This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa
File:                     f5b1d1bf-721f-4a57-a400-f549c190180c.roa (raw, json)
Hash identifier:          3jMyvZTqixJZOxLEhUsd7dZidjYmcSB/OC2Pc8Tesao=
Subject key identifier:   4C:F0:72:F9:30:E9:C9:DC:B3:89:64:E9:DE:50:21:61:2D:C2:63:88
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       2E91DDEE58E7EC920E930BC70BFFF6370EFAA6DA
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa
Signing time:             Tue 25 Nov 2025 19:40:33 +0000
ROA not before:           Tue 25 Nov 2025 19:40:33 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:8140:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:91:dd:ee:58:e7:ec:92:0e:93:0b:c7:0b:ff:f6:37:0e:fa:a6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 25 19:40:33 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=e4a2d8866ce80c20b343997cbdf4620f441bb519d141124820ef421e79e6849d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:50:80:e6:00:66:7f:5d:49:93:4c:a2:37:
                    0b:4a:6e:9f:a2:2e:8d:bb:43:a9:dd:4b:a3:b6:6b:
                    ce:53:bf:a5:49:4a:cc:c7:28:c7:29:5f:a9:7d:59:
                    77:ff:bc:1a:e1:ff:44:78:32:d7:c1:a1:c6:dd:c9:
                    20:f8:de:74:35:1b:86:64:5a:40:dd:99:41:c0:10:
                    56:b7:5e:fb:59:a0:92:3d:3d:03:f7:5e:b5:1a:41:
                    81:84:a3:33:7f:78:0e:1c:98:64:55:6c:4c:d1:fb:
                    55:43:3e:66:4a:80:56:ba:09:6e:af:e5:5e:98:35:
                    92:f3:d9:cf:93:91:ed:ce:dd:14:6c:69:01:c4:c6:
                    42:bf:c9:b3:ca:13:15:6c:f5:7c:64:c0:17:76:ba:
                    dc:2b:0e:f4:85:cb:a9:b0:00:59:8e:82:70:65:b0:
                    58:ae:98:20:7c:40:e7:77:b9:7d:6f:fe:4c:f9:2f:
                    4f:5b:2d:42:e9:55:d2:d7:e0:81:0c:7e:32:66:22:
                    f0:9c:9e:dd:9d:9d:a7:15:db:4d:36:e7:a0:b5:ed:
                    0d:ef:92:ce:3c:b9:dd:95:5d:c9:17:71:4e:f0:95:
                    93:07:7b:c4:ff:d1:24:69:d6:af:73:a6:29:02:7e:
                    8d:d9:f7:5f:de:a7:24:80:35:13:80:6e:2d:48:f7:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F0:72:F9:30:E9:C9:DC:B3:89:64:E9:DE:50:21:61:2D:C2:63:88
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:ce:b4:d0:16:38:16:a1:c6:55:bf:fa:9c:fd:b4:dc:cc:63:
         82:0d:3e:74:54:cf:a9:aa:10:37:92:ae:6a:88:48:04:e8:9c:
         bb:a6:3a:81:51:f6:9a:dc:7c:2a:16:35:55:37:95:5a:05:0e:
         63:56:8c:5f:10:8e:93:03:d6:f5:db:6f:82:74:84:09:b9:1a:
         92:5f:29:b1:99:de:d0:8a:9f:17:c6:25:10:b2:02:67:89:3d:
         85:ea:db:a0:71:f1:22:a5:50:3f:0f:2b:20:5f:0c:e5:8d:be:
         7f:79:44:85:50:9e:11:d1:57:cc:32:9f:bb:86:c7:c4:ae:45:
         09:60:e7:28:41:a7:58:ac:87:c6:91:4c:03:23:0d:49:41:43:
         8c:3f:3b:28:e9:d8:2f:78:8a:c6:49:82:23:09:57:8c:21:4a:
         6d:b8:db:f6:69:40:e0:6b:35:bd:93:99:a4:71:cf:31:63:4d:
         ed:c4:11:98:84:bb:84:ac:e9:1f:45:53:d2:67:24:85:55:45:
         e5:af:60:d3:92:25:15:50:d6:de:48:8e:87:78:8b:17:e6:f8:
         6d:ef:f0:a8:dc:c5:61:eb:4c:ce:0a:82:05:8d:64:a4:18:aa:
         1b:74:68:c0:a1:c7:d8:0a:70:3a:3b:13:cb:22:31:22:ef:43:
         76:20:17:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 28 19:38:51 2025 by rpki-client