This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15573dbf-b10c-436f-b5d6-7526187c5030.roa
File:                     15573dbf-b10c-436f-b5d6-7526187c5030.roa (raw, json)
Hash identifier:          UK6S9FzYPikdfP/YI0YNPPI0lpA663q9mPLsVpfUimI=
Subject key identifier:   9D:36:B5:4E:C2:B5:0A:21:46:E3:5C:63:C8:08:36:A0:44:A0:DA:7D
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       647C34173BAABAF942CAE325D926A088301B2BAE
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15573dbf-b10c-436f-b5d6-7526187c5030.roa
Signing time:             Sat 15 Nov 2025 04:40:27 +0000
ROA not before:           Sat 15 Nov 2025 04:40:27 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:54a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7c:34:17:3b:aa:ba:f9:42:ca:e3:25:d9:26:a0:88:30:1b:2b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 15 04:40:27 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=5e4f7fad42e8961565e31060dbddbed3352c2c3f9f2b0f8f8b54f47df2c03db3, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c9:3a:94:41:53:73:aa:f9:7a:ac:07:22:50:
                    02:e5:8e:25:58:d1:5d:73:07:4b:81:47:62:bf:62:
                    b0:e7:57:34:2d:1f:4f:e9:f6:8a:b9:67:ca:26:2b:
                    e5:3d:4f:fb:e0:f0:ed:c3:38:f2:41:84:9b:34:c5:
                    0b:21:64:37:39:5c:05:60:ab:ec:78:35:e0:81:bb:
                    12:79:bc:95:d7:fe:f6:a9:49:85:5b:99:a8:86:58:
                    c1:23:09:21:9a:f3:da:a9:ec:66:5a:4f:b8:6b:ae:
                    3f:53:41:59:49:94:d0:68:b5:aa:1a:21:31:18:99:
                    1a:49:35:04:29:0b:3d:f6:01:01:c0:4e:4b:9a:ee:
                    20:80:49:26:d6:41:4a:6c:b8:0b:6f:0f:9e:1e:3b:
                    4c:06:63:fa:3b:21:07:fd:97:16:24:59:f5:fe:b5:
                    28:b1:5f:af:2a:eb:db:8d:14:ad:1c:d6:77:b1:86:
                    26:20:44:21:f9:27:b6:84:be:67:eb:a1:f8:c2:f5:
                    21:da:e7:0e:16:b1:81:a9:91:8e:e7:a5:96:95:cc:
                    78:81:a3:9d:f5:6e:cd:50:5e:7e:19:e7:69:ac:e9:
                    03:a7:ae:bf:a0:3c:f4:7e:fd:55:4b:d3:71:62:df:
                    b8:be:f9:8e:3a:90:5d:20:e6:90:80:82:64:0c:89:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:36:B5:4E:C2:B5:0A:21:46:E3:5C:63:C8:08:36:A0:44:A0:DA:7D
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15573dbf-b10c-436f-b5d6-7526187c5030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:54a::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:ee:af:8d:a7:b5:89:dc:a4:f8:ea:8c:76:e4:1b:bf:a9:
         19:78:35:f5:f9:b1:4b:fa:53:70:70:fc:db:32:1b:8c:db:3d:
         81:bf:50:34:0f:a4:e9:d4:45:c9:00:d9:90:5f:03:43:59:07:
         73:29:d4:26:52:42:b5:d0:38:db:08:31:83:a0:f5:d4:be:62:
         68:a7:9a:90:74:3a:a5:60:92:cb:b7:85:51:ff:64:a2:be:df:
         25:26:50:ed:40:c2:46:de:71:91:e8:88:c2:67:5d:b0:d1:b7:
         5e:ae:f8:a6:ca:b2:29:ac:e0:ea:b9:80:fc:86:c5:6e:b7:4c:
         82:81:7a:b1:48:60:ea:e2:db:b4:a8:f2:18:1d:63:fb:f9:40:
         46:51:be:0e:ee:79:01:0a:a7:1d:51:02:a9:9c:9d:d9:4d:31:
         bd:df:50:35:33:8b:58:83:64:5a:63:64:31:90:22:f4:04:f2:
         ed:d6:ce:4c:9f:8a:82:2c:7f:73:b9:9b:80:57:cc:8a:e0:be:
         16:f8:59:c0:a4:3b:19:9d:9e:31:fc:c1:10:df:89:f2:3c:07:
         6d:6c:89:40:c2:0b:c6:72:eb:08:8f:04:3b:ec:51:61:0a:d6:
         5b:28:27:5b:9c:0d:9c:d6:3c:19:f8:3b:eb:6b:2b:93:9e:d6:
         6a:53:8f:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 27 04:45:28 2025 by rpki-client