This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0935b104-2a80-4ff0-bcab-bf8f9c4cd94d.roa
File:                     0935b104-2a80-4ff0-bcab-bf8f9c4cd94d.roa (raw, json)
Hash identifier:          wRqfE7mYwQStoTG5onuO3ToIn0oaLOnKpce8UAJqSXM=
Subject key identifier:   24:46:DB:59:13:FF:AF:C1:08:F8:ED:1B:77:2A:BD:8C:2F:F1:B6:A0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       13DABAA6B156464038FF9B0E131E4E70A205F010
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0935b104-2a80-4ff0-bcab-bf8f9c4cd94d.roa
Signing time:             Tue 25 Nov 2025 08:02:09 +0000
ROA not before:           Tue 25 Nov 2025 08:02:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38f8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:da:ba:a6:b1:56:46:40:38:ff:9b:0e:13:1e:4e:70:a2:05:f0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:02:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=9cb19aed8bde3dbf3496ad5e18dbe35886cb990d91200e45f3df32c0aeb57251, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:af:2b:97:66:43:c6:77:93:9a:6d:c2:47:
                    a9:dd:5b:7a:d4:b9:28:2a:7c:ec:27:65:3c:04:4e:
                    bd:89:55:a2:6c:7e:48:5d:4a:03:1b:c7:74:18:76:
                    3a:71:7b:db:ca:aa:5c:67:84:02:70:cc:ed:67:eb:
                    d5:e5:5a:d2:01:9e:12:ca:24:ca:aa:ff:89:3e:a1:
                    43:8f:5c:e3:a7:5e:59:0b:03:15:5c:a8:14:27:03:
                    0e:04:f0:5c:22:d8:43:4c:5b:34:94:5b:46:80:5e:
                    4b:94:35:20:d1:14:4b:06:ee:ae:69:83:47:03:10:
                    6f:88:9f:49:82:5d:ce:67:a9:b1:4a:4d:ef:a7:92:
                    d6:7b:64:f9:3d:14:60:fb:64:d7:1c:9f:85:13:d5:
                    bc:0d:1a:5a:2d:61:4c:6d:ae:9e:59:eb:b1:79:8b:
                    a3:c3:2a:c4:a0:60:6a:64:80:41:44:97:08:78:30:
                    d7:dd:d0:ae:32:e6:41:71:79:c7:dd:2c:90:d7:95:
                    18:51:df:cb:da:ca:3a:05:3f:e2:3b:ae:0c:10:69:
                    7c:eb:a5:15:ae:7c:68:93:9e:e1:d2:38:d8:ba:72:
                    22:66:4e:9d:8b:df:ff:6f:83:90:0f:bd:a3:b6:f3:
                    c5:a7:95:91:a8:ce:50:9e:88:03:ad:44:df:d5:5c:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:46:DB:59:13:FF:AF:C1:08:F8:ED:1B:77:2A:BD:8C:2F:F1:B6:A0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0935b104-2a80-4ff0-bcab-bf8f9c4cd94d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38f8::/46

    Signature Algorithm: sha256WithRSAEncryption
         c0:08:0e:4a:67:ab:d3:7e:f8:6e:10:ab:f8:cd:2d:f4:4b:d9:
         f5:d8:ee:5d:e4:de:c0:20:41:a3:1e:e2:28:d0:64:1f:b3:d8:
         b5:eb:9c:e1:19:e1:ad:2a:ce:57:5f:e1:ea:ec:4e:db:ba:ba:
         e2:96:70:53:f9:24:ec:7c:e1:ac:15:75:4e:2a:55:27:1d:4e:
         3d:e4:58:f0:4a:d7:2f:61:a4:18:13:23:25:a6:c2:cc:28:ed:
         0b:37:9c:05:29:78:46:58:98:c8:d7:19:74:ea:97:c4:26:64:
         8a:53:51:6a:39:97:c3:1a:0c:b5:16:67:a4:89:f8:29:a8:62:
         e8:b6:37:c7:31:22:5c:51:2f:f5:99:9b:5f:19:38:d0:e2:b4:
         7c:18:38:73:22:19:88:da:3c:3f:0f:3e:2b:b0:f8:55:6a:26:
         49:ce:c7:d2:43:e1:7e:2b:4e:8b:ac:6d:d4:55:c5:56:74:8a:
         09:7d:e3:49:79:54:29:b7:cb:b0:a4:fd:14:fa:49:f9:33:ed:
         81:b1:2b:46:b2:f3:0a:69:51:c7:13:bd:68:d6:2c:13:98:78:
         a9:6b:8d:6a:08:ce:28:b3:d3:d2:7e:4b:b2:7b:4b:dc:dc:64:
         3e:68:75:91:2c:98:17:3b:bd:0c:a7:5c:7a:be:f2:2a:4a:34:
         3a:85:9b:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:51 2025 by rpki-client