This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa
File:                     222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa (raw, json)
Hash identifier:          voucd34oOMkHdDSsZ4MnC+gAjVmLR9qQxUv6MRwDRCw=
Subject key identifier:   59:46:97:7C:0C:FF:19:B3:B0:1A:4D:A4:91:95:1D:4C:D0:5B:63:08
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0D25F466FDD1DD33851C50B30E665E918A2DD628
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa
Signing time:             Wed 10 Dec 2025 02:30:14 +0000
ROA not before:           Wed 10 Dec 2025 02:30:14 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:25:f4:66:fd:d1:dd:33:85:1c:50:b3:0e:66:5e:91:8a:2d:d6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 02:30:14 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=eae436ebab1d5532754f46034a896a3809ca387a408aaec5f8085cc84d4f4109, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0c:95:b5:48:26:3b:40:4a:3c:e9:1e:12:96:
                    52:f7:62:c6:83:ac:12:73:20:8b:27:a7:a6:cc:51:
                    c7:1f:70:6b:47:b6:e3:88:de:c9:40:b2:c8:e7:21:
                    d5:88:26:51:54:44:e8:c1:de:73:ad:85:90:a9:a9:
                    1e:24:8d:44:81:cb:cd:9b:4c:be:92:c9:a7:74:28:
                    01:43:a5:e2:87:eb:58:f0:60:16:19:5e:c6:e3:74:
                    91:af:48:a0:e9:c0:92:ab:62:a5:70:80:08:21:e3:
                    dd:bb:c9:c6:37:3b:18:d6:2c:9a:d9:89:d5:32:94:
                    ca:96:1c:1a:c7:e4:60:b4:0a:49:7a:6f:78:e6:a6:
                    27:bc:26:f2:ac:9e:38:ac:07:ed:32:34:1e:5a:df:
                    c9:4c:61:5f:26:d4:6e:e9:ea:02:a0:aa:be:70:a0:
                    7c:b2:3d:f4:02:ca:ec:b5:36:09:02:0b:d5:f3:7f:
                    18:21:bc:c7:8b:7a:13:62:d8:7f:8c:4a:60:9f:92:
                    d4:32:6e:0f:ab:2e:16:39:79:f3:09:41:6a:f5:cc:
                    fa:75:84:e0:4b:d6:6e:98:c6:ba:76:82:17:c1:1b:
                    c0:5e:2f:0f:51:5f:12:a1:e0:9f:5c:2f:d0:76:d1:
                    02:d6:cc:c8:8a:bc:d4:75:97:2b:43:74:57:b6:d7:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:46:97:7C:0C:FF:19:B3:B0:1A:4D:A4:91:95:1D:4C:D0:5B:63:08
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:21:98:96:27:84:4d:65:4b:25:6d:43:5c:9a:6d:ef:94:90:
         17:11:4d:7a:12:e2:4f:66:82:0c:21:46:ee:ce:a2:87:c8:0e:
         c8:53:1b:99:cb:a4:e3:ed:dc:4a:0b:90:f6:16:ab:df:99:08:
         ad:bb:a4:7e:82:92:29:b5:54:40:25:83:13:e8:98:8b:e0:a5:
         63:80:ea:08:c5:0a:d1:05:2a:d8:f8:82:71:08:43:41:ee:a2:
         1a:54:9e:84:e4:cb:08:a1:ef:9a:0d:e7:8a:d9:db:2a:80:55:
         e4:58:b6:32:9b:5b:5a:17:a4:3f:90:e8:68:a5:4e:60:66:43:
         f6:ba:05:e0:cb:8a:62:b4:72:db:d7:2d:cc:a1:ae:08:b5:a4:
         bc:d2:1c:27:2e:a3:9a:50:38:a6:dd:b2:71:6f:7c:2b:cf:2a:
         52:17:13:66:88:14:ac:c5:db:e7:48:b3:45:27:52:45:af:d8:
         c5:82:26:d3:fa:90:e6:85:23:ba:b9:3f:ca:74:37:5b:6f:4a:
         ff:52:38:67:61:2d:bb:cb:5f:e2:16:c2:00:23:33:bf:33:79:
         84:8f:30:3e:cf:8b:eb:c1:f2:8a:9a:23:b3:11:3d:29:85:4b:
         83:94:46:94:58:53:fd:22:6d:cf:0b:73:ac:84:d7:06:f2:2b:
         f2:f7:6b:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 12 05:19:38 2025 by rpki-client