This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa
File:                     5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa (raw, json)
Hash identifier:          896HKgnx+g6PtnP3xi6eMPuMMNyJq0mC18hmtwMp5Yk=
Subject key identifier:   C4:DE:0A:DB:59:6C:F2:DB:C8:49:27:C2:9E:90:95:BA:54:0C:E2:DA
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       15AB5B1AA2C281151C5DCC8FA9A1E7F7F730F76F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa
Signing time:             Sat 15 Nov 2025 05:10:06 +0000
ROA not before:           Sat 15 Nov 2025 05:10:06 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e000::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ab:5b:1a:a2:c2:81:15:1c:5d:cc:8f:a9:a1:e7:f7:f7:30:f7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:10:06 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=d28b5e44a075c14254d279788a9a0852a66dfe7a014879c9b247ee233e0d5867, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:5f:ee:e0:e4:a3:0f:20:a5:be:58:b4:0f:
                    2e:31:e8:da:4e:b9:fe:b0:93:b1:ec:8a:ae:25:57:
                    e6:b1:0c:9b:de:42:b8:cd:12:54:97:db:03:9c:13:
                    2c:e0:76:83:59:c1:ef:42:1b:7b:f8:fa:f8:25:d6:
                    06:95:be:4c:be:c6:97:07:39:0b:bb:81:80:32:31:
                    01:2f:42:9c:8b:c9:3e:83:32:2e:ae:76:bc:5b:4d:
                    c2:5f:61:16:b7:7a:91:70:bf:4b:ed:fb:c3:e2:8b:
                    ad:78:63:ab:fa:ad:eb:84:f5:a2:41:2e:34:b4:fb:
                    f9:d0:e7:38:47:de:57:03:1c:80:75:6c:4c:91:bd:
                    7d:72:2d:4f:c0:d5:35:d6:81:e0:de:d7:3c:70:38:
                    5f:6e:67:d8:0e:18:d2:55:e9:b2:f8:ec:cb:77:96:
                    da:37:df:d9:22:1d:50:3b:8d:92:04:3c:1d:8d:75:
                    91:23:be:72:8b:ec:4e:83:af:0c:27:d1:57:47:72:
                    4e:71:01:8c:4b:b6:16:b6:f2:f0:33:cc:aa:f9:0c:
                    38:c2:9f:58:58:43:cc:fa:40:8d:f3:78:5e:b1:cd:
                    8a:7c:1a:c9:64:ef:2e:cd:8b:79:7a:75:ba:58:76:
                    a4:1f:3c:94:e3:c1:1c:cd:73:7a:29:70:c6:01:f0:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DE:0A:DB:59:6C:F2:DB:C8:49:27:C2:9E:90:95:BA:54:0C:E2:DA
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e000::/42

    Signature Algorithm: sha256WithRSAEncryption
         25:66:a9:c2:38:80:be:3c:48:c7:8a:95:23:34:17:37:96:fd:
         7e:27:7a:12:1e:7d:4a:01:9d:a6:af:96:a8:29:03:57:d7:8c:
         00:15:03:e8:1e:ef:9d:39:c3:39:1c:a9:26:94:91:ab:06:44:
         bf:2d:1a:ae:05:d6:ed:08:6a:bd:07:10:63:f9:33:3b:82:c5:
         8d:fd:fe:f5:da:88:fe:d6:c3:23:61:f3:47:7b:c9:6c:c6:2c:
         2d:c3:82:00:19:ef:c6:a3:89:9c:57:87:b8:66:ab:b4:94:18:
         5f:12:5b:4a:64:67:17:10:f2:a9:28:25:0a:1f:37:ea:79:67:
         ab:ed:b0:b6:f0:4e:62:d4:e5:b1:2c:f6:a3:f8:c6:ed:0d:47:
         8f:9d:af:d2:a2:b2:3c:d8:21:ba:7a:7b:e6:e8:2a:af:d9:43:
         95:13:35:e6:29:2c:ca:df:d0:83:98:f9:6c:35:03:18:9e:9b:
         39:61:8d:42:52:36:ec:cf:2e:8b:6b:2a:db:c1:55:51:36:d3:
         02:bb:5e:37:87:08:9c:ab:0f:c4:a1:bf:23:df:55:d3:2e:95:
         0a:64:60:91:5b:b0:b7:b3:b3:6b:dd:8f:6f:38:1f:32:ab:f8:
         ea:af:19:be:89:39:70:f1:12:57:06:1d:ef:c6:48:58:fd:e0:
         e2:3f:6e:bf
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFatbGqLCgRUcXcyPqaHn9/cw928wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUxMDA2WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjhiNWU0NGEwNzVjMTQyNTRkMjc5Nzg4YTlhMDg1MmE2
NmRmZTdhMDE0ODc5YzliMjQ3ZWUyMzNlMGQ1ODY3MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgvV/u4OSjDyClvli0Dy4x6NpOuf6wk7Hsiq4lV+axDJve
QrjNElSX2wOcEyzgdoNZwe9CG3v4+vgl1gaVvky+xpcHOQu7gYAyMQEvQpyLyT6D
Mi6udrxbTcJfYRa3epFwv0vt+8Pii614Y6v6reuE9aJBLjS0+/nQ5zhH3lcDHIB1
bEyRvX1yLU/A1TXWgeDe1zxwOF9uZ9gOGNJV6bL47Mt3lto339kiHVA7jZIEPB2N
dZEjvnKL7E6Drwwn0VdHck5xAYxLtha28vAzzKr5DDjCn1hYQ8z6QI3zeF6xzYp8
Gslk7y7Ni3l6dbpYdqQfPJTjwRzNc3opcMYB8BgjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxN4K21ls8tvISSfCnpCVulQM4towHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzVjMGEwNmY5LWYxYjgtNGI0OC1iMTE5LWY2ZjAzNjFiZjBhNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD74AAwDQYJKoZIhvcNAQELBQADggEBACVmqcI4gL48SMeKlSM0FzeW
/X4nehIefUoBnaavlqgpA1fXjAAVA+ge7505wzkcqSaUkasGRL8tGq4F1u0Iar0H
EGP5MzuCxY39/vXaiP7WwyNh80d7yWzGLC3DggAZ78ajiZxXh7hmq7SUGF8SW0pk
ZxcQ8qkoJQofN+p5Z6vtsLbwTmLU5bEs9qP4xu0NR4+dr9KisjzYIbp6e+boKq/Z
Q5UTNeYpLMrf0IOY+Ww1AxiemzlhjUJSNuzPLotrKtvBVVE20wK7XjeHCJyrD8Sh
vyPfVdMulQpkYJFbsLezs2vdj284HzKr+OqvGb6JOXDxElcGHe/GSFj94OI/br8=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:30:28 2025 by rpki-client