This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa
File:                     0668f39a-0950-45e9-b174-8f7a83ff26e9.roa (raw, json)
Hash identifier:          ATCMKHH6hzEWo93Ie68fgSvDbLjHr8iUmkS4cCPErH4=
Subject key identifier:   F2:AA:CF:82:08:44:89:86:EB:DC:16:B5:EC:35:DA:A7:0E:7D:8C:8E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5265CE7CCB9A6AF84E414868E57493D6EA92ED3E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa
Signing time:             Sat 15 Nov 2025 05:10:30 +0000
ROA not before:           Sat 15 Nov 2025 05:10:30 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:65:ce:7c:cb:9a:6a:f8:4e:41:48:68:e5:74:93:d6:ea:92:ed:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:10:30 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=9634aa0189f1c1600865d360b3dfc5e1297680d082b114e6177a12260258d5d9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:50:9a:7b:b1:0d:33:41:d3:04:da:af:8b:
                    42:a7:c1:27:05:ec:40:42:fa:c8:c3:ee:bf:92:f8:
                    cc:e4:dc:4a:4d:42:d5:6c:c7:bf:85:ae:24:08:d7:
                    55:06:c9:d4:e3:69:fa:23:b0:6e:2e:bc:5b:9a:6d:
                    df:8f:a8:43:93:d0:31:2c:a1:ee:15:e4:f0:b5:a0:
                    b8:1b:3f:d3:e0:f8:34:86:12:50:9b:38:00:55:7d:
                    47:d1:cd:92:7e:bc:c2:bc:fc:39:ba:c8:29:68:93:
                    bd:91:a2:17:8e:c5:4f:ab:1e:be:4e:6f:4b:3d:e9:
                    b2:6d:72:a4:fe:86:ba:01:c5:cd:92:5e:e8:21:35:
                    3c:a6:43:69:fb:75:90:a2:1d:79:dd:87:f6:0d:b8:
                    ee:21:ed:3c:4b:3b:14:40:90:5a:b1:d9:40:90:0c:
                    92:f7:e4:d8:d7:0c:2a:c1:6d:2c:2b:a8:40:fd:af:
                    21:d7:49:8e:c0:bb:d5:dd:15:bd:f8:f0:85:b4:2d:
                    56:1f:a3:6c:50:69:5c:39:27:43:4d:62:0c:59:8f:
                    de:57:bc:38:7c:4d:8e:7b:a3:23:06:e2:a3:c9:7d:
                    98:4f:7d:cc:4d:8f:52:84:a9:60:c4:13:45:ef:dd:
                    77:14:79:b1:50:f7:fa:22:7a:88:19:f4:9b:ae:2d:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AA:CF:82:08:44:89:86:EB:DC:16:B5:EC:35:DA:A7:0E:7D:8C:8E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:52:b6:83:69:db:00:47:d5:15:cf:0f:66:f7:1b:f5:42:
         4a:9d:fe:b2:b1:f4:74:ec:f6:cf:40:fd:76:d8:aa:3c:9e:55:
         e2:e0:90:a9:9b:5e:0a:c6:80:07:0f:9b:81:da:e0:0a:10:d2:
         d7:17:25:25:a0:71:f7:53:03:2f:49:b6:be:30:50:e5:b3:9a:
         35:9f:7f:d1:34:99:da:70:90:a8:aa:d1:3a:64:ab:8c:b7:95:
         ef:31:69:67:91:eb:b1:4b:2b:fc:d9:88:e7:dd:f1:ae:05:d9:
         3d:b9:be:16:6b:41:aa:d1:58:54:79:f7:0a:60:1a:31:35:87:
         b3:0a:22:50:c8:88:73:4c:de:78:11:57:9e:f1:44:2f:ed:82:
         4f:c6:5e:cb:95:37:9c:4c:b9:17:ec:f4:07:13:25:9f:65:d8:
         80:7f:4f:37:63:91:35:08:84:c9:05:f6:6e:25:0f:e2:87:41:
         2e:29:72:14:0f:57:10:ea:29:32:a8:08:44:05:1d:ba:06:65:
         db:6d:85:df:8f:35:58:84:00:77:2f:49:eb:66:32:6e:b7:a0:
         69:a4:12:29:88:13:bc:56:35:07:14:1f:27:ea:66:e9:b3:57:
         8d:17:16:d7:26:79:2d:7c:06:98:c0:fc:db:dd:7d:52:aa:57:
         78:72:40:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:30:56 2025 by rpki-client