This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc0e0e73-bbbe-4170-b733-4904ecc27f99.roa
File:                     dc0e0e73-bbbe-4170-b733-4904ecc27f99.roa (raw, json)
Hash identifier:          NN8CgeernJ/ARy7n9sh3dPbnQVmmWqYu1aOPQYe/KS4=
Subject key identifier:   27:25:FA:01:A7:10:5F:DD:35:36:3F:48:E9:A4:0F:65:2E:A0:5D:11
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3C6B4BCCDC734D78320932EE5BC76760E1001D93
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc0e0e73-bbbe-4170-b733-4904ecc27f99.roa
Signing time:             Wed 10 Dec 2025 05:00:29 +0000
ROA not before:           Wed 10 Dec 2025 05:00:29 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6b:4b:cc:dc:73:4d:78:32:09:32:ee:5b:c7:67:60:e1:00:1d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 05:00:29 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=b4a71174fbac736549795cdbe220a8ee001772882efd93d8ee6b0bfe40d70464, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:99:3a:35:92:12:c6:64:8e:db:6c:1c:32:0a:
                    97:18:8e:d6:ec:cd:e3:b9:ad:3f:ee:3a:d5:a5:3e:
                    e7:0a:05:e2:c6:53:6e:be:c5:16:1c:22:c7:77:29:
                    89:11:de:50:b4:53:4d:b1:b0:a8:8d:bf:ae:23:98:
                    0c:3b:df:39:9f:1b:20:22:06:81:f7:ce:ea:5a:e2:
                    32:ba:fb:98:3b:5f:fd:a9:8c:67:9e:83:f0:0d:a9:
                    0c:b6:4a:39:d7:bd:02:1a:89:f3:1a:0e:7f:13:58:
                    42:dd:b7:74:4d:c1:90:75:be:2d:91:77:f9:fe:a0:
                    36:2d:46:46:01:f6:c5:26:00:70:97:29:18:aa:46:
                    76:ea:38:14:48:bc:df:c0:ae:84:4e:43:b8:db:fb:
                    f3:4d:61:b3:9f:65:1a:0f:6c:41:83:41:f5:7c:c4:
                    69:44:ec:bc:ef:26:23:6a:48:13:b2:c3:fb:c3:ba:
                    9b:d5:da:5e:24:e6:cf:49:7f:06:eb:0c:05:9b:61:
                    db:55:0f:a9:ef:bd:3f:3f:0f:ac:53:88:36:ef:86:
                    e4:33:f9:83:48:9e:f4:3d:16:59:6f:10:9c:6a:c0:
                    a9:5d:8e:0f:76:fb:67:4c:bf:8c:b6:8e:9a:06:c4:
                    aa:04:2d:24:88:26:3d:7a:29:a2:a5:6e:2d:55:12:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:FA:01:A7:10:5F:DD:35:36:3F:48:E9:A4:0F:65:2E:A0:5D:11
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc0e0e73-bbbe-4170-b733-4904ecc27f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:a7:42:85:f8:29:a3:39:01:ae:b9:99:22:c7:27:f2:cb:88:
         f9:12:33:f9:23:c0:5a:d7:53:57:fc:06:33:cb:f5:31:01:d5:
         43:14:17:ce:86:04:26:7d:e2:b3:b0:b4:7c:93:68:a3:f9:b4:
         f4:cf:ce:03:aa:63:ae:d2:92:d5:ef:f5:1b:8b:dc:8d:d1:66:
         66:5f:f6:66:3b:94:05:c2:10:fd:37:ee:95:16:c1:5e:1d:bd:
         71:e1:6b:a0:bb:05:41:0e:48:7e:c1:52:8f:8b:5f:2c:da:45:
         94:6d:26:7b:71:80:d8:9c:98:e1:27:d4:7d:04:ad:fe:d8:92:
         b2:51:eb:55:0c:f9:bc:ee:32:5a:bb:ed:d7:4b:14:60:47:94:
         13:e5:07:b8:b0:8c:72:67:39:d2:57:03:03:85:a5:41:44:b2:
         1f:28:48:f8:ff:f7:e5:30:61:84:3d:28:f9:03:8a:f2:2f:79:
         ae:29:71:e4:da:cd:17:51:f4:ce:b1:80:66:d4:db:79:19:02:
         16:21:c4:75:6d:29:cd:32:53:5f:75:0d:d4:cc:37:79:b4:0c:
         6c:3a:fb:df:91:c4:56:ed:dd:7d:f2:7b:15:8d:54:19:c6:b4:
         d0:ec:2a:b3:cf:15:c9:8d:38:88:9e:2f:b4:fa:46:87:6f:ed:
         68:dc:a1:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:19:09 2025 by rpki-client