This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05d3edbb-c872-4e71-8313-7f5869ef6da7.roa
File:                     05d3edbb-c872-4e71-8313-7f5869ef6da7.roa (raw, json)
Hash identifier:          v3xzcpdsvvBV9H9/ckSbPUk58QFIojVko26fBHzscKU=
Subject key identifier:   93:D2:EF:8F:BF:33:B3:96:F7:A4:5B:C7:7B:69:78:84:54:EB:D9:2D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       507F73328E291E2AD9606C182E0D34A36D7051E1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05d3edbb-c872-4e71-8313-7f5869ef6da7.roa
Signing time:             Tue 25 Nov 2025 18:30:11 +0000
ROA not before:           Tue 25 Nov 2025 18:30:11 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:5304::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7f:73:32:8e:29:1e:2a:d9:60:6c:18:2e:0d:34:a3:6d:70:51:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 18:30:11 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=916463f6cd5ed81c840e23ef3467d79ac3607ff053915dc967a4f3c9d62d57a4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:dc:2c:59:26:62:f5:be:0e:0d:05:6c:a1:
                    cb:99:97:ed:45:2c:d6:e9:e1:09:07:a7:1d:8e:41:
                    07:7f:85:66:13:be:1c:43:1b:f8:4c:42:c7:75:54:
                    15:07:fd:fc:af:9d:c0:e8:75:e2:dd:06:bd:06:94:
                    39:d7:87:2b:20:4f:02:b3:25:5e:dd:07:e6:dd:da:
                    19:57:90:30:0f:d3:fd:70:c1:60:a3:08:4e:96:2b:
                    b0:1c:d5:da:d0:66:54:c7:66:ad:f5:97:82:ba:b5:
                    00:69:2e:44:50:1b:c9:8f:a5:78:35:ce:29:96:fe:
                    e1:26:e1:ca:e6:3c:6f:47:0a:38:b9:e7:d3:eb:a0:
                    7c:b3:c8:f0:0d:cc:4a:a9:1c:46:ba:fc:b8:f6:0a:
                    2c:5e:a9:d8:31:62:9c:da:ec:e5:dc:07:e9:a7:75:
                    f6:29:e3:66:37:77:22:cd:f6:ae:3d:b3:ca:b7:f1:
                    e0:9b:0c:bb:8b:55:77:ed:4d:4f:65:14:ab:9c:7e:
                    fb:b3:5e:41:fa:c5:d3:14:61:d0:ed:e9:13:3a:66:
                    fd:68:7a:92:5d:26:e4:dd:5e:de:bc:aa:d3:12:da:
                    38:36:7e:96:2a:8b:dc:dc:5f:b2:5d:07:e8:38:6d:
                    69:b1:7a:cc:61:b4:47:b5:d8:7c:d2:4f:59:46:f7:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D2:EF:8F:BF:33:B3:96:F7:A4:5B:C7:7B:69:78:84:54:EB:D9:2D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05d3edbb-c872-4e71-8313-7f5869ef6da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5304::/47

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:e5:31:78:57:d7:3f:3b:aa:c2:91:7d:a1:ff:92:f4:e6:
         21:ce:c1:34:1d:be:04:c5:0f:27:36:f9:01:7f:aa:e7:8b:46:
         4c:03:4f:18:2c:89:df:52:a0:d9:04:dd:f9:e8:d9:de:62:ec:
         49:f4:74:d7:4a:39:8f:69:c4:7f:38:25:c2:b8:52:72:a8:e0:
         42:4d:3d:fa:c7:41:34:6e:e6:80:91:4d:d7:af:30:da:a2:e4:
         3d:54:cb:f6:04:70:0d:55:64:10:d2:6c:12:a9:ea:04:e0:ad:
         3b:aa:ff:56:d2:77:25:9d:1b:3b:b8:63:81:f5:46:54:ab:85:
         3b:97:34:7b:9f:4b:58:55:fe:1c:84:6e:99:43:d0:4a:bf:b9:
         61:46:a1:6b:e8:c5:fe:b0:e6:46:a6:5e:4e:66:6b:ae:74:6d:
         a4:b3:aa:be:12:15:c2:69:e0:ea:c7:5f:fb:08:36:7d:71:fb:
         e0:1f:fc:3d:29:56:b7:ac:7a:02:cc:9c:21:75:3a:49:2e:6e:
         86:93:3c:22:62:d6:5c:d8:6f:31:a3:c5:e9:03:fa:2e:ca:6d:
         7e:8c:7e:ad:c9:63:bf:24:4b:9c:52:a0:bd:bb:7c:fd:b1:96:
         c9:de:66:b7:54:8c:bb:b9:09:fe:09:00:75:23:d8:28:ce:35:
         7b:6d:b0:0e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUH9zMo4pHirZYGwYLg00o21wUeEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTgzMDExWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MTY0NjNmNmNkNWVkODFjODQwZTIzZWYzNDY3ZDc5YWMz
NjA3ZmYwNTM5MTVkYzk2N2E0ZjNjOWQ2MmQ1N2E0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBjdwsWSZi9b4ODQVsocuZl+1FLNbp4QkHpx2OQQd/hWYT
vhxDG/hMQsd1VBUH/fyvncDodeLdBr0GlDnXhysgTwKzJV7dB+bd2hlXkDAP0/1w
wWCjCE6WK7Ac1drQZlTHZq31l4K6tQBpLkRQG8mPpXg1zimW/uEm4crmPG9HCji5
59ProHyzyPANzEqpHEa6/Lj2CixeqdgxYpza7OXcB+mndfYp42Y3dyLN9q49s8q3
8eCbDLuLVXftTU9lFKucfvuzXkH6xdMUYdDt6RM6Zv1oepJdJuTdXt68qtMS2jg2
fpYqi9zcX7JdB+g4bWmxesxhtEe12HzST1lG9xGlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUk9Lvj78zs5b3pFvHe2l4hFTr2S0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA1ZDNlZGJiLWM4NzItNGU3MS04MzEzLTdmNTg2OWVmNmRhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAUwQwDQYJKoZIhvcNAQELBQADggEBAHWe5TF4V9c/O6rCkX2h/5L0
5iHOwTQdvgTFDyc2+QF/queLRkwDTxgsid9SoNkE3fno2d5i7En0dNdKOY9pxH84
JcK4UnKo4EJNPfrHQTRu5oCRTdevMNqi5D1Uy/YEcA1VZBDSbBKp6gTgrTuq/1bS
dyWdGzu4Y4H1RlSrhTuXNHufS1hV/hyEbplD0Eq/uWFGoWvoxf6w5kamXk5ma650
baSzqr4SFcJp4OrHX/sINn1x++Af/D0pVresegLMnCF1OkkuboaTPCJi1lzYbzGj
xekD+i7KbX6Mfq3JY78kS5xSoL27fP2xlsneZrdUjLu5Cf4JAHUj2CjONXttsA4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:51:29 2025 by rpki-client