This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa
File:                     73712e14-51d5-41db-bcf2-73aa504e6eab.roa (raw, json)
Hash identifier:          o2KZL2uGlr/E91cUyLNNZUF2SrxotlGP2kO/Bw4yQZs=
Subject key identifier:   CA:3D:64:5F:29:63:1C:15:A1:21:C2:25:DF:42:0F:8F:7D:53:1F:6C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       43B7385D9433DC981A3CB4FF2D3B447AB629D2BD
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa
Signing time:             Wed 10 Dec 2025 04:50:10 +0000
ROA not before:           Wed 10 Dec 2025 04:50:10 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b7:38:5d:94:33:dc:98:1a:3c:b4:ff:2d:3b:44:7a:b6:29:d2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 04:50:10 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=9b21d62e0ebf2cf93a1c1e737df90c0f1fa583ed4b73438d652df29d6e710425, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:fb:3a:37:8f:7c:bc:d5:9b:1b:1a:ca:50:
                    77:99:a2:5e:eb:a9:74:0d:5c:f3:b7:75:a7:60:8d:
                    74:f6:7f:ba:23:9e:12:d7:ca:a2:f2:0b:0f:7d:43:
                    e9:9e:e9:de:ec:4e:bc:de:71:fa:31:a0:45:0c:5f:
                    d5:44:0a:4f:84:22:65:71:61:bd:89:a9:ec:d4:00:
                    31:74:33:64:8c:db:54:bf:f8:e7:4c:c4:c6:2f:5b:
                    9b:fb:c4:fe:55:5f:d7:23:6f:25:f1:eb:9c:65:a8:
                    4d:ab:6b:24:3e:1c:5e:ab:05:1b:0f:91:ff:4a:50:
                    0a:00:04:8a:4c:e8:30:b8:0a:6f:8b:5f:e2:4f:99:
                    85:24:fa:f3:db:8c:f5:eb:a7:54:be:5e:38:75:d3:
                    c7:1e:dd:ed:80:9a:d0:a6:91:80:8f:2f:34:48:7a:
                    ba:c0:cf:6c:a5:65:df:74:ab:21:90:e8:ab:be:49:
                    e4:29:51:13:84:3d:06:2e:2e:70:72:23:79:e3:6d:
                    e3:42:59:35:8e:de:b2:57:6e:8b:53:0b:ca:47:95:
                    16:78:99:d9:04:ae:85:bd:56:75:6a:ee:2e:32:a7:
                    47:ff:24:74:4e:54:a2:25:40:14:a5:b2:37:f7:f9:
                    67:05:9d:06:16:84:f5:ed:2a:d6:72:fb:6b:53:ff:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3D:64:5F:29:63:1C:15:A1:21:C2:25:DF:42:0F:8F:7D:53:1F:6C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:9c:65:f6:91:60:76:c1:cc:07:12:87:70:cf:2b:de:7e:
         2a:8a:f8:ad:a3:bc:a2:02:e8:75:a6:98:08:38:53:2b:5b:f0:
         a4:c2:15:4c:29:b4:0e:2c:1f:65:4b:c4:02:d9:f2:b0:d9:70:
         cb:31:c7:ae:3d:c5:08:4d:63:50:52:2e:5f:26:14:cb:0a:60:
         9f:99:5c:14:9c:a7:4b:c8:60:6f:2f:08:20:18:9d:d7:f4:15:
         9f:c7:c0:2f:55:3e:d0:3f:0a:8c:19:3c:e0:dc:3e:cf:97:29:
         95:02:5d:64:3a:04:e6:6b:d7:1a:9c:65:21:eb:a2:0f:54:e6:
         ad:c4:55:83:9e:f1:19:33:82:e2:ee:18:e6:da:e7:25:b9:0e:
         88:e4:30:3e:08:5d:eb:84:fa:e7:e7:41:f6:eb:da:0e:b9:f3:
         7b:b6:58:9d:17:dc:d8:45:49:ae:87:86:4d:a6:d7:e0:70:fd:
         e9:34:fd:39:5e:1d:95:80:98:59:7a:98:63:c1:3d:3c:ee:3f:
         58:9b:f4:70:6e:99:f2:f0:ce:fd:17:ca:29:38:29:b4:ec:cf:
         6c:be:f2:46:ac:83:83:20:06:8a:7b:77:ee:e7:ff:e1:a4:10:
         1e:70:34:cd:5e:72:cd:a8:42:c3:e7:a1:67:a3:0b:26:15:7c:
         94:b3:8d:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Dec 15 12:02:39 2025 by rpki-client