This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0306c3a1-d225-4fe4-853b-87428506a9e4.roa
File:                     0306c3a1-d225-4fe4-853b-87428506a9e4.roa (raw, json)
Hash identifier:          AJzR+y+p8L7/YC6lOUNUyk3fpDcjvgtLE+IKWviihgw=
Subject key identifier:   14:5A:4E:AE:9E:62:7A:F4:25:28:4A:78:9F:EA:F9:41:8D:BB:03:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0E58ABA4898BABDF1B175DE063FF8AB21137B25B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0306c3a1-d225-4fe4-853b-87428506a9e4.roa
Signing time:             Mon 24 Nov 2025 01:01:59 +0000
ROA not before:           Mon 24 Nov 2025 01:01:59 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f80::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:58:ab:a4:89:8b:ab:df:1b:17:5d:e0:63:ff:8a:b2:11:37:b2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 01:01:59 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=e87c12b6a0404508eb9545dd46f63c3161cda154419441f2b0ea8fa6de5e789b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:9e:e2:ba:10:2e:8b:b9:68:f8:9e:7f:ac:
                    74:d1:2d:2a:de:60:72:a4:0e:ab:bc:ab:18:89:bd:
                    1a:64:b5:f6:aa:e5:19:28:aa:2c:d4:57:d2:bc:54:
                    05:12:da:ef:f4:dc:d1:c8:68:fd:f5:ca:ce:e2:e5:
                    2d:be:53:c2:b1:3e:55:45:62:4a:71:ca:aa:3f:20:
                    c3:43:fa:58:84:fd:ee:69:6d:8b:bd:0e:b4:94:37:
                    82:20:a5:b4:d0:1b:34:dc:82:82:2a:c6:7c:a3:0f:
                    56:af:d1:23:ac:06:20:27:a0:14:9b:a0:b0:10:0a:
                    45:0c:46:5c:f5:a2:0d:5f:02:17:73:35:fb:b9:74:
                    e4:2e:0d:a4:35:57:4e:2b:4d:cb:82:2c:c6:e2:3d:
                    fd:07:a3:eb:eb:b5:2e:d3:13:d1:d7:20:a2:90:60:
                    a6:c3:1c:76:49:a6:30:41:78:04:91:9e:80:45:9b:
                    2e:4c:6e:4a:0e:f6:e0:5b:00:78:c6:5d:78:70:67:
                    6f:4a:02:81:3b:6f:66:9f:71:ac:f5:a8:e5:1f:e9:
                    66:e9:bd:1d:34:04:3a:24:7d:4c:2d:d5:7b:36:ed:
                    3f:b3:0b:8e:b3:3a:e0:ab:67:6c:57:6d:3c:44:37:
                    fb:32:7c:fe:14:f0:31:85:32:01:14:10:a7:04:16:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5A:4E:AE:9E:62:7A:F4:25:28:4A:78:9F:EA:F9:41:8D:BB:03:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0306c3a1-d225-4fe4-853b-87428506a9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f80::/47

    Signature Algorithm: sha256WithRSAEncryption
         71:44:eb:00:87:f4:66:3d:5c:2d:8e:a0:74:52:df:12:2c:04:
         03:dc:41:eb:20:43:77:ca:b8:3f:9e:30:44:7c:b6:02:37:01:
         bd:29:4d:b6:96:0d:25:92:13:2a:2a:06:bf:1e:95:0e:d5:d7:
         62:d8:30:64:fa:f9:79:35:e8:1b:a4:22:38:24:5c:f3:61:43:
         2d:c1:b3:17:b8:8c:5b:fd:f3:0e:4a:2f:34:19:3f:14:f5:22:
         7a:be:f6:47:4f:94:73:6b:3a:73:c4:12:7c:78:e8:d5:94:c6:
         e9:28:d4:d9:76:35:b3:76:4e:8d:c6:89:01:39:15:0f:c9:44:
         cd:87:f0:28:45:6e:13:e5:75:9a:b0:12:9a:a7:69:1e:2c:fe:
         d4:0f:f6:13:78:13:95:75:57:0a:e4:31:8f:c5:6f:11:fc:e0:
         2f:77:10:be:15:2c:29:d6:96:11:02:f3:e1:66:5d:dd:a8:95:
         22:e6:59:5b:93:68:ef:8a:f2:7e:ab:82:4e:7c:5f:57:1c:85:
         27:46:14:5b:7c:0f:4c:dc:c1:95:28:aa:87:ba:14:5b:92:32:
         8a:7c:be:9f:82:eb:cf:e5:41:7f:4b:07:b4:cc:28:db:cc:e4:
         40:6f:86:35:1b:1c:1e:be:91:33:54:b5:57:5e:d5:38:f8:f6:
         f5:91:b4:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:14 2025 by rpki-client