This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0378bdea-6f32-4c95-ad8c-c5c11389c0eb.roa
File:                     0378bdea-6f32-4c95-ad8c-c5c11389c0eb.roa (raw, json)
Hash identifier:          bVcnu6Y/yoZzreyAbq9K7/kiE2vr1EC+lmbdW1XbpZ4=
Subject key identifier:   9B:8D:75:4D:CD:E4:39:DA:1E:00:A3:68:D7:D5:B1:CC:A4:29:72:34
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7BDFBB48C534DF1EBF0077F72D471DC2EBFDDA07
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0378bdea-6f32-4c95-ad8c-c5c11389c0eb.roa
Signing time:             Tue 25 Nov 2025 15:11:55 +0000
ROA not before:           Tue 25 Nov 2025 15:11:55 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34f8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:df:bb:48:c5:34:df:1e:bf:00:77:f7:2d:47:1d:c2:eb:fd:da:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 15:11:55 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c9b0f64c402b06121b4af590e390743783fd0ba2d9b41a7c05ee671966c7a263, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:1d:45:c2:b8:2e:0c:5b:87:30:22:01:ca:
                    24:64:ee:2b:91:56:09:a4:a2:ff:48:75:ea:e3:18:
                    87:18:16:5e:f4:64:96:b0:35:6f:99:33:6a:1c:d6:
                    7e:1a:c2:05:11:f4:f1:2f:ba:01:77:27:0c:f1:d4:
                    59:87:a3:f7:8b:38:1a:ed:ad:53:d2:26:9e:5d:82:
                    88:32:f3:25:5f:45:68:40:2e:9d:3b:b4:d0:46:36:
                    a6:79:6c:3e:8d:29:18:98:5d:12:29:69:a1:5f:ad:
                    fa:c4:82:fe:7a:3e:b9:7b:d7:76:5d:2d:35:0e:ab:
                    84:51:9d:1b:b1:d2:ce:63:04:3b:f4:02:a0:de:39:
                    4d:1b:62:53:db:3d:a2:9f:e0:de:53:e1:56:77:20:
                    59:09:35:46:e5:43:cf:13:31:76:e7:bc:9b:32:6e:
                    23:eb:5a:ea:c4:51:30:cc:71:38:2d:59:d0:4c:a5:
                    b1:d1:4f:36:2b:d9:1c:c0:93:7b:e1:a4:72:ee:6b:
                    c7:c9:2d:5f:02:83:de:90:60:7f:c1:d9:e9:22:d2:
                    13:6e:d1:af:51:8f:0c:35:9e:dd:c6:a3:ec:59:24:
                    d0:95:98:20:86:6a:19:5b:c6:70:b0:fa:9a:7b:5c:
                    74:e1:17:0f:9b:e6:0f:45:a4:28:96:bf:e9:15:b9:
                    52:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:75:4D:CD:E4:39:DA:1E:00:A3:68:D7:D5:B1:CC:A4:29:72:34
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0378bdea-6f32-4c95-ad8c-c5c11389c0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         9a:e1:a6:85:a6:bf:c8:4d:3a:91:ab:c7:15:3a:2e:7c:92:6f:
         7f:99:d0:88:cf:b5:07:a7:e6:69:50:36:88:03:a8:3f:cb:2b:
         4a:c6:87:ac:a2:f0:fc:ed:c1:2f:7d:7b:63:64:78:06:85:e8:
         1a:f0:01:de:89:47:59:ff:f8:a1:f5:58:b7:09:df:a0:a5:ed:
         44:e4:e1:c0:f7:3b:cb:39:bb:7d:ce:11:04:c7:c5:80:55:e7:
         80:ec:86:e3:97:c3:a1:e5:ce:a5:f7:38:d0:30:80:a8:ae:7f:
         29:5d:ae:fd:04:9b:64:6b:e9:db:9a:ab:4d:a0:f8:ab:12:2c:
         93:03:ba:ee:e9:29:a2:0c:44:89:d2:08:b2:02:e8:d7:23:71:
         01:7e:7f:af:6c:06:5c:2d:b7:1d:8e:c7:2c:2c:13:ee:c8:b8:
         d1:00:4a:e8:ca:04:ca:e2:7e:94:18:e9:80:36:93:a9:14:ba:
         77:a7:3f:4c:e2:aa:2b:9c:73:c5:ba:a0:0d:06:7d:61:0b:32:
         40:76:01:06:3c:bc:df:ad:62:79:a0:96:aa:60:c4:c8:cf:92:
         46:b7:a3:f3:f0:42:4f:72:6e:3b:a9:0d:d2:2f:f5:8f:49:3c:
         d1:0d:a6:c1:8f:d9:f9:e3:85:39:05:ef:af:a6:3e:6a:6f:31:
         fd:e1:2d:8e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUe9+7SMU03x6/AHf3LUcdwuv92gcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTUxMTU1WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjOWIwZjY0YzQwMmIwNjEyMWI0YWY1OTBlMzkwNzQzNzgz
ZmQwYmEyZDliNDFhN2MwNWVlNjcxOTY2YzdhMjYzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiLB1FwrguDFuHMCIByiRk7iuRVgmkov9IderjGIcYFl70
ZJawNW+ZM2oc1n4awgUR9PEvugF3Jwzx1FmHo/eLOBrtrVPSJp5dgogy8yVfRWhA
Lp07tNBGNqZ5bD6NKRiYXRIpaaFfrfrEgv56Prl713ZdLTUOq4RRnRux0s5jBDv0
AqDeOU0bYlPbPaKf4N5T4VZ3IFkJNUblQ88TMXbnvJsybiPrWurEUTDMcTgtWdBM
pbHRTzYr2RzAk3vhpHLua8fJLV8Cg96QYH/B2eki0hNu0a9Rjww1nt3Go+xZJNCV
mCCGahlbxnCw+pp7XHThFw+b5g9FpCiWv+kVuVK1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUm411Tc3kOdoeAKNo19WxzKQpcjQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzAzNzhiZGVhLTZmMzItNGM5NS1hZDhjLWM1YzExMzg5YzBlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAANPgwDQYJKoZIhvcNAQELBQADggEBAJrhpoWmv8hNOpGrxxU6LnyS
b3+Z0IjPtQen5mlQNogDqD/LK0rGh6yi8PztwS99e2NkeAaF6BrwAd6JR1n/+KH1
WLcJ36Cl7UTk4cD3O8s5u33OEQTHxYBV54DshuOXw6HlzqX3ONAwgKiufyldrv0E
m2Rr6duaq02g+KsSLJMDuu7pKaIMRInSCLIC6NcjcQF+f69sBlwttx2OxywsE+7I
uNEASujKBMrifpQY6YA2k6kUunenP0ziqiucc8W6oA0GfWELMkB2AQY8vN+tYnmg
lqpgxMjPkka3o/PwQk9ybjupDdIv9Y9JPNENpsGP2fnjhTkF76+mPmpvMf3hLY4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:42 2025 by rpki-client