This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b0acdef-c848-447c-9624-6a4634464aaa.roa
File:                     0b0acdef-c848-447c-9624-6a4634464aaa.roa (raw, json)
Hash identifier:          RsyzGgYxfyXgIz4Hbj6h0nvoFucbY62s2V/2uDfdZ6Q=
Subject key identifier:   39:66:21:BF:20:0E:A2:53:AB:AF:EA:93:E9:80:1E:FA:FC:18:17:4D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       55B2FAF6EBA4CCA66E4661B708DEA075A6ABC5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b0acdef-c848-447c-9624-6a4634464aaa.roa
Signing time:             Sat 15 Nov 2025 04:00:05 +0000
ROA not before:           Sat 15 Nov 2025 04:00:05 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e800::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b2:fa:f6:eb:a4:cc:a6:6e:46:61:b7:08:de:a0:75:a6:ab:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 04:00:05 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=155c9637a75dcf3ddafd26c89b65013f6f52219533b0078630588ab60771c71a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:12:17:f3:69:89:b4:fc:7b:2f:0c:38:ff:87:
                    dd:24:83:f7:7b:e5:01:4e:6d:b4:42:c5:f5:3c:9a:
                    59:db:eb:b3:72:49:6f:3e:19:76:76:9f:54:b7:5d:
                    81:6e:26:72:9c:06:71:30:05:69:40:96:ff:ac:12:
                    30:00:c2:db:d1:00:2c:41:b0:ce:c2:70:7b:7e:75:
                    0e:28:fc:19:71:88:fd:b2:fb:2a:02:fa:a0:c3:43:
                    10:67:96:81:1a:be:73:8c:24:cd:8f:6f:8b:7c:e8:
                    88:53:4e:0d:ad:f7:4b:c5:c6:25:c5:42:e7:8d:48:
                    f1:02:b4:eb:a3:1d:0a:96:1f:5d:8a:fd:f4:57:d6:
                    aa:61:bd:7e:4c:9c:dc:0e:7c:f9:a7:4b:22:99:2c:
                    5d:aa:ce:f0:cf:1c:8f:a7:36:ef:08:9d:20:8f:12:
                    7c:77:8a:dc:90:b6:f2:00:ef:32:42:d5:e6:11:6f:
                    56:6a:78:74:28:c3:c8:d9:5c:23:6b:32:36:75:6f:
                    d2:09:6a:eb:1a:14:59:9e:c3:2f:ad:fa:e8:6c:f3:
                    d6:e2:78:6b:74:13:49:03:4e:f6:ec:2e:11:39:1d:
                    ca:48:e5:05:5e:5f:ad:86:69:57:b4:a8:1e:81:97:
                    15:73:a5:35:68:87:d8:81:90:d3:03:5f:38:ca:aa:
                    27:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:21:BF:20:0E:A2:53:AB:AF:EA:93:E9:80:1E:FA:FC:18:17:4D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b0acdef-c848-447c-9624-6a4634464aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e800::/42

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:03:ad:ce:fe:62:59:2f:65:67:99:48:53:9b:cc:8f:10:
         28:bd:56:ec:3c:be:c8:71:7c:e8:b0:b4:78:6c:9a:ef:ad:dc:
         44:5a:a9:13:02:84:f8:5e:40:db:85:75:68:2d:93:32:22:91:
         44:a2:1a:a8:69:89:c2:48:42:1c:01:88:c9:17:15:3b:44:2c:
         96:25:36:c6:19:37:ef:2c:2d:52:a7:4d:d2:c4:5f:bb:04:b7:
         17:15:f9:af:08:01:0d:b8:49:d8:64:c8:a3:55:65:82:f1:13:
         e5:81:75:75:55:b4:ac:de:c5:9c:4b:7a:f9:0d:7a:05:d5:c5:
         6c:df:47:71:0a:05:13:2f:36:fd:75:0e:2a:59:a0:5b:54:7f:
         c3:04:61:32:83:99:69:a1:3a:90:ed:ca:66:4a:0e:f2:2a:a8:
         0a:0b:38:23:d9:61:32:0d:71:ad:c0:07:05:a0:c3:6c:c9:23:
         0a:b6:04:5b:16:f9:6f:62:dd:44:26:d5:a3:bc:48:fa:41:b1:
         c3:5d:f7:c5:36:a1:e4:5a:5d:86:35:e6:0d:05:d3:c7:bf:30:
         72:a2:b4:57:90:1c:23:5f:6b:8b:1b:4f:26:0d:a9:3a:60:e6:
         60:64:f9:b4:af:12:7b:2c:e0:61:17:26:f6:39:5f:eb:aa:37:
         8e:75:a8:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 29 11:50:00 2025 by rpki-client