This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa
File:                     2592ade6-505a-4e24-928b-9a1e71b309ae.roa (raw, json)
Hash identifier:          jx6aWweTblr1JUZY/e/TVApUA0dLVWDI9eTzoXC49bs=
Subject key identifier:   0A:88:5D:72:50:F7:85:C0:FB:58:D1:42:B1:EF:E0:DF:0C:91:B3:18
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       211BBF46E20684B0F7D433DC9C7F3D4881058B25
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa
Signing time:             Wed 10 Dec 2025 00:10:05 +0000
ROA not before:           Wed 10 Dec 2025 00:10:05 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1b:bf:46:e2:06:84:b0:f7:d4:33:dc:9c:7f:3d:48:81:05:8b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Dec 10 00:10:05 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=8b353078e3e923e244ab65f26f45c200ec6f923198a0317ea72c629e49eaa90b, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:6d:53:1b:80:92:4e:b8:63:f1:05:9a:28:
                    f0:0b:f7:34:5f:e0:fd:03:4b:37:b8:b9:01:d6:2d:
                    e1:85:b2:19:73:d1:12:ce:a9:f4:48:a0:9f:11:86:
                    0d:c8:a8:7b:19:0a:d2:01:ed:ee:01:8a:17:69:da:
                    c8:2e:4d:de:99:53:6a:56:9f:46:e0:33:1e:b7:ff:
                    d8:73:40:f8:cc:91:5a:ff:ae:03:43:c6:0c:1d:ea:
                    12:91:6a:1d:37:36:33:5c:62:a4:0c:1d:36:11:fd:
                    bb:d4:95:3d:8f:2d:87:1a:40:ac:df:55:5b:9b:2e:
                    b0:3c:3f:5b:6a:3b:36:7e:ec:31:0f:7a:9d:59:90:
                    7a:09:fa:6e:91:c4:76:09:05:d6:01:ce:a6:7f:cd:
                    a1:8f:d4:89:b7:cf:15:96:58:37:42:93:35:59:aa:
                    f8:70:04:43:5d:bb:41:e1:98:1c:8e:59:29:e8:67:
                    85:b5:25:c8:f8:59:ad:f2:5c:61:b7:f6:62:ba:ca:
                    05:c2:31:8d:ab:e1:16:85:f5:f3:51:8a:b5:00:a9:
                    71:32:52:fb:cf:40:e6:d6:f4:99:01:ab:75:0f:c3:
                    56:18:90:38:75:36:6d:d0:66:50:1b:b2:81:9d:91:
                    07:98:73:b1:2c:e9:e4:86:e8:70:0b:29:71:17:d7:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:88:5D:72:50:F7:85:C0:FB:58:D1:42:B1:EF:E0:DF:0C:91:B3:18
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:bd:da:6a:68:ad:f7:26:93:ef:a4:65:82:49:14:38:18:82:
         7f:86:45:72:ab:be:ea:4d:3f:bc:de:42:b3:5e:02:2f:c6:6c:
         71:d2:b9:f0:17:56:6e:01:60:59:16:f8:82:09:a2:c6:13:77:
         e0:50:3f:2e:24:5d:90:32:e8:6a:a8:59:f7:0f:b1:9c:c3:e1:
         e9:9a:a6:60:a7:f0:18:56:4c:89:98:24:96:f9:0d:18:56:79:
         a2:82:6f:b9:e2:f5:d8:c0:ca:c0:a3:39:88:a4:f1:a1:cf:a7:
         35:b3:4f:a2:8d:59:5d:21:42:e9:a4:1f:2c:48:9f:85:6a:58:
         ee:18:dd:a3:4f:e3:98:05:60:47:db:bc:17:c3:ab:ea:c4:49:
         96:30:f1:a8:87:67:72:98:61:63:a7:a4:ba:33:3d:59:27:6e:
         af:5e:cb:e2:d3:13:52:95:b4:10:6e:69:c8:69:b2:46:77:c9:
         ed:89:47:5d:b5:69:cb:07:49:10:28:3d:2e:53:10:8a:8f:b4:
         ee:6e:fd:92:4d:64:f3:05:24:51:2b:74:14:77:84:da:ac:44:
         53:c4:9a:9c:e1:11:ed:92:80:a5:7a:92:26:4e:ac:a2:e8:bd:
         04:70:4f:65:ad:1c:f2:c1:d4:e7:74:86:52:2d:3b:72:de:91:
         bc:43:8a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:05:22 2025 by rpki-client