This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03dc4fb4-4e3d-459d-a3e3-247cb12dfb7b.roa
File:                     03dc4fb4-4e3d-459d-a3e3-247cb12dfb7b.roa (raw, json)
Hash identifier:          tLr/OK203uVjnGvhlXpQ7YwVeeD3maEzGLQDNs6WC5o=
Subject key identifier:   00:C3:A5:C2:CB:3D:4D:2E:8C:F6:FB:29:FB:73:49:24:D8:E6:17:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3810F1DCB8F56A139ABFD124C10EB2C7B00EB1F2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03dc4fb4-4e3d-459d-a3e3-247cb12dfb7b.roa
Signing time:             Mon 24 Nov 2025 05:00:55 +0000
ROA not before:           Mon 24 Nov 2025 05:00:55 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c72::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:10:f1:dc:b8:f5:6a:13:9a:bf:d1:24:c1:0e:b2:c7:b0:0e:b1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:00:55 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=a9aaff116ffde489cf9d1e6417c624bcfda304bb3a2ae06ffbb8489e00840a53, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:28:2f:fc:12:66:8b:c1:38:14:dd:35:bb:
                    06:4f:7b:ca:29:7f:20:e5:7c:2c:75:cc:75:66:3e:
                    93:be:c9:8e:31:68:fe:e0:7c:1c:78:dd:72:c9:a0:
                    96:ea:5d:4f:89:78:85:07:9a:eb:6f:72:8a:f3:bd:
                    5c:15:46:78:6a:cc:ef:11:a6:8d:d9:48:d1:6b:67:
                    18:ef:09:65:8d:91:f6:f0:fd:ca:a3:03:07:81:e3:
                    49:ba:b8:af:0f:19:fc:59:2d:84:c2:82:31:94:1e:
                    7a:7d:42:98:ba:42:c6:c4:54:89:dd:70:09:02:d0:
                    66:c5:a5:b7:4e:7b:2a:13:fe:6d:10:f4:46:df:ad:
                    58:bf:da:12:2a:0a:21:35:65:02:56:2c:f1:1f:aa:
                    31:be:76:10:02:6b:ee:e7:27:50:48:cd:ec:c8:46:
                    44:a8:18:3f:16:e4:e1:79:8e:76:df:21:bc:48:8d:
                    07:a5:02:bd:23:0e:d3:24:d8:63:d1:f2:63:92:e7:
                    5f:bf:a3:d2:fc:6c:66:fe:d2:00:aa:8b:d1:89:db:
                    9c:72:85:6d:99:4b:3b:01:2a:42:26:2a:74:1e:69:
                    c4:03:1d:04:46:37:0d:02:5c:a5:99:84:6a:68:c3:
                    e7:13:b0:f3:b8:cd:28:4d:9f:8e:dd:a3:40:e5:f7:
                    8a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C3:A5:C2:CB:3D:4D:2E:8C:F6:FB:29:FB:73:49:24:D8:E6:17:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03dc4fb4-4e3d-459d-a3e3-247cb12dfb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c72::/47

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:3a:22:96:b4:73:06:75:69:84:c5:c9:b0:30:f4:c1:d2:
         e1:bf:c7:75:81:52:eb:cc:18:70:55:a1:2c:0d:a2:91:08:db:
         25:96:74:d6:35:fd:4c:cb:c1:4d:d0:fe:6f:0b:b0:a8:1e:8f:
         76:6f:af:e5:86:0a:cf:9d:11:ce:84:d3:0f:c2:dc:48:1e:a2:
         97:9a:3e:f8:44:b3:c4:2e:44:46:bb:13:c8:6a:a9:7b:f3:52:
         58:84:95:11:a1:8a:68:c5:e0:83:71:cf:1c:a8:02:d9:99:27:
         a1:57:cc:6c:a7:c8:35:fd:eb:9f:7d:5d:4c:b3:60:d5:6f:b4:
         c5:1c:b4:16:06:85:d3:ee:4c:4e:b2:fe:b8:4e:ed:fc:89:49:
         4f:1d:8d:7a:77:1e:a8:56:85:2c:63:e4:40:34:cc:79:8d:86:
         c4:66:61:a9:aa:6b:11:32:e1:15:e7:12:40:28:80:81:ee:12:
         4c:f5:cf:c8:ae:be:b5:e0:bb:0b:2b:38:c0:3c:9d:8d:e0:06:
         da:c4:5b:d4:5a:50:4d:9d:2b:a8:9a:76:28:55:49:a0:74:15:
         65:3f:c8:90:07:3e:5e:c2:bd:19:38:ff:b2:0a:f2:68:4e:53:
         61:93:a4:10:49:d8:41:8a:04:e1:74:a8:43:b2:07:f2:b5:ec:
         10:a9:8f:b5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUOBDx3Lj1ahOav9EkwQ6yx7AOsfIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDUwMDU1WhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhOWFhZmYxMTZmZmRlNDg5Y2Y5ZDFlNjQxN2M2MjRiY2Zk
YTMwNGJiM2EyYWUwNmZmYmI4NDg5ZTAwODQwYTUzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwSigv/BJmi8E4FN01uwZPe8opfyDlfCx1zHVmPpO+yY4x
aP7gfBx43XLJoJbqXU+JeIUHmutvcorzvVwVRnhqzO8Rpo3ZSNFrZxjvCWWNkfbw
/cqjAweB40m6uK8PGfxZLYTCgjGUHnp9Qpi6QsbEVIndcAkC0GbFpbdOeyoT/m0Q
9EbfrVi/2hIqCiE1ZQJWLPEfqjG+dhACa+7nJ1BIzezIRkSoGD8W5OF5jnbfIbxI
jQelAr0jDtMk2GPR8mOS51+/o9L8bGb+0gCqi9GJ25xyhW2ZSzsBKkImKnQeacQD
HQRGNw0CXKWZhGpow+cTsPO4zShNn47do0Dl94q/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUAMOlwss9TS6M9vsp+3NJJNjmF7AwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzAzZGM0ZmI0LTRlM2QtNDU5ZC1hM2UzLTI0N2NiMTJkZmI3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALHIwDQYJKoZIhvcNAQELBQADggEBAD9tOiKWtHMGdWmExcmwMPTB
0uG/x3WBUuvMGHBVoSwNopEI2yWWdNY1/UzLwU3Q/m8LsKgej3Zvr+WGCs+dEc6E
0w/C3EgeopeaPvhEs8QuREa7E8hqqXvzUliElRGhimjF4INxzxyoAtmZJ6FXzGyn
yDX96599XUyzYNVvtMUctBYGhdPuTE6y/rhO7fyJSU8djXp3HqhWhSxj5EA0zHmN
hsRmYamqaxEy4RXnEkAogIHuEkz1z8iuvrXguwsrOMA8nY3gBtrEW9RaUE2dK6ia
dihVSaB0FWU/yJAHPl7CvRk4/7IK8mhOU2GTpBBJ2EGKBOF0qEOyB/K17BCpj7U=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:46:58 2025 by rpki-client