This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa
File:                     644f882a-d42c-4c76-bb70-882838f6e3e0.roa (raw, json)
Hash identifier:          V6KoajSjLSWNBT2mJ+fohh0t8R4R3ypZ2hT5804UXhI=
Subject key identifier:   C5:C8:3E:85:24:1F:93:0A:8A:35:36:61:13:34:C7:81:39:82:04:05
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3A9FDD8E136585AB3B68415D4A9DC39CEC85252D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa
Signing time:             Sat 15 Nov 2025 04:00:04 +0000
ROA not before:           Sat 15 Nov 2025 04:00:04 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9f:dd:8e:13:65:85:ab:3b:68:41:5d:4a:9d:c3:9c:ec:85:25:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 04:00:04 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=90ca546270944eb12fa0362d22d3bab992b5ba654f0267c9dad60a27fcc19930, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:01:ee:3f:85:b4:a0:07:7d:06:f5:bb:cd:
                    07:8b:b6:60:b8:ad:dc:1d:9d:ce:43:57:86:a4:3e:
                    66:e2:e7:18:c0:24:8e:00:c3:85:bc:4b:c0:1c:b6:
                    46:74:52:89:2d:38:b6:ad:d8:be:83:2e:c2:86:9f:
                    82:32:b3:70:fd:78:3b:f4:da:27:69:ea:3c:2c:10:
                    d0:82:7d:4d:9d:59:e4:10:2b:68:1d:d1:9c:f5:30:
                    b4:f9:cb:08:30:a3:0d:1b:cd:7b:4e:19:eb:67:58:
                    78:aa:b5:48:c9:f9:cb:f9:14:74:dc:39:95:ef:76:
                    ca:e1:04:ad:7e:d4:a9:52:b7:d4:94:3e:e9:f5:7b:
                    24:1b:68:96:9b:0d:19:04:64:f7:f2:cf:91:fe:5c:
                    c0:37:1b:3c:52:c3:1b:8d:28:80:6b:bd:95:8d:d6:
                    64:d8:b8:68:86:39:9c:e0:84:d8:7b:b3:03:ac:a8:
                    af:0e:07:25:39:0a:44:ff:2e:6c:0b:2d:72:8d:85:
                    85:ee:01:d3:1c:c5:1f:be:ad:67:af:4a:b9:cb:79:
                    42:19:e0:66:14:92:11:c4:a9:82:11:0b:60:bb:c8:
                    2d:86:9a:e4:0e:48:37:fe:f7:d9:78:5e:78:02:c2:
                    f0:f0:5b:23:0c:53:86:33:16:bf:a0:5f:ca:2b:7f:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C8:3E:85:24:1F:93:0A:8A:35:36:61:13:34:C7:81:39:82:04:05
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e600::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:1e:aa:70:84:cf:95:60:39:b2:d9:40:9f:9d:a6:10:55:
         01:0b:6b:0f:05:c4:84:4c:04:89:92:33:8f:fd:42:f5:e1:e9:
         48:f3:75:bc:cc:02:33:ba:7d:47:20:21:b8:95:37:10:51:b6:
         dd:25:28:8b:71:9d:46:79:85:cc:08:7c:49:3e:e6:0a:b5:b1:
         05:ee:0d:9e:db:8b:11:9e:89:f5:d7:7a:59:22:61:c4:de:89:
         7b:e0:fb:84:2b:e4:7f:cc:86:73:3d:0c:63:d4:5c:49:f8:95:
         ce:0f:22:6a:3e:9e:e7:43:bf:d9:54:17:41:3c:29:0d:8c:0f:
         b5:68:e5:1a:a3:d8:0f:a2:3c:25:90:6c:5b:34:35:51:c0:0f:
         29:a4:b8:3b:9e:1e:4f:f3:a5:a2:c8:aa:b5:b7:78:5d:18:7b:
         c0:34:f3:68:7b:6b:12:0a:92:85:42:91:ed:21:fa:3b:0b:3d:
         62:b7:d8:bb:36:60:2d:1d:ed:2c:e8:59:43:fc:fb:47:78:63:
         91:e3:00:9b:16:9b:14:c3:31:c7:80:0f:82:d9:ce:73:b1:fe:
         dd:c8:cd:09:5e:b9:cd:32:90:2f:48:30:36:c9:20:b7:90:8e:
         64:63:62:fa:7c:2f:47:ee:a5:1a:c6:6e:a7:03:b8:22:fc:b4:
         cb:75:94:c1
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUOp/djhNlhas7aEFdSp3DnOyFJS0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDQwMDA0WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MGNhNTQ2MjcwOTQ0ZWIxMmZhMDM2MmQyMmQzYmFiOTky
YjViYTY1NGYwMjY3YzlkYWQ2MGEyN2ZjYzE5OTMwMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrCgHuP4W0oAd9BvW7zQeLtmC4rdwdnc5DV4akPmbi5xjA
JI4Aw4W8S8ActkZ0UoktOLat2L6DLsKGn4Iys3D9eDv02idp6jwsENCCfU2dWeQQ
K2gd0Zz1MLT5ywgwow0bzXtOGetnWHiqtUjJ+cv5FHTcOZXvdsrhBK1+1KlSt9SU
Pun1eyQbaJabDRkEZPfyz5H+XMA3GzxSwxuNKIBrvZWN1mTYuGiGOZzghNh7swOs
qK8OByU5CkT/LmwLLXKNhYXuAdMcxR++rWevSrnLeUIZ4GYUkhHEqYIRC2C7yC2G
muQOSDf+99l4XngCwvDwWyMMU4YzFr+gX8orf2l1AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUxcg+hSQfkwqKNTZhEzTHgTmCBAUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzY0NGY4ODJhLWQ0MmMtNGM3Ni1iYjcwLTg4MjgzOGY2ZTNlMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPD75jANBgkqhkiG9w0BAQsFAAOCAQEAAeIeqnCEz5VgObLZQJ+dphBV
AQtrDwXEhEwEiZIzj/1C9eHpSPN1vMwCM7p9RyAhuJU3EFG23SUoi3GdRnmFzAh8
ST7mCrWxBe4NntuLEZ6J9dd6WSJhxN6Je+D7hCvkf8yGcz0MY9RcSfiVzg8iaj6e
50O/2VQXQTwpDYwPtWjlGqPYD6I8JZBsWzQ1UcAPKaS4O54eT/Olosiqtbd4XRh7
wDTzaHtrEgqShUKR7SH6Ows9YrfYuzZgLR3tLOhZQ/z7R3hjkeMAmxabFMMxx4AP
gtnOc7H+3cjNCV65zTKQL0gwNskgt5COZGNi+nwvR+6lGsZupwO4Ivy0y3WUwQ==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:30:32 2025 by rpki-client