This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9738bb0d-1a84-4601-bc6b-25ba7f49c72b.roa
File:                     9738bb0d-1a84-4601-bc6b-25ba7f49c72b.roa (raw, json)
Hash identifier:          gcur0WPoqhIik/zqrO1S/bJG+Ar9rXXQaoehmhphrxY=
Subject key identifier:   04:14:AD:8B:76:53:1C:46:F1:6C:01:7E:68:3A:BA:C4:C3:39:66:78
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6C28CE438F7067EE6747DB032070E9502BEE4A3A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9738bb0d-1a84-4601-bc6b-25ba7f49c72b.roa
Signing time:             Tue 25 Nov 2025 19:50:37 +0000
ROA not before:           Tue 25 Nov 2025 19:50:37 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5503::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:28:ce:43:8f:70:67:ee:67:47:db:03:20:70:e9:50:2b:ee:4a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 25 19:50:37 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=6e0dba6096f5bf05c8500a57bbe64a9eb843da60e22d7018b48008911ec3c070, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:e9:b1:11:5f:83:1e:9a:07:6a:6c:e5:44:
                    23:fd:a7:4b:e9:c8:93:86:47:33:97:e1:2f:cd:cf:
                    e6:d2:a3:83:6d:60:63:70:d4:e0:cd:39:d6:2b:a1:
                    2e:61:64:61:9d:69:28:44:ea:f9:d2:55:2b:ce:26:
                    15:1a:25:94:e2:8a:cb:bd:e4:37:93:77:00:3e:d4:
                    12:e7:96:29:59:30:4a:ce:c7:1a:b8:b9:a7:49:65:
                    4f:6e:c9:e7:6c:54:aa:b6:d2:29:07:19:2e:13:44:
                    25:3c:7a:ea:97:77:b6:92:a1:0b:60:d7:26:2c:02:
                    54:4d:f0:5b:65:c7:bd:00:b4:09:6c:51:54:76:86:
                    84:e7:44:eb:1d:60:0f:37:a3:d4:c5:44:8b:d2:61:
                    43:66:ce:f0:3d:95:b7:51:24:92:b9:24:0c:3c:24:
                    08:95:19:a8:9e:4c:e8:6d:be:e3:c3:fd:dc:83:f5:
                    53:77:ad:35:7a:f2:3e:df:e4:27:35:d9:98:2c:f4:
                    0a:40:51:e9:b9:a0:d7:e6:fc:10:5f:71:7b:4d:9c:
                    64:43:5b:a5:d6:6a:8d:22:a5:b5:f1:1f:68:96:7f:
                    3d:18:e3:ae:31:f6:6d:53:7c:64:fa:4b:50:3a:cf:
                    87:00:de:d6:e2:91:f7:07:d7:95:c7:22:7c:24:8f:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:14:AD:8B:76:53:1C:46:F1:6C:01:7E:68:3A:BA:C4:C3:39:66:78
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9738bb0d-1a84-4601-bc6b-25ba7f49c72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5503::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:3a:e5:61:71:a7:11:1d:39:78:d1:35:b6:23:cf:48:31:
         78:b4:d9:ec:ef:e9:67:4c:04:7e:53:dc:b5:f9:49:63:ca:e8:
         9a:f4:26:f8:c6:be:02:2b:71:89:35:d5:f3:47:d6:39:89:9b:
         fa:4a:3c:99:1b:c1:3a:fa:b6:bd:76:52:c3:a2:1e:43:bb:dc:
         e2:fa:1d:be:f9:03:d0:49:be:4e:a8:0b:2e:98:77:92:48:c2:
         6a:4d:e1:f2:45:fb:bf:24:da:e9:d1:7e:0c:e9:f7:f7:66:3c:
         a8:1a:7b:07:fc:35:60:6a:fb:e0:e0:22:e6:9b:26:18:f8:23:
         c5:1a:36:bc:71:b0:ba:25:b7:4b:96:b6:87:9e:da:2e:1b:f5:
         91:71:df:0e:85:87:b4:d9:10:58:aa:e6:db:ac:32:b0:7e:f7:
         25:5b:6e:0c:a3:c7:dd:df:11:a4:9f:fc:75:05:74:4c:2c:b7:
         d0:89:08:83:09:4d:9a:16:59:de:03:0e:ab:9b:39:a9:4f:b8:
         78:36:b6:db:d3:3c:a2:18:0b:38:7a:7d:41:48:a4:83:ee:a2:
         d7:9f:db:2a:2c:9a:3d:94:9a:95:41:75:2a:28:71:02:49:4d:
         a2:5c:3b:d0:e6:f2:2e:3f:80:f8:d9:aa:76:52:11:72:52:e0:
         fd:af:68:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Dec 2 12:07:02 2025 by rpki-client