This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/59630120-022f-4db2-870c-b5a5f46ee77a.roa
File:                     59630120-022f-4db2-870c-b5a5f46ee77a.roa (raw, json)
Hash identifier:          oFd6ajT2HaBMhhmmc/rTwQJzTvyMk4cdGtQGykQUUrk=
Subject key identifier:   0F:33:E2:5A:64:59:EC:30:4A:60:55:45:C1:05:E5:C8:80:AD:B3:5D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3DFED8D68B4858D4B05F0483551E365704F6CA4A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/59630120-022f-4db2-870c-b5a5f46ee77a.roa
Signing time:             Sat 22 Nov 2025 00:00:08 +0000
ROA not before:           Sat 22 Nov 2025 00:00:08 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f2:7101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fe:d8:d6:8b:48:58:d4:b0:5f:04:83:55:1e:36:57:04:f6:ca:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 22 00:00:08 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=98babf26d6af9b0f971aee6411966e03c434131d398098771eed0599082bb20d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:3f:40:d8:6d:c5:81:13:12:43:18:63:54:
                    16:dc:58:0d:74:0a:23:f5:1e:aa:f4:e2:58:dc:e7:
                    6b:09:7b:71:44:0b:89:0c:6a:87:b3:b1:72:9d:26:
                    f1:f6:31:3f:21:d7:04:26:5d:39:ca:8c:fa:af:03:
                    3e:96:ed:d8:2e:2d:f0:ab:8b:44:b8:f8:14:6e:e2:
                    95:61:05:06:58:a7:e8:a1:94:25:a5:c7:ef:72:fd:
                    2d:b9:94:da:7d:39:74:37:53:05:df:e2:e2:97:7e:
                    68:b6:d4:b0:65:bd:66:6e:d0:e9:a6:ee:93:51:2c:
                    1b:94:9e:e2:f5:c8:71:86:0e:22:46:ad:74:fc:77:
                    fb:39:30:a1:ed:40:ef:5a:29:ce:f1:08:16:a6:9d:
                    bb:4a:79:13:d5:85:43:c4:06:77:9a:bc:db:46:86:
                    7d:15:b0:b8:2e:5b:2b:6b:06:ce:9a:f0:92:76:72:
                    6b:f3:c4:4a:85:45:0c:74:6c:a1:59:56:35:61:80:
                    de:92:79:2f:5d:f8:a8:5d:9b:fa:2d:ba:9b:08:0b:
                    50:3b:71:60:ff:bc:2d:c5:c8:63:3f:7b:44:60:00:
                    58:b7:09:69:56:60:2f:fa:12:8c:b4:88:77:08:70:
                    32:e3:e4:da:cc:a1:bb:04:de:40:99:d9:36:cb:5d:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:33:E2:5A:64:59:EC:30:4A:60:55:45:C1:05:E5:C8:80:AD:B3:5D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/59630120-022f-4db2-870c-b5a5f46ee77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7101::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:7c:79:3b:c4:f7:e0:3b:72:09:81:69:8b:d0:2a:0a:28:
         46:6c:ec:86:37:e9:5a:ab:86:25:a4:ec:f3:62:14:01:42:69:
         f1:a0:ca:b7:e9:72:80:06:f6:c1:9f:32:e0:f1:bf:1e:25:3d:
         7a:0c:79:7c:e4:02:ab:d9:44:fb:e2:76:d8:c2:9b:7e:6c:73:
         1c:98:a4:fa:5b:83:32:36:e4:11:a9:5b:90:bd:96:97:fd:fc:
         ae:e2:8c:6b:55:fc:ee:31:46:ef:a5:7a:06:d8:3f:79:51:17:
         ea:e8:69:cd:e8:17:9c:a7:1d:2f:f4:29:5c:5a:32:b1:92:19:
         9b:00:bf:a1:39:d1:04:ac:ac:35:36:ea:08:97:71:48:f0:ef:
         e6:72:b2:fa:46:c0:31:d5:53:ec:65:ba:4f:4d:80:30:11:fd:
         68:86:22:68:fe:fd:a7:48:69:68:ef:bb:59:79:84:ab:b4:58:
         f7:92:0d:2c:50:58:a4:0b:45:fe:96:2f:d8:64:ce:50:41:35:
         7e:ba:f1:65:dc:56:46:99:3b:6d:9a:59:41:e2:77:9f:45:e4:
         81:1e:1e:65:70:a9:a2:25:8b:db:8c:d0:95:87:85:58:5a:a3:
         94:9e:27:c1:f3:a7:aa:90:e4:bb:ce:16:d9:95:1c:75:43:5b:
         93:be:94:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:37:50 2025 by rpki-client