This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05392720-f6a0-42f0-babe-2fc858bcbf31.roa
File:                     05392720-f6a0-42f0-babe-2fc858bcbf31.roa (raw, json)
Hash identifier:          mVN4IuOFz6eP0GlRa8/x40fl6uWcxNb6jY9nx83IV7E=
Subject key identifier:   EB:16:B8:A2:E2:C6:AB:E5:AB:63:8F:6E:F7:19:21:C0:E3:5B:D0:A3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7108991809E170379774B36B30667AFBAFA8B2DA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05392720-f6a0-42f0-babe-2fc858bcbf31.roa
Signing time:             Tue 25 Nov 2025 02:02:13 +0000
ROA not before:           Tue 25 Nov 2025 02:02:13 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:08:99:18:09:e1:70:37:97:74:b3:6b:30:66:7a:fb:af:a8:b2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 02:02:13 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=64fbaaa41069a024e8402ffd721096ef25089d10dc9b34b9fb35735d14c859c1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:c4:77:ae:4b:68:8d:a5:78:76:34:c5:10:
                    80:6c:d5:6c:38:7f:5b:d8:c2:07:3b:3d:bc:aa:82:
                    15:f0:4f:ff:01:3c:49:25:87:b3:66:52:12:7d:9a:
                    b5:cb:3f:49:a3:13:b4:fe:55:25:fb:22:e4:4a:a4:
                    bb:4f:77:7f:25:07:d2:df:62:2c:1a:32:83:bf:f5:
                    ce:f6:ee:64:b0:87:4e:8f:a4:43:0a:eb:2e:0b:cb:
                    9a:2c:d0:92:a9:27:5b:f7:82:04:f4:c8:8c:b9:a5:
                    73:2f:8a:a2:92:ee:ab:82:91:60:4a:e8:dc:9f:00:
                    f6:53:89:5d:40:a7:ae:72:e8:63:08:1c:c7:6d:a0:
                    be:f4:55:90:d1:8a:bc:d1:b3:dc:4a:22:db:2b:75:
                    64:a6:d6:71:2e:73:1e:ff:5e:f2:73:52:6f:90:b5:
                    85:db:4c:a7:35:9f:51:43:bc:7a:e4:9d:0e:40:99:
                    29:bf:93:5f:d6:87:93:a1:2e:c0:55:7d:5d:88:78:
                    59:4b:91:d9:7c:c7:01:bf:d3:6c:09:85:18:a6:9e:
                    6a:65:83:b2:f0:c0:f5:c8:99:d1:6a:63:48:95:cb:
                    84:a6:c3:00:bd:fc:92:e5:68:39:79:a9:22:56:b7:
                    c3:4e:73:3c:c2:65:39:14:14:6f:b2:1f:0a:13:96:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:16:B8:A2:E2:C6:AB:E5:AB:63:8F:6E:F7:19:21:C0:E3:5B:D0:A3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05392720-f6a0-42f0-babe-2fc858bcbf31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f60::/44

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:26:9d:10:cf:2d:21:58:2d:8c:aa:50:d1:da:fb:10:12:
         1f:ed:f4:86:2f:78:d1:05:a9:a3:cf:8d:c0:60:84:b0:23:a7:
         1c:04:21:25:29:bc:6c:2f:d5:2c:10:c6:5f:76:0f:85:e1:16:
         94:c5:93:48:c8:ed:b0:43:56:5e:35:81:f1:ec:ed:e8:c0:64:
         4f:78:c8:cc:7e:b8:e9:c8:10:f7:01:64:b4:c2:ed:43:c3:cf:
         47:52:82:62:cd:37:a6:f5:b7:bd:e9:ff:35:d9:c6:53:67:24:
         5c:cd:2c:19:f8:16:cc:cd:79:25:98:87:1d:2b:da:e7:49:c7:
         7d:5a:65:83:01:30:65:83:c0:4b:35:3e:c3:2e:dc:e9:78:c8:
         99:4b:40:ab:1c:6f:26:95:93:2d:78:72:f2:b2:ee:d9:8c:a5:
         fd:f6:35:80:3a:32:05:7e:26:bb:df:a4:37:07:f5:a2:53:0c:
         eb:98:fa:07:81:19:84:9f:44:52:7b:57:d8:e1:63:a6:e4:8b:
         7d:b4:a3:86:c8:59:5a:6d:13:3c:a1:9a:01:7f:00:18:dc:ba:
         08:0e:8e:33:2b:df:57:5c:a8:28:88:6a:71:26:c2:03:91:e9:
         e6:3a:4c:d9:47:ac:99:2c:e9:26:29:17:78:c5:4a:99:ed:58:
         a9:bb:77:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:41 2025 by rpki-client