This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb75fc4b-0627-4c79-b591-308eee344e77.roa
File:                     bb75fc4b-0627-4c79-b591-308eee344e77.roa (raw, json)
Hash identifier:          J03CVsH2u/aqx81joRzOmHJiCfpeECp63KJlLSZld2Y=
Subject key identifier:   45:06:81:09:AB:41:F0:55:1F:41:AD:6D:86:4E:E8:F0:F8:0B:49:2B
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       30ECE0C28D382C3022B2968BE699C590EFEE3DD3
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb75fc4b-0627-4c79-b591-308eee344e77.roa
Signing time:             Wed 10 Dec 2025 04:40:07 +0000
ROA not before:           Wed 10 Dec 2025 04:40:07 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:610::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ec:e0:c2:8d:38:2c:30:22:b2:96:8b:e6:99:c5:90:ef:ee:3d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Dec 10 04:40:07 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=710a83b813723d66d2f916f37e9c1cdfbda01870d5ba8341c0639abc635c8985, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:64:95:0d:be:3b:ee:3b:10:1e:58:b9:a4:
                    16:d5:51:d6:ea:7f:c4:3c:c8:17:12:05:19:11:ea:
                    36:50:d8:07:9a:d4:5a:31:9c:26:84:92:34:b5:a9:
                    0c:28:82:d9:d4:94:ca:64:3f:78:60:9b:05:89:c8:
                    1d:70:fa:ad:9b:18:66:e0:19:6a:ce:94:95:f6:34:
                    c9:cb:57:ba:a1:92:a1:2f:7a:7e:7a:a7:29:fa:90:
                    54:97:ba:ef:03:91:09:ca:b5:0d:58:38:3e:ae:48:
                    d2:ee:0c:3f:4d:e3:ae:e3:e7:27:bb:5a:8f:09:30:
                    58:34:c1:33:7b:7a:a8:f3:d5:96:d9:ae:82:cd:25:
                    4a:c5:44:9e:a4:91:04:62:73:43:d9:d6:4c:e9:f9:
                    88:d9:cf:6e:cc:80:dd:fb:db:8d:1f:70:b9:e1:77:
                    b0:89:70:98:ad:7d:e6:53:fd:c0:4b:dd:f4:6a:9f:
                    03:64:49:cd:06:30:f7:a2:18:c8:8b:6d:fe:c6:c2:
                    1d:85:fb:52:de:bb:1e:36:01:0c:11:a6:29:c3:c3:
                    7a:9a:05:7b:ad:67:3b:52:f3:b8:0d:b4:dc:b5:5d:
                    96:f3:af:a4:f4:71:21:e5:87:0a:2f:74:b8:53:cd:
                    07:15:ff:84:af:5b:3b:a6:84:be:a0:f3:88:63:b8:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:06:81:09:AB:41:F0:55:1F:41:AD:6D:86:4E:E8:F0:F8:0B:49:2B
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb75fc4b-0627-4c79-b591-308eee344e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:610::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:36:49:c3:52:00:45:7d:5e:f6:f2:08:07:7e:eb:d8:c3:27:
         0e:85:ac:5b:c4:02:93:fd:29:0c:6a:fe:3d:f9:2d:06:b1:4c:
         bc:12:19:8f:1d:64:95:45:d4:cb:19:c0:e3:2e:f9:3d:f8:fb:
         4e:39:78:5d:4c:04:86:3a:69:b6:36:b3:51:8e:4f:56:49:a7:
         07:5a:ad:e6:7b:ff:5d:6f:81:8e:5e:f2:d5:f8:af:e1:25:10:
         6a:e5:2e:8c:38:9c:27:51:c6:fa:e3:4d:29:81:fd:ff:bc:dd:
         cd:e2:a8:ab:7e:92:30:dc:44:30:36:de:d5:c2:2d:17:82:57:
         e8:1d:23:f8:e4:ba:50:84:ba:08:3b:cc:a8:52:d6:a6:9b:5c:
         48:70:03:cb:bf:07:e7:63:da:f3:17:56:65:b0:a6:f0:bd:01:
         e1:8f:29:94:c1:8b:68:32:30:ac:1f:6b:bb:55:85:8c:c3:d5:
         3e:35:da:fc:21:6e:8b:de:5a:b3:b5:7e:85:3d:b2:4b:f5:91:
         23:60:5d:2b:d3:03:f3:51:35:06:c2:5b:7e:9b:19:b4:eb:81:
         9a:c4:45:73:4e:35:04:be:fe:a3:f4:4b:53:54:35:16:65:c9:
         87:a7:ec:37:a5:31:df:6d:3f:8b:19:93:9c:89:7a:72:c4:fe:
         4b:16:b1:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Dec 18 22:37:54 2025 by rpki-client