This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ceacf551-02ee-4f40-8abd-053509a65c13.roa
File:                     ceacf551-02ee-4f40-8abd-053509a65c13.roa (raw, json)
Hash identifier:          35YbVngIzspUUDz5hvyvprA23VCQ/eDuhMKc+bfzeEE=
Subject key identifier:   FB:F7:63:39:B5:50:71:79:83:A8:6E:C6:A6:A5:FC:E6:2C:74:C6:C7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0EACDD559E4609FB384B5D028561649154FA7D96
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ceacf551-02ee-4f40-8abd-053509a65c13.roa
Signing time:             Sat 15 Nov 2025 05:20:22 +0000
ROA not before:           Sat 15 Nov 2025 05:20:22 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:ea00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ac:dd:55:9e:46:09:fb:38:4b:5d:02:85:61:64:91:54:fa:7d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 05:20:22 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=1d32c2520e011dfec3a0e3e30ce6783501ce55e71dc5a218c366dc212a3c1382, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:7d:2a:f3:a0:f3:3c:02:ef:e7:1b:b0:2f:
                    28:67:ae:1e:12:44:79:73:09:1d:52:8c:7f:48:eb:
                    ee:54:04:9d:b7:67:d0:55:77:33:b4:2b:e8:b8:a8:
                    cf:1d:44:c1:bb:6c:df:75:88:db:e8:77:e3:cc:5b:
                    fc:6b:f1:aa:5b:61:a4:fc:03:cc:bc:28:93:a0:f3:
                    10:5a:f1:9d:36:c0:fa:3c:09:0f:aa:72:04:cc:bb:
                    7f:cc:74:09:4d:eb:98:e4:11:e6:3c:8e:58:f5:b2:
                    32:6b:7a:6a:10:b6:6e:ec:3a:b7:21:41:5f:71:36:
                    09:f2:0b:ba:3a:8d:fd:97:48:d9:40:ea:42:c7:07:
                    07:6b:7f:fc:7e:4d:a7:b3:53:1b:09:b4:90:aa:4f:
                    8f:a2:e1:8d:99:16:f2:ee:0b:ce:7a:45:6c:b9:bc:
                    f0:d3:51:2e:22:7d:91:84:7f:41:ae:f6:ee:33:f2:
                    e2:4a:a6:0d:2e:1e:6b:c2:59:04:12:2d:36:1c:a7:
                    d3:37:3d:a5:12:2f:d8:3b:76:80:2c:62:a1:18:31:
                    72:3b:39:a6:18:62:38:a5:72:fc:52:d4:8f:32:16:
                    6a:0d:a2:60:e5:9e:4b:77:75:06:a6:6b:a8:25:fe:
                    38:a6:51:42:ec:7a:1a:6d:9f:c3:34:0e:2d:41:4b:
                    c2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:63:39:B5:50:71:79:83:A8:6E:C6:A6:A5:FC:E6:2C:74:C6:C7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ceacf551-02ee-4f40-8abd-053509a65c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ea00::/42

    Signature Algorithm: sha256WithRSAEncryption
         76:87:54:e8:af:e8:06:2f:5f:53:2d:84:1c:65:b1:ff:1b:76:
         84:91:6b:de:95:51:04:be:e7:a6:ed:48:28:97:26:f0:b9:8d:
         dd:cc:a9:8c:68:94:df:f4:39:55:ca:48:56:1b:a1:09:c1:51:
         cd:aa:d8:f5:3c:ea:ed:23:16:c2:80:02:67:96:a0:7b:79:24:
         11:dc:72:e6:82:f9:97:e3:d4:c4:5c:01:36:c8:1e:54:aa:10:
         86:ca:9e:86:32:dd:cb:4c:b5:96:a5:44:c2:91:64:77:16:02:
         00:bd:53:a1:29:0f:05:34:23:bc:f8:67:cc:97:85:ae:cf:b7:
         7a:1c:4a:8c:95:57:27:5f:cf:d9:07:0a:c8:33:48:ac:5d:df:
         d4:93:d1:e5:0d:ed:0c:ef:18:90:62:ce:dc:52:fc:06:21:75:
         a0:bf:e2:0a:59:cf:43:73:17:4a:67:e3:66:dc:03:27:78:9e:
         7f:1a:5c:8c:4a:6a:6a:1b:a2:60:26:4d:9a:98:92:60:05:ad:
         b7:db:f2:3f:9b:2b:c9:f4:f8:7d:30:16:23:43:ca:d8:95:78:
         67:c0:8f:55:6d:51:62:7f:b5:11:06:fd:ae:60:12:76:3b:22:
         16:e2:5e:c7:6b:21:8c:b9:86:a9:5e:10:f1:f4:50:09:90:33:
         4e:ad:f2:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:30:59 2025 by rpki-client