This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa
File:                     6ccba569-7caf-468c-b996-e7a0034a48e4.roa (raw, json)
Hash identifier:          3Hh3KGuK4/hAU45sfYNmtjREcMReO+zLb2rFMOW6doY=
Subject key identifier:   F0:11:A0:1F:F3:A4:36:AC:1F:8C:A1:AE:5E:17:62:D7:65:81:51:CB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       17143E96BE2D55B8E4C4ED133411DBAABB64C77F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa
Signing time:             Tue 25 Nov 2025 19:50:48 +0000
ROA not before:           Tue 25 Nov 2025 19:50:48 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:14:3e:96:be:2d:55:b8:e4:c4:ed:13:34:11:db:aa:bb:64:c7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 19:50:48 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a8e9252fcf4e4193ba1e16a4e1ae3de0fcad95c27c33befd991d9902a180c65c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:2a:82:80:9c:a6:8f:a1:85:e1:f9:69:3b:
                    99:d2:0e:09:83:96:c2:2c:b2:79:31:64:c4:a6:60:
                    cf:f4:27:ba:61:4b:e3:b1:df:63:34:fa:80:af:9e:
                    b1:36:80:5e:80:5c:97:1f:97:0a:14:d4:4a:db:02:
                    8e:9b:fe:a6:de:bd:12:37:73:4e:7c:07:ee:05:95:
                    23:c8:83:8d:a9:11:5c:fe:72:7c:77:e0:50:ee:96:
                    7a:ab:93:8e:8a:fb:78:7f:78:eb:0e:b6:4f:30:f9:
                    0b:63:ae:9e:2b:58:59:9f:f8:1c:a9:23:74:23:90:
                    84:85:0d:36:54:de:09:a8:13:52:f2:c8:53:3a:26:
                    c0:27:6f:8d:6b:f6:a5:4b:14:e6:74:3d:ac:50:7a:
                    33:9f:45:cf:4c:64:8b:13:1b:5d:aa:68:a2:c3:54:
                    f9:8d:cc:2c:a0:84:0f:f2:d3:05:9c:3c:a8:30:68:
                    d9:46:87:bb:23:04:c5:28:39:0e:40:84:81:c0:5f:
                    55:d1:65:79:c7:a7:b9:2d:8a:df:4b:88:fd:e1:73:
                    68:bf:59:ee:b4:f2:ac:f6:c8:40:ac:bb:b7:9c:55:
                    c4:42:01:bd:75:33:e0:46:12:3d:01:bf:b0:52:1a:
                    aa:88:6e:7a:4f:24:78:2f:5b:5f:23:7d:cb:8a:9b:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:11:A0:1F:F3:A4:36:AC:1F:8C:A1:AE:5E:17:62:D7:65:81:51:CB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6107::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:a6:0d:98:b6:c0:f0:bc:6d:cd:47:47:83:e8:c7:43:4b:00:
         90:19:61:e8:4c:10:52:b0:b2:d9:88:a6:b7:90:cc:7c:3f:bc:
         7b:07:48:b5:7f:4c:ab:b7:6c:99:08:07:b1:65:e5:ef:8d:dc:
         e4:a5:d9:8d:94:08:5c:6d:d3:4f:10:a5:db:94:9f:bf:b2:48:
         d3:ce:7f:ea:9f:ad:77:9f:12:61:0a:9d:e2:2e:c8:86:6a:4f:
         0f:67:93:df:b8:ee:44:c2:45:e4:3c:b3:eb:53:a4:6c:a2:af:
         60:3e:31:fa:bc:1a:34:df:ec:2a:41:3b:26:a2:5d:07:d0:59:
         df:e1:f7:9a:ac:d4:56:e7:15:4e:fa:fd:87:1d:cf:4f:18:fd:
         16:35:c0:d6:6d:33:61:bd:12:fe:6d:f7:43:21:3c:04:89:82:
         6d:be:3c:35:f7:9b:12:66:f8:92:f0:b5:20:58:f1:a4:11:bf:
         8a:7c:7a:71:6c:eb:87:30:82:28:a6:71:67:b9:54:8a:9f:80:
         6a:a0:30:ae:cd:37:93:0d:74:d4:b5:a2:2f:df:d9:b3:95:7c:
         bc:5d:6a:17:1c:a3:23:11:b9:28:ec:75:64:ee:c9:f7:f7:1c:
         45:69:e8:7d:74:c8:4b:ff:2c:23:c3:85:20:b6:a0:57:57:80:
         20:e1:b7:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 10:52:58 2025 by rpki-client