This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/c518c762-ddbf-4352-b9b9-1484318adaa8.roa
File:                     c518c762-ddbf-4352-b9b9-1484318adaa8.roa (raw, json)
Hash identifier:          BXkc3SoHBhaWxQRMxaxez6zdYST2MzZQevMeJeIZJDQ=
Subject key identifier:   FD:11:45:7B:91:25:3C:56:66:0F:7B:7E:17:06:BB:A0:8E:54:05:50
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       5185CECAB86648536DAF3DDBC7794D4CC1CE27EF
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/c518c762-ddbf-4352-b9b9-1484318adaa8.roa
Signing time:             Wed 10 Dec 2025 00:10:06 +0000
ROA not before:           Wed 10 Dec 2025 00:10:06 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:85:ce:ca:b8:66:48:53:6d:af:3d:db:c7:79:4d:4c:c1:ce:27:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Dec 10 00:10:06 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=13399ceb7e6e91e981dfb916ec444d6ffb0f65b906a492ecb6bc8e54aeb3f407, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:ed:ef:25:8c:73:12:c0:1d:88:e5:e4:07:
                    e0:e9:9c:88:13:c2:d2:12:d8:2c:88:fc:81:44:46:
                    31:2f:03:d9:fd:2e:8e:68:63:50:fd:a8:96:44:3d:
                    18:7d:88:e9:bc:6a:12:fe:4b:d7:7f:c0:15:b6:28:
                    86:6e:89:96:e5:f5:14:4c:cc:c9:08:3c:af:d0:d7:
                    b3:7b:fa:e9:bc:51:e2:93:eb:4f:0e:da:04:8d:d6:
                    a4:df:d8:30:3b:b3:ac:83:87:12:8a:b0:25:7c:ea:
                    48:b5:9b:e3:a6:27:a2:e9:dc:29:4d:7c:fd:a8:10:
                    ef:95:69:7b:4f:b9:46:04:21:a3:42:39:60:1a:c8:
                    68:5d:e0:b2:60:d3:27:5a:f4:5b:64:fd:20:f4:b3:
                    b5:d6:0f:67:ae:79:9f:08:81:85:8c:3d:c8:46:ad:
                    38:94:a1:98:55:0e:72:6b:af:70:42:92:82:2b:c0:
                    49:c5:11:08:ec:92:b7:2a:64:6d:d0:e7:d9:00:16:
                    0d:8a:64:90:80:ac:c1:a6:4b:ec:f9:d9:e6:16:54:
                    da:7b:04:d1:9d:ef:78:7e:2a:fe:83:37:60:3a:73:
                    b2:42:cb:9b:e6:b4:13:70:a2:d6:1f:e0:f1:4d:52:
                    c2:d6:cf:47:c7:b1:4d:e7:c6:c3:ca:11:2b:eb:18:
                    3f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:11:45:7B:91:25:3C:56:66:0F:7B:7E:17:06:BB:A0:8E:54:05:50
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/c518c762-ddbf-4352-b9b9-1484318adaa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:2a:0e:77:47:a0:c7:16:cc:00:1f:80:4c:13:6a:f2:b8:
         ff:60:de:67:62:5d:3d:e8:2e:4c:a0:fe:27:d5:f9:3d:3e:07:
         57:77:12:9e:9e:49:cd:a8:0a:e3:4b:42:36:62:28:13:6a:24:
         1c:4b:c6:5d:72:51:8d:a0:20:f4:23:9d:be:80:a4:09:ca:d3:
         79:a1:b3:60:7f:d5:48:1b:f2:6e:f6:94:77:d9:f5:14:8f:39:
         92:19:23:7e:6d:42:1a:24:12:49:eb:fb:8e:a8:4c:67:6f:79:
         d2:7e:ab:6e:aa:55:d7:0a:e6:be:3d:75:cc:a5:5f:00:c8:b0:
         b0:fe:5c:6c:26:14:5e:85:97:4f:72:4c:ae:35:e2:a3:dd:96:
         e2:cb:24:ee:a7:91:ba:23:91:95:c9:dd:12:11:d9:cd:60:38:
         22:df:6a:91:a7:26:82:60:a7:ae:d3:85:08:4c:ea:cb:68:aa:
         5a:d8:d7:93:f6:fe:31:25:aa:6b:1d:dc:e9:ba:cd:1a:63:3e:
         c9:90:ca:8f:4f:df:fe:6b:30:54:30:85:3f:0c:9d:50:40:88:
         f5:fa:55:bb:14:a5:75:d5:5a:c8:4a:c4:5c:98:1d:f5:d8:e8:
         3e:8b:10:b0:d5:f8:e8:6e:f3:c9:af:1b:75:fd:b4:dc:b3:89:
         07:b4:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:08:06 2025 by rpki-client