This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa
File:                     4550dcb5-431c-4b07-9e46-224c71cb2b00.roa (raw, json)
Hash identifier:          se1/MVoZ8mc+IlqnUvpBZHrMdC36ZHyXO6zYZGGKKV8=
Subject key identifier:   C2:A0:72:BA:48:6D:DB:74:26:D4:BE:F5:91:A7:8B:7A:FC:AF:72:9E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       150B3B64C908B8A6A866ACF7C72FEAC183F9E2E3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa
Signing time:             Sat 15 Nov 2025 05:10:27 +0000
ROA not before:           Sat 15 Nov 2025 05:10:27 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:5518::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0b:3b:64:c9:08:b8:a6:a8:66:ac:f7:c7:2f:ea:c1:83:f9:e2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:10:27 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=bf8fbb77b3332fb5c070c1294ecb4c8fbeb1150edd2306c8c1f6f245bd9535b8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:18:7b:51:d2:4f:94:90:46:3e:72:f7:6c:
                    b9:76:0b:d3:a3:80:ef:68:7e:51:52:9b:7a:9d:00:
                    a1:b3:cc:84:e0:9a:1d:b6:02:34:4f:4a:ce:41:aa:
                    8e:5e:e3:97:00:52:13:2a:3a:e9:e7:fa:c0:d2:a0:
                    11:4c:df:ef:c1:65:c8:fe:a1:90:5e:aa:3d:2a:de:
                    d6:5b:d3:f3:ec:0e:72:a0:8b:0c:fc:d1:08:a9:48:
                    e8:b4:a5:c0:72:33:96:f0:35:b9:a6:72:3a:7d:ed:
                    5c:d1:09:26:63:7c:8b:4e:cb:54:dd:df:cc:71:f0:
                    a1:b9:4e:4c:3a:df:2d:44:94:99:89:8b:89:69:80:
                    e8:a3:cd:9a:ad:e3:5d:ce:c2:d9:d6:a2:b1:64:4d:
                    e3:79:e5:e3:55:37:bb:82:10:6c:eb:d5:8d:98:19:
                    37:1e:26:a2:9d:9b:22:a3:08:77:70:73:59:29:c1:
                    c4:ee:8a:c9:80:e3:8e:d1:a5:bb:77:67:7f:b3:8a:
                    8f:23:6f:ab:2e:4c:db:a7:2d:cc:e8:49:ea:54:c3:
                    72:c7:93:dd:03:a9:32:56:b4:3d:a2:0a:cf:d6:f7:
                    02:b2:bb:0d:7b:5c:d9:c7:13:d5:9a:38:8d:60:c4:
                    3b:24:bb:5b:fc:f7:ec:60:48:d6:af:17:8a:14:21:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A0:72:BA:48:6D:DB:74:26:D4:BE:F5:91:A7:8B:7A:FC:AF:72:9E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5518::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:72:f6:c4:58:c1:3b:61:86:6d:84:64:5d:34:78:a3:95:fa:
         90:4f:37:c9:a1:7c:6b:c4:99:d1:8d:d4:9f:ed:39:52:f0:e0:
         af:af:70:54:6c:17:f9:cb:65:d5:b5:56:a0:bf:3f:51:ed:52:
         8c:30:d5:0a:ca:b5:1e:46:64:59:34:71:1b:87:d8:ee:58:4a:
         fd:04:1f:89:f1:61:72:cd:85:14:37:f0:6b:cf:c1:91:f1:95:
         f7:57:ac:fa:74:c4:5b:62:c1:31:68:c5:b3:68:25:89:ba:2c:
         39:35:be:b1:db:5d:99:ff:3e:45:14:b2:70:32:66:da:0f:e4:
         c3:f3:ae:52:e6:2c:20:17:e6:4e:74:fe:2a:6c:05:8a:32:b5:
         32:53:49:95:9e:c1:6c:d1:f2:90:7b:ac:56:b2:8e:b2:70:ae:
         0a:2b:4c:98:bc:21:7c:65:7c:dd:fc:7a:16:e3:6e:19:17:a1:
         d2:3e:99:7f:3a:74:a3:34:b5:ec:15:e8:30:2f:1f:46:a4:a2:
         05:d2:f6:bf:f5:aa:60:5f:53:d2:b3:d2:62:88:73:26:65:4e:
         b7:97:f5:a0:0e:76:57:4c:74:20:5b:41:72:8c:f6:70:8e:04:
         5d:db:ac:e6:eb:f1:9c:8f:8f:be:93:0a:16:de:90:e3:a8:ba:
         2a:73:65:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:30:14 2025 by rpki-client