This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa
File:                     a0024e00-f937-4b63-91df-d45ce0a6a27d.roa (raw, json)
Hash identifier:          D2108HYKYusfk92995p9VxsghrtKUsupCgKOr5ujnt4=
Subject key identifier:   08:A3:BE:C6:1C:59:A0:3C:B5:FE:7B:49:16:1A:27:9A:51:25:E0:04
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       617C62E68309436060EA9FA75AAF8CA835738A3E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa
Signing time:             Sat 15 Nov 2025 05:00:05 +0000
ROA not before:           Sat 15 Nov 2025 05:00:05 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7c:62:e6:83:09:43:60:60:ea:9f:a7:5a:af:8c:a8:35:73:8a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:00:05 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=828fd9b3442938e052c5652c1e5e7bcd80fef5030fa9093a1b5910dd14e35817, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:cf:ee:e7:88:12:fa:67:eb:fb:69:04:9b:
                    53:2a:20:5b:2d:91:ec:e8:38:e1:43:70:81:e7:40:
                    f0:3a:ce:ad:68:56:08:1c:b4:b1:24:fe:88:ba:00:
                    b7:3b:4a:8d:cf:78:40:72:2a:de:70:ca:89:6d:95:
                    80:88:d7:a8:dc:98:ac:b2:b8:72:26:8c:1f:e4:81:
                    6c:05:1c:19:18:0e:8d:45:1e:0c:bb:de:fa:03:5e:
                    b7:54:55:ff:3d:d2:17:eb:84:bf:10:67:f3:56:9a:
                    a0:4f:19:bd:98:58:16:68:e7:b6:6c:7d:53:16:ca:
                    14:a5:3e:77:60:50:f7:6a:a3:e2:4c:ca:82:ad:da:
                    cd:0c:69:ce:d4:47:17:a4:ad:30:47:97:c2:bd:65:
                    ee:48:81:a5:7b:ba:a4:81:69:be:5b:c0:6d:03:12:
                    85:09:e8:4c:62:b1:77:f4:57:42:b0:d8:fe:1b:11:
                    ea:24:a2:b8:e6:2a:fd:8f:87:ab:98:5f:7b:fe:c4:
                    d9:05:cf:25:48:2f:1c:dc:d3:c4:a2:1a:e0:cf:12:
                    c7:a6:d3:78:18:36:39:4a:8e:e7:94:7f:c7:c9:e8:
                    3c:f9:66:d1:d9:6b:8b:c2:80:52:b5:44:09:78:ed:
                    36:66:4b:66:44:f6:36:54:01:c0:7c:73:88:d5:28:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A3:BE:C6:1C:59:A0:3C:B5:FE:7B:49:16:1A:27:9A:51:25:E0:04
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6010::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:e7:7d:24:63:f0:0a:b3:38:8f:dd:6e:4e:b5:47:8b:b4:db:
         72:24:ca:dd:da:ef:4b:2f:29:50:ea:2a:92:27:35:4c:1e:67:
         21:a0:be:15:12:c9:8c:4a:dc:1d:eb:17:db:bc:d8:f5:3f:f1:
         a3:41:ca:da:e6:97:be:79:57:e3:89:22:3b:9f:c1:9f:77:2a:
         dc:43:68:fc:39:70:5e:ad:07:ef:3f:65:ac:47:39:8d:09:e7:
         16:1f:66:3b:ad:e5:a1:92:ea:71:fa:44:42:86:a1:47:c4:43:
         d1:69:6d:c1:7a:98:68:c0:39:15:f8:d8:32:4e:68:7c:7b:5a:
         7f:a8:1a:a9:bd:66:18:73:a2:69:99:8b:92:ed:8d:9e:39:85:
         00:78:c0:38:48:49:6e:7c:b2:03:14:17:2c:d5:ed:19:f5:01:
         79:2c:b5:c2:4a:0a:8a:bb:9d:5e:e6:18:15:cc:ae:27:24:df:
         77:59:09:81:0c:cd:92:4c:b8:17:9d:1d:1c:5e:01:36:e3:55:
         ab:d6:84:72:f0:79:9d:c5:8b:a6:6c:e4:7e:73:10:90:fb:92:
         a8:22:67:96:bf:02:a8:b1:75:19:3e:24:9f:62:5d:3a:0f:3e:
         2c:de:e8:48:11:af:25:99:58:df:ba:66:0a:07:c6:27:27:a3:
         d0:c5:00:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 29 11:51:12 2025 by rpki-client