1:87:31:74:0B:84:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7f6d42-1aff-4690-874d-886d6e8ab667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f12:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         bf:33:d9:ef:a5:22:a1:99:64:34:47:1f:e0:ad:c0:e8:b8:32:
         5f:a9:ad:17:8a:ef:cd:5f:a3:c2:36:1d:9a:69:b3:6b:0e:5a:
         f9:89:2b:eb:ea:c0:0e:ff:74:7a:ed:0f:09:23:17:d8:3c:a0:
         b5:4e:ff:f6:43:bf:07:2d:1d:90:11:64:8c:d8:36:55:3a:02:
         e8:a8:a6:9c:c3:96:58:89:66:18:9d:31:83:17:6b:ed:9d:60:
         43:22:82:ee:63:b0:f2:dc:7a:76:83:e7:8c:50:93:f5:a5:f9:
         c9:35:3d:39:85:cd:af:f2:7e:06:66:ad:25:91:32:e2:ec:d5:
         6e:be:ea:8d:eb:d7:21:44:04:8e:e5:96:f5:7c:19:d5:e9:be:
         ac:b3:86:6a:a6:01:79:4c:a2:29:99:3f:62:35:7b:08:66:a0:
         79:53:25:4d:05:65:a0:b3:b3:57:ed:98:d0:40:45:7b:6e:bb:
         d7:65:c3:ce:73:86:90:b6:3d:d6:51:7e:ed:d7:4f:96:03:15:
         e6:db:f6:61:72:ff:ce:8c:8f:b3:f4:21:7d:5f:e7:66:6f:2b:
         6c:28:27:bb:25:68:ef:d9:bc:c7:1a:46:02:d5:af:4a:a7:fb:
         7d:be:83:63:cc:64:8e:e5:f9:39:e6:11:51:7f:ea:1a:76:0b:
         e3:5e:86:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:34:39 2025 by rpki-client