This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa
File:                     87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa (raw, json)
Hash identifier:          SyH+STDsIDiMoYNu2i9kYfbLv3rt0uOodxGBVj7C348=
Subject key identifier:   E1:5A:C3:08:A6:C0:57:0F:E7:EC:97:1A:17:C1:E1:0A:50:6B:B5:6D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0BAFFF7B64631CCE1F9D2CD04C4CD6094E7F9128
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa
Signing time:             Sat 15 Nov 2025 05:10:41 +0000
ROA not before:           Sat 15 Nov 2025 05:10:41 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e500::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:af:ff:7b:64:63:1c:ce:1f:9d:2c:d0:4c:4c:d6:09:4e:7f:91:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:10:41 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=82d12c5cc161605abd84bc0dbda6a4ab5350fde050a104c7310ec688af2209bf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:be:80:13:8a:a4:53:85:b4:61:31:f5:58:
                    18:e9:fd:be:dc:a9:1c:64:98:75:25:72:66:60:38:
                    5b:b3:16:42:12:94:12:c4:77:05:d4:24:22:db:a3:
                    7f:3b:52:16:3d:c0:8e:c2:17:f1:3a:4b:b7:b9:de:
                    9d:75:94:ef:74:35:c1:14:3a:d1:fe:ca:a4:ab:65:
                    8b:59:db:3e:fa:55:6f:e8:61:b7:ae:12:26:63:96:
                    d4:42:01:59:33:06:a5:a7:ad:11:39:bd:11:06:e4:
                    1c:a4:b5:a6:24:ae:91:0e:a7:1f:09:47:0f:20:89:
                    0c:27:ed:d8:db:d5:1e:dd:ad:ab:ee:73:8a:2a:17:
                    38:2b:11:d8:8b:aa:38:6f:39:35:0d:d2:00:69:3c:
                    fa:7e:8b:1c:45:e7:9a:08:51:c9:5d:bb:02:9c:8a:
                    7b:8f:b4:73:23:3e:c8:63:a8:1c:87:50:7c:64:55:
                    0a:08:58:68:45:e9:c8:8e:8f:1d:b7:f5:a0:a5:8b:
                    81:b3:01:e1:ae:98:bd:03:56:1a:9d:f7:df:26:b4:
                    4b:95:dd:2b:12:1c:b4:9e:7e:33:18:f5:db:cb:b0:
                    33:31:a2:e3:5a:6e:a7:cc:a7:cc:69:36:4b:a7:6a:
                    79:51:6f:8e:df:9a:62:8e:83:52:d3:b4:7f:9c:b6:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5A:C3:08:A6:C0:57:0F:E7:EC:97:1A:17:C1:E1:0A:50:6B:B5:6D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e500::/42

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:c4:25:13:47:d4:42:fc:18:27:9f:af:77:60:f9:29:77:
         eb:ef:c1:5b:9d:79:5d:f7:b8:64:a9:3a:1d:63:7e:88:9b:91:
         16:18:e7:17:42:8d:de:1d:c0:ee:49:48:67:a8:32:c1:a2:15:
         16:0c:93:d0:95:82:02:0f:55:63:1e:35:36:d3:57:94:3d:9f:
         50:29:c3:f7:09:61:d6:3a:0f:26:e9:aa:57:ce:f1:a2:bb:96:
         49:f7:f5:40:2a:f5:31:4b:14:ba:52:59:02:47:b9:68:86:60:
         bf:49:64:cd:bd:10:a7:a6:29:ea:ea:3f:71:40:32:19:1f:ef:
         de:50:ff:71:f2:7a:19:10:26:23:2f:58:0b:a2:69:b3:65:75:
         63:cb:cd:c0:c2:f4:dc:ad:ff:f3:27:e7:04:a5:8d:db:ee:db:
         80:dd:31:e9:cf:6e:61:f7:ec:05:50:14:5b:3c:86:47:e9:4b:
         5e:26:75:74:0f:f9:8e:93:b1:1d:a4:79:49:e6:8c:5e:7e:37:
         82:de:e9:97:da:a4:15:21:ab:33:fe:16:be:1d:32:55:88:77:
         b3:53:4c:e6:3d:1a:86:a3:9d:69:3c:0d:c0:2c:a4:3e:dd:db:
         15:89:0d:1e:72:44:b9:e5:5c:74:56:37:c8:af:ba:e3:fb:4e:
         8f:7f:06:8b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUC6//e2RjHM4fnSzQTEzWCU5/kSgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUxMDQxWhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MmQxMmM1Y2MxNjE2MDVhYmQ4NGJjMGRiZGE2YTRhYjUz
NTBmZGUwNTBhMTA0YzczMTBlYzY4OGFmMjIwOWJmMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsJ76AE4qkU4W0YTH1WBjp/b7cqRxkmHUlcmZgOFuzFkIS
lBLEdwXUJCLbo387UhY9wI7CF/E6S7e53p11lO90NcEUOtH+yqSrZYtZ2z76VW/o
YbeuEiZjltRCAVkzBqWnrRE5vREG5ByktaYkrpEOpx8JRw8giQwn7djb1R7dravu
c4oqFzgrEdiLqjhvOTUN0gBpPPp+ixxF55oIUclduwKcinuPtHMjPshjqByHUHxk
VQoIWGhF6ciOjx239aCli4GzAeGumL0DVhqd998mtEuV3SsSHLSefjMY9dvLsDMx
ouNabqfMp8xpNkunanlRb47fmmKOg1LTtH+ctvChAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU4VrDCKbAVw/n7JcaF8HhClBrtW0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2Lzg3YmFmYjBkLTdjZWMtNDMzMS04YTA5LTRhNGQ1NmFiZjdkMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD75QAwDQYJKoZIhvcNAQELBQADggEBAAo2xCUTR9RC/Bgnn693YPkp
d+vvwVudeV33uGSpOh1jfoibkRYY5xdCjd4dwO5JSGeoMsGiFRYMk9CVggIPVWMe
NTbTV5Q9n1Apw/cJYdY6DybpqlfO8aK7lkn39UAq9TFLFLpSWQJHuWiGYL9JZM29
EKemKerqP3FAMhkf795Q/3HyehkQJiMvWAuiabNldWPLzcDC9Nyt//Mn5wSljdvu
24DdMenPbmH37AVQFFs8hkfpS14mdXQP+Y6TsR2keUnmjF5+N4Le6ZfapBUhqzP+
Fr4dMlWId7NTTOY9GoajnWk8DcAspD7d2xWJDR5yRLnlXHRWN8ivuuP7To9/Bos=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:37:28 2025 by rpki-client