This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa
File:                     5c49b356-187d-4223-bfed-b3dba0ce3e66.roa (raw, json)
Hash identifier:          xWQhiup1vf4efspRPse5WuvVGvMKEEs8OfdMsR2xHWM=
Subject key identifier:   1E:29:18:BD:9A:BA:8D:EC:17:40:59:E6:61:A6:33:97:CA:B8:7A:0A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6C710FFEA07E4B2B9368C55BD6B118F9C15F083D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa
Signing time:             Fri 07 Nov 2025 01:50:13 +0000
ROA not before:           Fri 07 Nov 2025 01:50:13 +0000
ROA not after:            Fri 12 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f2:7010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:71:0f:fe:a0:7e:4b:2b:93:68:c5:5b:d6:b1:18:f9:c1:5f:08:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov  7 01:50:13 2025 GMT
            Not After : Dec 12 23:59:59 2025 GMT
        Subject: serialNumber=f175153521cb9303ad109009355e906f7856db6359add0f7d9cabf4b36049c06, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:26:7d:52:53:e3:76:85:d0:c0:cc:5b:6b:
                    f1:ae:39:fb:aa:2e:51:7c:4d:f8:a6:9f:da:cd:40:
                    b5:9a:9a:20:14:87:9c:5b:b8:c8:64:d2:f8:85:a8:
                    2d:f8:18:5f:ed:17:70:3b:e5:1f:fe:b6:ba:72:c7:
                    3f:a1:59:57:91:64:35:b1:99:0d:c0:f5:2e:29:47:
                    83:b1:74:90:03:00:65:65:df:e2:ec:c1:67:da:c3:
                    06:77:5a:14:66:41:3d:c4:cc:dd:dc:be:7d:bd:5d:
                    97:69:99:b9:e9:4c:27:6d:2c:d7:48:19:13:56:04:
                    fe:95:01:b5:91:24:4c:cd:05:59:43:21:d1:b9:f2:
                    1f:ea:47:58:53:b0:79:d0:8f:dc:a6:f3:77:26:f4:
                    1a:5c:e1:f7:a8:9b:bb:5f:72:f7:c0:f5:2a:d2:a5:
                    01:2f:1f:83:56:f9:c8:43:b3:12:02:9c:31:e4:75:
                    9b:67:41:cb:d5:f8:d1:6f:e5:59:cd:fb:65:74:64:
                    b4:5c:63:14:0e:8b:88:1b:61:4f:cf:bf:73:0d:58:
                    b7:76:68:a2:78:71:37:b8:3c:a0:19:10:08:5c:f3:
                    53:47:7a:af:53:09:5c:ef:02:0e:9a:d2:2b:22:b9:
                    4e:e6:9b:c6:a8:9b:2e:c9:81:b9:28:ff:aa:8a:b0:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:29:18:BD:9A:BA:8D:EC:17:40:59:E6:61:A6:33:97:CA:B8:7A:0A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7010::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:56:4a:4d:11:91:ea:58:db:68:f5:51:21:5a:6c:0e:83:b4:
         9a:74:e8:e6:9e:12:7b:1d:67:32:48:85:a6:94:b2:16:f5:d1:
         98:52:3a:f9:29:55:f1:06:8a:a7:31:54:bc:f9:f3:c1:90:5a:
         a8:3f:c3:2e:ce:81:4b:b4:35:40:44:18:a9:40:c0:e3:46:bb:
         fe:0b:3c:b0:7f:62:12:58:f6:f1:56:96:39:52:2f:a1:7b:cc:
         4b:01:64:4f:5f:60:85:e9:16:22:3a:5e:04:54:ee:13:00:76:
         f2:85:90:53:b3:47:08:99:c5:a0:fb:32:a4:99:de:a1:cb:1c:
         d2:c5:93:45:26:2e:41:89:2a:88:95:d2:01:d6:7c:c8:29:69:
         b8:28:93:5e:8f:e6:e1:e7:97:27:34:cc:a0:59:83:a3:61:6e:
         68:2f:45:c7:fc:c3:bf:d8:49:67:38:bc:2d:ee:cf:1f:17:78:
         d7:83:2e:c8:50:25:11:f2:b4:88:f1:cb:7c:d6:25:ed:02:05:
         d4:da:5e:8a:73:10:ec:59:60:f0:81:f9:e5:a2:5c:7f:37:da:
         df:61:b2:75:11:7f:10:4c:cc:4a:f5:e7:13:99:bc:7a:e1:3b:
         24:89:59:ad:fa:6f:b0:fe:5a:a6:77:0d:97:4f:04:42:8f:c2:
         45:23:02:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:37:32 2025 by rpki-client