This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/387f1b26-a40a-42b6-912e-7a00e61de12a.roa
File:                     387f1b26-a40a-42b6-912e-7a00e61de12a.roa (raw, json)
Hash identifier:          JzUZTBw02miqlV9iqgXNItH5Fz6FbeQckQDdvqKIdk0=
Subject key identifier:   31:0F:57:93:D6:30:8E:1C:4D:05:60:7A:71:B3:2F:71:33:EA:85:B6
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5BCA0A04467DD9C8E3B9577CC7EA7846571DD102
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/387f1b26-a40a-42b6-912e-7a00e61de12a.roa
Signing time:             Sun 30 Nov 2025 00:41:39 +0000
ROA not before:           Sun 30 Nov 2025 00:41:39 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ca:0a:04:46:7d:d9:c8:e3:b9:57:7c:c7:ea:78:46:57:1d:d1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 30 00:41:39 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=b5518deaf11680ef2beb92b515f15a1e58d95d049ebe143bfd0e08837db1ee49, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:72:15:e7:36:f4:86:25:dd:f1:9a:d5:7c:
                    ec:ba:91:b4:0c:ad:60:18:9b:23:58:27:e3:1d:d9:
                    47:a3:8e:89:a2:e1:20:a4:9c:79:04:8c:b3:83:c2:
                    87:2d:fd:11:6b:9d:79:b7:7a:03:da:c8:37:7b:1f:
                    e9:8f:ea:0e:70:ce:9c:96:2c:48:58:86:be:78:65:
                    24:c9:21:49:24:6c:2d:f5:47:74:c5:28:19:7e:c9:
                    41:11:ef:3d:d5:d1:00:e3:fd:80:13:fc:84:4b:61:
                    f8:7c:65:a6:35:1d:24:4e:38:ad:ae:d5:e4:00:2f:
                    44:2e:17:4c:77:cc:aa:02:d1:5d:7a:c0:29:b6:a1:
                    91:88:1f:84:ee:3d:b4:58:6b:b5:00:23:08:35:05:
                    47:0c:c3:c7:05:ad:4d:a9:bc:fe:33:44:23:78:da:
                    37:c1:a3:88:00:65:ae:b7:0e:26:10:4a:23:1e:db:
                    05:c0:53:57:71:ed:70:b4:f4:51:89:fe:c4:c4:c0:
                    5e:c2:98:68:a0:61:7e:eb:75:dd:14:74:69:e1:a5:
                    51:b5:95:a3:4b:d7:05:2d:d6:fc:4e:cb:05:fa:c2:
                    39:11:95:ad:96:3e:7c:23:41:7d:41:1c:1b:f3:43:
                    43:8a:2d:97:2d:0e:95:34:78:ad:ec:a2:cc:fe:a1:
                    63:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0F:57:93:D6:30:8E:1C:4D:05:60:7A:71:B3:2F:71:33:EA:85:B6
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/387f1b26-a40a-42b6-912e-7a00e61de12a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:b0:1e:d7:36:68:c2:31:53:97:96:c8:e0:08:53:e9:55:
         78:64:87:57:a6:ba:77:25:63:68:84:0c:02:5f:51:dc:94:d9:
         c8:4e:ac:51:4f:04:f4:29:76:09:77:7f:df:cf:03:f2:7c:93:
         e1:17:cc:e1:4a:bb:3e:af:5a:b0:c8:ec:47:d9:a8:a5:87:0d:
         cd:c1:dc:4f:af:31:71:a9:d1:59:5d:5a:f5:b8:c4:11:81:4b:
         c6:dd:df:49:67:8d:d1:1f:96:64:b0:a5:62:89:04:d5:f5:53:
         29:0b:9b:69:4f:55:5e:19:43:f5:f6:16:4d:13:5b:51:09:57:
         9b:90:74:bc:ad:6f:54:14:87:5d:34:9b:e8:ec:9f:f9:cc:12:
         1c:44:51:e8:5d:96:0b:6e:5c:f4:a1:e5:59:65:ed:60:b7:fb:
         c3:c9:56:11:fc:f9:d2:45:ae:d5:f7:59:7c:ef:ea:09:44:04:
         9d:b0:77:07:20:5d:fc:17:44:1a:55:9e:5d:18:d1:43:c3:b6:
         da:85:4f:84:6b:ee:d8:b1:3e:a8:86:01:eb:c0:ee:ae:ca:d3:
         25:9c:bd:5d:3b:99:74:61:d7:76:e1:4f:0f:85:0f:07:67:80:
         ef:af:da:62:89:6e:b7:31:1e:2a:58:5b:ae:5c:d5:18:90:f4:
         1f:8d:f6:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 30 02:10:44 2025 by rpki-client