This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa
File:                     25c2cfc0-0999-4c50-a813-1379410017e8.roa (raw, json)
Hash identifier:          Ywse4l95m7QgxcSDYpHbq0AEhWnvtwGkCYQ2eZ+0pAw=
Subject key identifier:   6C:C1:0A:63:0C:1F:FD:80:E7:71:A8:75:E1:33:5B:D2:F8:09:A6:7E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1B504AB4174E995EB9C34ED8BA5258AE66F342B8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa
Signing time:             Sat 15 Nov 2025 05:10:43 +0000
ROA not before:           Sat 15 Nov 2025 05:10:43 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:50:4a:b4:17:4e:99:5e:b9:c3:4e:d8:ba:52:58:ae:66:f3:42:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:10:43 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=f187e641d282d141cb2c5cecf1717123f5c0ca543a471782b9c9b2add0ff145b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:b4:80:2e:1b:43:41:65:4d:9e:73:d8:37:
                    46:63:26:10:20:8d:ac:8d:ea:e3:81:ff:2d:21:cc:
                    52:9a:61:69:62:f6:1b:ed:55:9a:27:a6:79:a1:74:
                    5f:f1:2b:49:59:71:51:ae:89:65:ad:54:2a:40:b8:
                    dd:2f:ec:c5:3f:56:92:cc:df:f6:d4:77:a0:12:fe:
                    f4:8a:49:62:1c:71:8b:0a:b7:40:b3:05:92:8b:fe:
                    22:a9:ab:fc:fd:3e:63:69:99:eb:30:15:10:1b:59:
                    22:cb:a8:91:6f:c2:00:c4:00:1f:fd:26:84:12:19:
                    ad:df:5b:0f:5d:77:06:ba:43:5c:8b:5e:56:7f:52:
                    bc:ce:e1:99:f7:ef:5b:1e:3e:86:a4:23:7f:55:34:
                    76:ce:93:87:ba:76:37:01:33:12:c4:39:b5:4d:cf:
                    f1:e1:cc:cd:4d:0b:31:35:36:81:7e:96:31:d5:e0:
                    5d:ce:f2:72:d4:4f:f0:8b:52:0a:80:f7:dc:5e:8c:
                    f3:52:cf:21:a8:68:25:74:fb:a1:7c:1c:62:67:ed:
                    98:a3:5e:28:d3:8d:0e:12:a7:8a:48:1c:b7:9a:9c:
                    f9:61:25:8a:8a:18:7b:fc:07:17:ca:cb:77:4f:f6:
                    76:9d:0a:56:64:ad:b1:dc:08:df:60:e5:19:42:14:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:0A:63:0C:1F:FD:80:E7:71:A8:75:E1:33:5B:D2:F8:09:A6:7E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e800::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:e3:64:aa:d9:c5:08:81:56:b7:b9:fe:e4:65:b0:a1:5c:6e:
         d6:f5:3a:c4:af:3d:9d:59:d2:42:7d:4e:e2:11:91:4a:a6:7d:
         2e:30:08:6e:14:53:2c:70:56:90:51:f2:9f:68:04:d5:de:77:
         4b:9a:f3:27:19:33:1e:33:09:75:ed:e8:f3:5c:0f:4c:04:35:
         03:b6:d5:47:f1:7f:66:f0:cb:91:fa:2d:8d:59:bd:ac:fc:f4:
         26:ae:4c:25:a5:4e:d5:32:8a:98:b8:1e:0a:32:5c:75:19:1c:
         47:04:8a:22:47:e7:5b:21:8f:97:b5:63:aa:fd:2a:8c:42:28:
         8c:17:bd:f0:12:7d:ba:68:b1:8d:c6:76:33:70:27:f6:55:d8:
         d2:72:56:a0:d4:63:8d:14:7f:b1:e0:61:3a:93:fb:61:c4:f9:
         06:05:b5:70:8d:8e:57:f2:01:b3:8a:3b:9a:be:6c:bf:ab:0c:
         e2:6f:a8:6a:9a:8f:2c:ce:10:96:bb:26:11:33:3b:d2:b1:26:
         d2:5b:a5:b8:c5:d3:6e:86:68:61:81:f4:fc:b7:70:46:99:c5:
         b7:8e:1c:35:49:d4:53:0f:ed:2a:9d:41:58:df:c1:8c:b8:a7:
         e9:20:4f:9d:3d:3d:11:ec:f1:0c:a3:33:d8:6e:c2:d0:32:b2:
         53:4d:62:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:31:18 2025 by rpki-client