This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6185ff3d-ccdb-477b-a33c-aacb10361062.roa
File:                     6185ff3d-ccdb-477b-a33c-aacb10361062.roa (raw, json)
Hash identifier:          wbuBasEZJtffV/Bj7UaT0+4LBdDnWYeMckyOvYUQego=
Subject key identifier:   4D:65:B4:90:9F:A4:E9:07:FC:CB:64:33:C6:32:B4:EA:82:9A:49:12
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0FB73C509D5D90159640E3FB37F87BB2AA20A5B1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6185ff3d-ccdb-477b-a33c-aacb10361062.roa
Signing time:             Fri 07 Nov 2025 01:50:10 +0000
ROA not before:           Fri 07 Nov 2025 01:50:10 +0000
ROA not after:            Fri 12 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f1:8a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b7:3c:50:9d:5d:90:15:96:40:e3:fb:37:f8:7b:b2:aa:20:a5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov  7 01:50:10 2025 GMT
            Not After : Dec 12 23:59:59 2025 GMT
        Subject: serialNumber=74feff80b1ce7573309d7697961b5079dcb70a6a9635109245e2e78135ce594f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:b2:ca:c6:df:6f:6f:dd:ad:c5:02:d4:2f:
                    ca:91:dd:6e:d6:ad:9e:ea:20:85:f0:ed:e3:a2:2f:
                    52:f2:d9:a7:35:3c:dc:65:86:37:fc:56:4b:b8:d7:
                    7f:76:dc:5d:b8:ed:13:e0:9a:69:60:c8:3e:26:7e:
                    97:8b:7f:a2:6c:b2:38:fa:e1:f2:19:6d:6e:a8:9e:
                    23:ae:67:6d:c5:ac:fb:d5:1f:6e:0a:1b:eb:01:5e:
                    34:d2:05:04:62:28:6a:0f:44:8f:af:01:67:c5:5c:
                    74:2d:ba:66:53:30:ac:90:00:0a:05:85:0f:50:5c:
                    9b:f0:e1:5c:c6:38:5f:7d:be:f3:34:95:d4:57:0a:
                    3c:2c:70:0e:1a:82:2d:6f:47:83:39:63:1a:f2:46:
                    49:b9:ea:2a:cd:c1:f5:a0:b5:52:db:e0:db:09:e0:
                    d5:bb:51:17:0a:20:18:f1:35:8f:f5:f4:59:cb:c2:
                    98:3e:0d:24:4e:63:52:34:2a:d1:88:36:8a:5c:f5:
                    86:14:53:d3:a4:2a:29:40:0a:68:bc:ec:2a:72:d0:
                    30:31:18:f3:2b:f5:9d:e7:7b:c1:e6:78:19:45:c6:
                    16:69:4b:18:3e:4e:e0:c3:e7:00:ff:e0:f0:bb:f1:
                    4b:13:94:53:2a:bb:e9:81:08:ab:02:5d:e2:c8:c6:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:65:B4:90:9F:A4:E9:07:FC:CB:64:33:C6:32:B4:EA:82:9A:49:12
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6185ff3d-ccdb-477b-a33c-aacb10361062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:72:89:7e:a5:5e:63:52:49:bf:e8:e4:88:b6:e8:7e:f5:76:
         45:4a:4a:e5:68:2b:b7:e3:19:bf:7b:f7:ae:3b:d5:ae:67:34:
         b8:ab:f1:53:f7:b7:3d:93:3a:5b:0c:62:28:34:dd:a6:f4:a7:
         01:2e:15:ce:50:2c:ef:6d:cd:fd:3d:a9:06:bf:41:1e:8c:3c:
         93:2b:49:b5:db:b8:58:33:44:e2:80:89:63:ea:4e:5c:06:d3:
         ad:2c:81:32:68:a8:d0:43:e8:8d:d5:7e:9d:1b:08:fc:1f:72:
         54:c0:a7:ad:4a:d0:b3:fa:c5:82:b3:f3:5a:0c:42:3c:f2:bf:
         89:33:79:3f:5b:0d:d7:df:15:89:dc:90:dc:47:7b:c5:77:ff:
         d8:23:17:bb:d2:4e:e0:72:20:97:c9:f8:36:7d:44:9f:2f:43:
         ff:6a:e0:09:a3:ac:bf:3d:ea:ca:b5:4c:01:73:ec:45:54:79:
         44:d5:80:31:62:dc:24:da:89:af:e7:4a:90:eb:ca:5f:f8:91:
         14:c1:9e:77:dc:52:df:fd:4b:c4:d7:f5:11:0f:f3:f3:e2:5f:
         dd:24:43:1e:e5:83:3d:0d:24:84:fa:8d:51:8e:e0:4a:43:ce:
         45:4b:a2:4a:2a:49:75:89:b3:82:9f:07:c5:e7:d8:cb:28:5e:
         b2:e9:bd:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 29 11:49:56 2025 by rpki-client