This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa
File:                     c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa (raw, json)
Hash identifier:          O3yAwESTfdC4tQLmn4cnXL0pAZybj9Mi+3wkPsnKNgo=
Subject key identifier:   7D:31:93:AF:97:5D:9A:6B:C1:45:DC:AD:BF:0B:1D:63:E8:48:F9:D3
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4A77D749C259BA4B6F55DE0A4AC536390BFC687B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa
Signing time:             Tue 18 Nov 2025 00:30:08 +0000
ROA not before:           Tue 18 Nov 2025 00:30:08 +0000
ROA not after:            Mon 16 Feb 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f0:4140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:77:d7:49:c2:59:ba:4b:6f:55:de:0a:4a:c5:36:39:0b:fc:68:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 18 00:30:08 2025 GMT
            Not After : Feb 16 23:59:59 2026 GMT
        Subject: serialNumber=7dda186e0506e81be7be3f9d53ee3f6eb2c5628815492134027b60eef33ab886, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:fe:f0:eb:d5:97:96:a8:70:8c:79:6a:41:
                    96:e0:9c:ab:35:d4:f7:0a:37:94:ed:f1:fd:9a:76:
                    d0:2f:39:b3:b1:7a:eb:e0:2a:28:16:d7:e4:32:81:
                    f3:8a:22:ad:d8:96:c9:5e:71:ee:94:13:40:36:fc:
                    9e:cb:74:97:25:e3:2f:53:f0:72:8b:63:08:f5:58:
                    41:c3:1b:5e:4d:e1:64:09:d9:84:0a:80:9a:e2:d0:
                    cd:c8:c5:00:c8:c0:bb:46:2d:41:85:45:b5:1d:90:
                    1d:f0:ee:aa:7d:93:b4:b2:40:55:5e:bc:bc:a0:de:
                    b6:59:11:05:01:5e:2f:fc:45:73:02:51:4b:99:5f:
                    10:bb:da:d8:32:80:2d:d9:8b:0b:0b:c2:3b:a7:9b:
                    ee:68:a1:69:18:ed:cf:e6:09:fb:98:66:ce:2a:06:
                    49:2f:55:9f:4a:b0:25:88:2f:50:dd:22:9b:53:3a:
                    81:ff:e5:ef:e4:50:f4:35:b7:85:36:6d:7a:ea:be:
                    e0:a5:f6:0c:f9:5a:c6:ad:bd:f2:2b:21:65:59:c6:
                    b4:7a:33:5d:f9:d4:f1:84:12:71:1f:ad:64:df:bf:
                    24:b5:d1:f8:3b:fc:94:eb:cd:a4:53:74:d7:5f:14:
                    33:d7:7e:90:4a:44:9a:93:ff:94:94:4c:ff:b1:76:
                    a8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:31:93:AF:97:5D:9A:6B:C1:45:DC:AD:BF:0B:1D:63:E8:48:F9:D3
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:4140::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:c9:e7:91:81:19:e4:90:5c:0a:67:bc:51:4d:cf:ed:43:34:
         13:b6:b3:ff:48:e3:01:a3:39:fd:a5:2b:6c:43:99:44:ef:13:
         a6:aa:10:b3:1f:01:b0:35:b1:78:47:9d:04:d3:7e:64:47:74:
         ff:d2:15:e9:90:93:f8:31:7b:92:54:c9:65:ea:c1:d8:09:ae:
         58:95:42:fb:3d:c2:bb:29:e5:92:19:f4:cc:c9:54:f0:11:81:
         bb:20:77:65:c5:0f:9e:db:39:88:4b:4e:11:45:61:e4:a2:94:
         d5:23:a2:40:00:4b:12:a5:a4:aa:ca:9c:72:3a:69:6c:c3:13:
         ad:a6:92:49:96:05:6f:45:03:6d:5b:12:1f:d5:ac:f8:bd:c1:
         1e:6d:60:a9:f2:36:7a:49:80:f1:2a:fe:71:ca:99:d5:99:ad:
         5e:89:a7:ed:ae:87:9f:13:72:6e:99:66:70:4e:9a:69:75:a9:
         c1:30:f6:3a:83:0f:13:a7:2b:46:66:a3:b6:32:80:3b:4f:04:
         e5:41:09:46:ad:14:23:a9:1b:b7:05:b4:72:34:5b:e4:eb:70:
         6b:d9:de:5a:cc:78:28:c4:2d:4b:9b:7b:f6:99:48:13:a8:a6:
         8c:3b:a0:0a:64:2d:f7:12:f8:1d:4c:0c:ac:bd:93:78:d8:2d:
         08:e5:b4:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 5 07:28:58 2025 by rpki-client