This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa
File:                     f6cf58cb-08de-4e22-be98-43e3537a793b.roa (raw, json)
Hash identifier:          f0970tUuMuz9r2MSVhJLy8m3WM8turEn9fxMy/qSIEQ=
Subject key identifier:   E6:00:6A:8E:04:EA:DE:17:29:A7:72:2D:A5:45:02:5D:DE:E2:1E:AE
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0E397C5E07B3BB9C88934405FFA16B11480C9BF2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa
Signing time:             Wed 10 Dec 2025 05:00:46 +0000
ROA not before:           Wed 10 Dec 2025 05:00:46 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:39:7c:5e:07:b3:bb:9c:88:93:44:05:ff:a1:6b:11:48:0c:9b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 05:00:46 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=0ef79123a2193ea84753b80409725fccc088c8a755aa1aa29087341aba2a84fa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:7f:cc:c6:d4:ef:64:01:b2:50:7e:7f:21:
                    68:91:4d:d0:8f:5b:af:4d:7b:4e:42:54:c5:4d:ef:
                    09:61:7a:11:a7:15:70:12:5b:8d:49:a8:f0:8e:bb:
                    b6:1f:e6:f1:d0:f4:1e:5a:f6:02:90:b7:bf:89:71:
                    ff:1b:70:d9:ac:ea:30:06:54:c0:d7:93:38:91:ad:
                    fa:54:49:a0:30:52:70:f4:2f:f7:9e:db:c4:ef:10:
                    83:85:e4:fa:bb:7d:26:fc:49:e0:fb:24:27:69:41:
                    9f:35:e7:40:5c:e8:75:c9:9f:4c:64:28:23:39:b1:
                    cb:60:6b:43:cd:bc:45:a9:59:f7:dc:96:8b:da:bf:
                    98:79:f9:4f:bb:d9:13:f0:69:cd:48:fa:a1:4b:05:
                    80:75:33:40:32:24:63:c2:80:c3:00:46:69:94:2b:
                    4e:2d:6b:a6:45:88:6c:f1:93:26:e0:13:2c:ed:f6:
                    97:c8:22:6e:00:dc:87:c2:80:30:0c:4e:af:14:75:
                    bf:ba:41:b6:d7:b1:d0:d7:2d:c2:48:94:64:17:15:
                    25:2b:17:1f:8e:a6:10:30:4b:5c:cd:e1:66:6c:3a:
                    f6:ac:e9:00:36:78:01:fb:55:91:b0:46:9d:16:64:
                    7a:5e:a5:40:73:c7:91:a5:8a:fb:11:dd:7a:7b:cc:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:00:6A:8E:04:EA:DE:17:29:A7:72:2D:A5:45:02:5D:DE:E2:1E:AE
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:91:97:7c:ca:4f:93:f0:b1:48:e8:f2:d3:e4:55:97:9b:
         88:cf:b3:76:50:d2:77:07:e2:8c:46:58:98:b7:c2:f0:91:fa:
         93:35:1f:9c:33:68:14:70:bf:0e:de:a4:57:ef:f3:92:23:23:
         2d:20:09:35:33:ff:b1:3a:39:31:64:c6:96:87:c8:4b:93:48:
         36:b7:7b:b1:76:0b:5e:65:04:18:22:89:20:02:a6:e5:f3:ba:
         57:a6:62:04:2d:37:05:56:1a:43:55:87:f6:06:bb:20:5d:2a:
         b5:d7:45:45:2b:57:59:f1:7e:a1:53:00:42:52:37:07:f8:4b:
         23:9a:b8:45:f6:4d:17:62:a1:35:45:ec:72:5a:df:9c:f0:c8:
         03:94:8e:f0:25:e6:af:1c:ab:4d:41:b7:e4:02:e3:6f:ef:cd:
         63:a4:5b:e1:df:72:44:8d:81:66:9d:05:51:4d:64:51:35:b2:
         f2:8b:db:60:06:bf:aa:da:5e:19:60:fe:8e:03:eb:d1:8f:5f:
         ea:2e:83:ba:f7:b8:5d:ce:5b:f0:88:3d:e3:2d:d1:0c:8f:1b:
         13:2a:3f:43:26:68:b1:a7:b6:bb:ec:f0:57:52:ed:c2:30:ed:
         82:c2:c0:39:f3:34:65:6e:ec:fa:d0:54:78:ae:57:87:ab:4a:
         05:cd:81:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:28:15 2025 by rpki-client