This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/62ab21c1-eee4-4f19-b601-b4ac226e932c.roa
File:                     62ab21c1-eee4-4f19-b601-b4ac226e932c.roa (raw, json)
Hash identifier:          SURZ8qHwAsRJkZIPI0kEmnUolYgfjRxEOPzzxYXkcvo=
Subject key identifier:   B4:B3:8F:5D:8B:01:DF:70:33:11:18:B6:56:F6:10:FB:6C:93:7E:4C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5168D8B488EB53BA74E8CDBAC2E54B5ABBCA1FCE
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/62ab21c1-eee4-4f19-b601-b4ac226e932c.roa
Signing time:             Sat 15 Nov 2025 04:40:42 +0000
ROA not before:           Sat 15 Nov 2025 04:40:42 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:309::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:68:d8:b4:88:eb:53:ba:74:e8:cd:ba:c2:e5:4b:5a:bb:ca:1f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 15 04:40:42 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=3918c1cab83c83ad096278987496e67545653073dd0d0c8e1c9132e5d3ff79b7, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:47:32:a8:5d:64:df:1a:7d:7d:ea:17:9d:
                    7f:25:dd:2e:6b:28:30:ac:e7:dd:e6:82:b0:98:22:
                    07:4e:9f:e9:eb:dd:e0:80:5f:58:57:07:3a:af:ff:
                    aa:27:b6:a6:9e:8c:88:92:f6:3b:61:36:3e:4c:6b:
                    b5:4d:ad:96:dc:03:71:6b:cb:a3:6a:f3:86:00:f1:
                    1b:10:aa:31:c4:f3:4a:d8:53:22:62:56:75:7e:8d:
                    90:c9:24:cf:c9:b1:79:ea:f6:06:19:ad:d2:7b:95:
                    6c:e0:dd:86:de:ab:82:b1:5b:01:96:ff:f2:e4:c5:
                    88:19:24:38:16:39:be:29:cd:e9:5e:7d:10:64:bb:
                    a4:a5:f1:f9:d6:17:36:08:4e:20:62:e1:07:7b:af:
                    52:5c:6a:b5:e3:6a:c7:93:f9:d4:5d:07:06:89:70:
                    ae:a2:dd:55:82:2b:2d:a4:14:c8:5c:4b:9a:96:7f:
                    e9:75:c0:ac:1f:a7:ab:5d:18:32:28:b6:6f:08:ce:
                    02:1b:9d:b2:ab:d5:4e:57:44:6f:ee:55:49:5b:f2:
                    ca:1c:97:38:f6:17:ef:2a:4b:ed:75:db:af:70:06:
                    de:b9:7f:8d:71:a0:dd:39:31:d6:99:0b:ab:fa:33:
                    8c:dd:ce:72:16:db:52:5a:7e:94:aa:10:d2:26:fa:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B3:8F:5D:8B:01:DF:70:33:11:18:B6:56:F6:10:FB:6C:93:7E:4C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/62ab21c1-eee4-4f19-b601-b4ac226e932c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:309::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:66:82:d1:8a:99:9e:d7:dd:58:66:d8:de:31:ed:f5:cc:
         82:e5:33:69:62:ce:b5:fb:94:79:f3:16:07:96:01:64:69:17:
         7c:2d:73:7d:be:e0:cb:ef:78:e9:d9:4d:dc:2c:22:96:f2:15:
         c5:61:a9:50:01:b7:1b:3a:d6:20:72:49:52:86:2d:54:a8:af:
         5d:b0:6f:17:6f:c0:43:da:55:92:d1:7b:dd:eb:30:fb:ed:fb:
         a0:3b:05:02:fd:65:69:1e:88:a9:5a:0a:f5:7b:ec:d8:f9:da:
         ba:d8:3f:bc:55:ff:28:6e:04:51:5c:0e:7b:6f:ba:4e:0b:86:
         ee:c8:98:37:4f:05:02:9c:50:3b:9b:c7:cc:68:31:1e:6c:81:
         cf:0a:d4:37:b2:76:11:fe:7d:4c:99:eb:31:dc:6c:2d:ad:5c:
         f1:69:5e:be:ee:d6:7d:99:50:e4:96:d1:44:23:e5:f2:e6:84:
         7e:c1:83:19:27:12:1c:d7:51:a1:be:99:96:fc:6d:7e:36:cb:
         ee:57:45:56:7a:8b:40:72:b9:24:f6:9a:c2:c9:50:44:9e:53:
         b4:2e:7a:1c:8a:f9:36:9f:f9:25:4a:3b:69:1e:27:d7:8d:8c:
         b0:db:13:0f:b7:e4:66:6f:15:2f:06:e7:58:b6:dd:ac:3e:32:
         01:ac:9c:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 27 04:25:05 2025 by rpki-client