This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/069c93d3-1d39-46e0-a625-f838202f98cb.roa
File:                     069c93d3-1d39-46e0-a625-f838202f98cb.roa (raw, json)
Hash identifier:          2o7cIHTmJpIgyNvtBUIT+Hms1aoMiiPflk3nYN4jiiQ=
Subject key identifier:   59:B8:F1:69:AD:3D:16:20:CE:F5:E7:49:76:C8:70:81:41:F8:71:BC
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4B13DF7C9982E891385875727418018445B0D3AE
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/069c93d3-1d39-46e0-a625-f838202f98cb.roa
Signing time:             Wed 10 Dec 2025 04:30:59 +0000
ROA not before:           Wed 10 Dec 2025 04:30:59 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:627::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:13:df:7c:99:82:e8:91:38:58:75:72:74:18:01:84:45:b0:d3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Dec 10 04:30:59 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=eccf9c2b3e3a5e337489e664d16ac71d43861d768c7950d86b3b110e9ffb6553, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:c7:1b:d7:be:ea:17:3f:46:69:1a:e5:90:
                    bf:92:a8:86:cc:ab:fd:d1:84:a8:2a:5a:0a:22:bc:
                    4f:f6:0a:f0:7e:91:d7:34:1f:22:89:b9:14:00:77:
                    d3:09:a6:7b:e6:f0:c8:98:bf:42:91:93:8a:ce:60:
                    84:f7:e9:0d:a6:28:d7:b5:02:d0:4c:03:ca:fc:81:
                    b2:93:ce:76:7d:08:c7:55:93:94:1d:50:6f:6c:34:
                    a2:e2:4a:c1:38:f1:23:f6:c2:af:e0:4d:54:01:3e:
                    45:da:a7:8f:d7:f6:26:85:42:54:8b:56:6b:c3:66:
                    1c:95:73:83:29:80:df:82:19:84:07:fb:9f:32:6d:
                    4a:81:09:78:ca:14:2c:52:9a:35:fe:3b:ab:87:8f:
                    fd:ad:e1:4e:c6:3c:1c:5e:33:b1:30:bc:d5:f3:01:
                    35:e8:5c:7d:a7:e0:7b:2b:20:bb:40:68:ad:56:96:
                    e5:c5:3f:e8:20:59:b1:34:a1:7e:10:4e:36:00:59:
                    51:1c:01:5f:af:21:71:5d:97:a1:be:0a:20:47:4d:
                    a8:a6:b9:53:a3:ff:0b:20:b4:ea:ee:cc:50:9e:aa:
                    9c:97:85:d2:33:ed:a9:9c:ef:a2:91:b2:f8:56:60:
                    d6:7c:d8:c0:cd:67:08:91:d4:73:d5:2f:fb:fe:d1:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B8:F1:69:AD:3D:16:20:CE:F5:E7:49:76:C8:70:81:41:F8:71:BC
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/069c93d3-1d39-46e0-a625-f838202f98cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:627::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:c5:a5:9a:33:f2:ac:a5:0d:dd:da:1e:bc:65:61:1b:18:80:
         73:63:8e:34:6e:cf:a0:6c:b9:7f:c1:c3:af:f0:b4:3c:6d:e6:
         a5:0f:8c:38:ff:e1:aa:0e:4e:f6:99:4d:39:f1:88:a3:06:44:
         0e:39:1b:40:13:65:15:7f:8b:58:bd:50:23:23:00:a1:61:c3:
         af:42:ec:72:ef:3d:0b:94:3d:5e:78:fa:46:9f:65:f1:0c:a8:
         4e:6c:a6:f2:13:cf:8b:71:b0:79:34:ff:67:1b:84:f6:48:e4:
         f3:5d:ba:91:16:47:b2:49:14:2d:50:cc:e9:b4:c2:a6:f3:5f:
         80:4c:d1:2a:2c:34:6a:a8:8a:8c:01:1f:03:c7:d6:28:1c:c8:
         75:b8:6c:66:b3:3b:f4:a7:03:b6:bc:61:3a:61:2b:f8:d7:a1:
         ae:3c:af:25:07:43:51:11:26:12:a8:25:8f:26:9e:3e:f7:ea:
         64:88:c5:1d:80:ba:a7:e7:b3:5d:70:3f:32:6d:03:4b:a1:63:
         80:6d:04:16:ec:47:91:2b:30:f7:db:df:36:c8:21:50:84:0e:
         a8:dc:8c:16:63:4d:97:26:ad:64:a6:b0:b4:02:bf:19:6f:eb:
         93:74:ee:d4:b2:9d:e3:79:1f:63:22:0f:c0:e3:39:b2:5c:f5:
         eb:09:06:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Dec 18 13:36:04 2025 by rpki-client