This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/07309416-a7f9-4f21-958a-b20982084016.roa
File:                     07309416-a7f9-4f21-958a-b20982084016.roa (raw, json)
Hash identifier:          yTrwQCNngwDx+xiO4iDUSR37QvtFHqDcp/h04ZMvbjI=
Subject key identifier:   E7:37:EF:41:58:08:0F:4E:C5:9E:FC:C8:DC:B2:87:38:F8:B4:65:D9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2BDC1E60145433C46E922031A79CBE0255D2A0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/07309416-a7f9-4f21-958a-b20982084016.roa
Signing time:             Mon 24 Nov 2025 03:01:31 +0000
ROA not before:           Mon 24 Nov 2025 03:01:31 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1b4a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:dc:1e:60:14:54:33:c4:6e:92:20:31:a7:9c:be:02:55:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:01:31 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=72de4b504e8c0c278110a820725b378f7ce3f8efdf4441eb2d9630c8f4426aa0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:93:1b:d0:dd:61:32:73:51:ae:08:d7:51:
                    82:d8:c1:68:ef:77:87:3c:3f:6c:4a:64:04:3c:c6:
                    fd:c8:d7:6c:c1:ee:a6:22:b1:fc:31:ad:36:ed:36:
                    66:0e:4d:f1:f5:c6:cc:67:0d:e4:0e:fe:6d:1a:54:
                    6b:0d:3f:82:6a:fc:8c:3a:8b:c4:46:c8:df:17:2e:
                    8b:7d:d8:99:2f:34:15:12:0f:9f:61:2e:c7:7e:42:
                    50:5e:79:76:cd:5c:48:ab:f6:7e:f9:cb:e7:e1:91:
                    ec:ae:93:f5:45:ec:41:3a:31:14:ca:82:e2:94:63:
                    2e:df:f7:f0:7b:11:bd:d5:38:a6:cf:9d:7d:ba:dc:
                    e4:7c:b2:16:d7:94:8d:7e:78:69:00:2e:f7:f7:3e:
                    7f:39:1d:80:65:f0:97:b6:3b:1e:e0:9f:23:75:12:
                    2c:af:48:37:f9:65:a7:b5:5d:bb:71:a6:2e:91:96:
                    dd:03:e2:d9:1f:6d:2e:5f:ec:29:d1:0b:9b:90:a7:
                    da:2d:82:77:33:ee:f8:2a:7c:c0:71:66:dd:f0:6f:
                    69:a1:2e:c3:73:93:ac:dc:7e:c8:6c:1b:c6:8a:b9:
                    81:37:ab:dd:ec:22:d8:46:dd:61:0a:eb:72:65:a6:
                    77:b4:36:b0:ed:4e:a3:67:a0:82:13:97:09:f1:e5:
                    47:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:37:EF:41:58:08:0F:4E:C5:9E:FC:C8:DC:B2:87:38:F8:B4:65:D9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/07309416-a7f9-4f21-958a-b20982084016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1b4a::/47

    Signature Algorithm: sha256WithRSAEncryption
         3c:38:25:80:f4:05:da:1e:9f:34:b6:09:16:83:47:9f:c9:3a:
         a4:ce:cf:1d:2a:1e:d3:02:fd:fc:13:61:3c:21:04:0b:04:13:
         91:16:88:fc:68:52:78:32:ee:b6:a1:14:c3:bd:cf:1a:40:5a:
         73:3c:90:fd:f9:bf:b6:bc:f9:f8:87:54:01:ce:f8:9a:a1:a9:
         78:39:53:ab:8e:9d:24:69:78:80:fd:5c:56:25:25:05:3f:38:
         34:c3:e2:54:b6:22:f6:10:13:c4:7e:1a:9e:6a:17:50:19:37:
         e3:b6:02:78:04:d1:47:8d:cd:00:1e:13:b9:fb:ff:b9:b6:50:
         57:7b:db:8d:09:e9:af:46:be:d6:fb:76:e6:b8:03:6c:1f:a1:
         1f:59:52:8e:a0:78:d6:56:ed:d1:ed:6f:d5:56:11:d6:aa:9c:
         7a:c6:87:a7:09:78:d1:30:d2:5b:a4:e3:6a:b9:8c:96:06:e5:
         5a:4c:b3:7e:30:fd:c2:e3:44:3f:d2:b2:aa:e9:03:64:26:1f:
         fc:5c:45:fe:3a:b5:df:c1:02:c7:a3:51:27:ca:78:91:8a:71:
         9f:1b:67:b6:da:5f:d1:84:1e:d6:28:8c:42:fc:e6:75:58:d4:
         c5:d3:74:ef:36:b8:b8:70:4d:ea:a3:e5:7d:d8:ca:ee:db:09:
         30:a5:27:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:45:16 2025 by rpki-client