This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa
File:                     e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa (raw, json)
Hash identifier:          orcxEbqVxdSKh8M+NKkZ8Za9WodB8fCO7g9ShTN8eW4=
Subject key identifier:   08:09:0F:76:56:8E:4D:34:DB:71:86:39:03:27:FD:8E:18:22:A6:92
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4954993CA4E59DABA13242BEB31ABCAA8C66728F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa
Signing time:             Sat 22 Nov 2025 00:00:06 +0000
ROA not before:           Sat 22 Nov 2025 00:00:06 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f2:7100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:54:99:3c:a4:e5:9d:ab:a1:32:42:be:b3:1a:bc:aa:8c:66:72:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 22 00:00:06 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=e0a96d2509fec50523f968f1ca7ae9271ca1c4bb7748ee59c12c90a1969400fd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:e5:f0:99:96:83:42:8a:17:2d:67:fd:96:
                    18:2f:dd:35:a1:2d:ca:ab:91:89:50:be:8a:28:6e:
                    de:ef:41:ec:5b:83:4e:f9:b0:fd:31:cb:a2:1c:1c:
                    2e:04:ef:b1:c5:aa:30:72:51:49:30:d7:d3:61:20:
                    de:8e:99:ec:f9:60:94:e2:fe:e5:3d:12:ce:b6:e5:
                    5f:b7:12:d5:21:8e:90:18:df:f9:d5:48:26:5b:d2:
                    e9:87:c1:eb:51:40:65:6c:c1:ee:7b:2e:5f:c7:66:
                    f1:b6:83:50:6f:3c:5e:cb:2e:e3:f3:dc:92:35:51:
                    cc:7d:22:90:38:39:b9:75:e8:66:35:c6:b5:86:66:
                    59:cc:c8:16:4b:99:da:d3:c4:c5:23:1e:3b:93:88:
                    5e:58:7c:1d:aa:06:03:1e:c2:22:c2:59:b3:0d:17:
                    b2:be:19:a6:4a:f0:2c:5b:36:ff:0b:96:d9:38:d2:
                    33:56:d2:b7:23:09:da:17:20:de:71:9e:f1:42:68:
                    aa:ae:9d:3c:b7:6e:3f:37:a8:4c:ea:e6:9d:f0:24:
                    f6:21:38:a8:4c:32:b7:71:ee:ab:06:9b:80:1b:bf:
                    26:37:f2:01:9f:2a:97:22:2a:be:08:4a:9a:bb:8a:
                    be:15:19:18:14:f5:d5:61:90:97:10:e4:2d:fa:20:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:09:0F:76:56:8E:4D:34:DB:71:86:39:03:27:FD:8E:18:22:A6:92
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:4f:a7:e0:f3:67:00:ac:ac:90:36:64:d6:57:6c:b9:15:
         f2:50:45:4f:13:d7:6f:9a:90:64:31:9d:85:b5:4f:e2:a0:77:
         f6:ab:61:94:00:35:b2:7e:22:ec:be:1c:6a:7d:f7:31:9c:b7:
         3e:12:9e:c0:1b:a9:d6:ce:5c:9f:52:40:96:e9:10:be:91:43:
         d3:ce:ff:48:a4:9c:95:43:d4:82:79:3d:a9:4b:ea:cc:7d:94:
         50:b5:96:18:ae:98:98:b3:a8:b5:d5:af:73:5f:d0:17:cc:ad:
         c5:ff:f5:69:05:62:59:08:18:24:36:46:1e:43:d0:9e:11:c5:
         53:96:46:62:57:5a:e0:2f:df:55:51:2a:19:f4:d8:eb:fa:6e:
         06:42:b7:18:25:27:ce:59:72:fa:bf:da:5f:e2:8e:87:c5:a7:
         28:ab:6b:3e:fd:b5:95:06:bb:a9:8b:c5:4e:b3:ef:df:94:df:
         45:0f:2e:3e:67:5a:40:f7:91:c0:a4:81:b1:33:1f:8c:2f:ae:
         4c:8f:a6:7a:6c:3c:9d:9c:be:76:31:b9:39:4a:d4:01:75:bb:
         38:49:cc:c2:46:b0:d0:b6:0a:d7:ad:e3:40:40:69:87:75:48:
         1b:57:bb:5d:4b:20:aa:de:fe:bb:0d:1d:ad:51:a9:de:ff:02:
         74:aa:99:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 29 11:52:48 2025 by rpki-client