This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa
File:                     a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa (raw, json)
Hash identifier:          u6enIZx1UXghtzMjUPte5aHVuYJCgLqfGJH/05HUPco=
Subject key identifier:   5F:77:EE:E2:75:3F:7B:BF:76:42:26:E9:26:BC:96:02:7D:05:15:8D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       53D350C087566BE41DE3DFED93AFB13E7E89FFEE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa
Signing time:             Sat 15 Nov 2025 05:10:40 +0000
ROA not before:           Sat 15 Nov 2025 05:10:40 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:eb00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d3:50:c0:87:56:6b:e4:1d:e3:df:ed:93:af:b1:3e:7e:89:ff:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:10:40 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=cd33a624e9e47d77e5b5269abf267697757c1ed0cd3784362bbff7caaf0c02c1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:23:6a:ee:28:57:60:82:d4:04:2a:a5:ef:22:
                    b4:83:39:de:4e:c2:30:dc:04:aa:72:83:43:24:4e:
                    a0:c0:b3:7c:bd:fe:08:7c:c5:3f:f4:a3:c2:7a:88:
                    64:5b:15:be:c8:a0:f2:89:c3:62:e9:ec:21:c6:3b:
                    4f:b8:89:95:dc:ff:8d:d9:28:ea:dc:47:44:d6:e7:
                    6d:09:94:8f:d4:1b:27:fc:d1:52:f0:64:7f:d4:fd:
                    8c:45:fd:11:d3:1a:f8:dd:ac:89:50:a9:81:f2:08:
                    e7:58:03:8a:98:55:a5:9a:a3:12:aa:f2:66:3d:66:
                    47:8a:5a:4e:34:d6:f6:9a:25:7d:32:90:a8:f6:89:
                    7d:3f:9e:9e:0b:03:7a:2d:c3:43:6f:46:30:90:c8:
                    40:d1:93:05:e7:5f:e2:43:a7:37:40:27:a0:23:d8:
                    db:07:6d:26:0d:40:d6:16:24:6a:9b:e4:eb:b1:1e:
                    31:8d:1d:97:93:0d:7a:09:0b:34:65:8d:4d:cf:e4:
                    87:38:dd:ea:61:51:24:aa:29:a5:80:1c:e2:71:9f:
                    24:b4:68:b8:1a:bb:af:4a:65:9d:9e:18:49:9a:02:
                    88:f2:a7:91:1b:d7:32:4d:21:dd:6d:1c:78:59:e6:
                    c6:37:30:4d:8a:21:49:db:17:8a:35:1e:89:a9:bd:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:77:EE:E2:75:3F:7B:BF:76:42:26:E9:26:BC:96:02:7D:05:15:8D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:eb00::/42

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:73:b8:76:96:82:db:26:72:43:dd:24:4e:0c:0c:10:82:
         65:ef:8d:44:af:a6:f7:f4:91:96:01:4c:97:bb:dc:67:c3:c9:
         68:8d:60:0c:70:60:49:1f:1f:32:7c:c4:d6:1e:ac:90:eb:df:
         37:02:34:61:b8:c5:ff:a8:9f:35:9a:67:15:a1:a1:26:2d:b7:
         aa:29:61:24:8c:f1:87:7b:7c:a8:5c:f5:36:74:0e:86:f7:9d:
         f0:25:be:d6:cf:69:0d:12:f7:57:f9:4d:8f:60:d3:3e:d2:81:
         b9:2c:6a:96:dc:05:14:54:b2:9f:69:be:13:33:26:63:72:b9:
         89:6a:2c:dc:cd:dc:61:95:2d:55:ed:bd:15:7d:9b:3f:c8:c7:
         ed:c8:13:f8:20:75:1a:17:46:0d:b0:17:21:ba:d0:fa:c0:0a:
         03:6b:24:51:dc:df:47:ef:e1:76:42:b6:29:73:15:be:32:77:
         51:f9:c1:91:70:ce:f4:94:2f:66:ce:d1:3e:2d:4a:b0:64:23:
         78:8d:b6:85:8f:12:cb:60:f9:36:20:aa:9e:c4:04:e4:1c:f1:
         6a:8e:ed:81:a8:4f:91:68:2c:73:75:22:40:ad:c2:85:a7:f9:
         c5:97:8a:3d:ef:7c:31:02:27:ad:75:48:f3:29:3e:ff:44:af:
         b6:09:77:e7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUU9NQwIdWa+Qd49/tk6+xPn6J/+4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUxMDQwWhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZDMzYTYyNGU5ZTQ3ZDc3ZTViNTI2OWFiZjI2NzY5Nzc1
N2MxZWQwY2QzNzg0MzYyYmJmZjdjYWFmMGMwMmMxMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxI2ruKFdggtQEKqXvIrSDOd5OwjDcBKpyg0MkTqDAs3y9
/gh8xT/0o8J6iGRbFb7IoPKJw2Lp7CHGO0+4iZXc/43ZKOrcR0TW520JlI/UGyf8
0VLwZH/U/YxF/RHTGvjdrIlQqYHyCOdYA4qYVaWaoxKq8mY9ZkeKWk401vaaJX0y
kKj2iX0/np4LA3otw0NvRjCQyEDRkwXnX+JDpzdAJ6Aj2NsHbSYNQNYWJGqb5Oux
HjGNHZeTDXoJCzRljU3P5Ic43ephUSSqKaWAHOJxnyS0aLgau69KZZ2eGEmaAojy
p5Eb1zJNId1tHHhZ5sY3ME2KIUnbF4o1Hompvd5XAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUX3fu4nU/e792QibpJryWAn0FFY0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2E2Yzk2YzQyLTQzNDQtNDRjOC1hMTk0LTRjODdmMGFkZTNjOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD76wAwDQYJKoZIhvcNAQELBQADggEBAJgOc7h2loLbJnJD3SRODAwQ
gmXvjUSvpvf0kZYBTJe73GfDyWiNYAxwYEkfHzJ8xNYerJDr3zcCNGG4xf+onzWa
ZxWhoSYtt6opYSSM8Yd7fKhc9TZ0Dob3nfAlvtbPaQ0S91f5TY9g0z7Sgbksapbc
BRRUsp9pvhMzJmNyuYlqLNzN3GGVLVXtvRV9mz/Ix+3IE/ggdRoXRg2wFyG60PrA
CgNrJFHc30fv4XZCtilzFb4yd1H5wZFwzvSUL2bO0T4tSrBkI3iNtoWPEstg+TYg
qp7EBOQc8WqO7YGoT5FoLHN1IkCtwoWn+cWXij3vfDECJ611SPMpPv9Er7YJd+c=
-----END CERTIFICATE-----
Generated at Sun Dec 7 10:52:57 2025 by rpki-client