This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/096bfd2b-b402-4c0e-99cb-c87936877dc0.roa
File:                     096bfd2b-b402-4c0e-99cb-c87936877dc0.roa (raw, json)
Hash identifier:          /rZfENcfjPOn3YLpra0eq11S9kyeNvVVLdIboRAjcmI=
Subject key identifier:   F6:F2:0F:C5:E1:74:CC:AC:79:C9:C3:41:13:05:6C:AA:54:8E:68:9F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4F59CFB3F38917E233E59A26F5E90D5FCA0550F1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/096bfd2b-b402-4c0e-99cb-c87936877dc0.roa
Signing time:             Mon 24 Nov 2025 02:00:46 +0000
ROA not before:           Mon 24 Nov 2025 02:00:46 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bc6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:59:cf:b3:f3:89:17:e2:33:e5:9a:26:f5:e9:0d:5f:ca:05:50:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:00:46 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=c16abf49b7da248a627b7bcfd63c93bfcf01e46302ebdc9c7d5a4e6b4aad3e04, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:13:49:b4:0a:82:b6:8b:24:1b:c0:ce:aa:
                    00:ce:77:33:02:6c:11:b3:c1:cc:b6:fc:de:fd:8c:
                    1d:05:05:70:8c:39:6b:18:80:b3:2e:e6:a7:26:5b:
                    d9:cf:82:67:5a:e7:6c:1d:00:3b:46:e0:37:2f:89:
                    57:17:01:19:a2:e4:13:63:84:7b:a1:0b:e1:15:5e:
                    36:f4:b5:4a:8d:a9:01:af:af:6c:ef:00:41:eb:34:
                    c6:7f:1a:15:b3:70:b7:35:fc:d8:1f:9a:d6:86:98:
                    60:ac:dd:2b:70:65:29:dc:f1:65:29:ad:bb:49:1f:
                    5d:8c:56:98:92:98:11:da:dc:d4:da:61:29:e9:71:
                    80:aa:eb:21:d8:fc:43:ac:66:b9:94:02:30:14:06:
                    dd:f1:62:82:ec:01:44:32:46:c6:62:89:43:b1:a0:
                    c7:db:96:5e:59:00:37:c0:75:a5:6e:42:03:f0:af:
                    54:01:1d:88:c6:d3:b8:2f:56:45:14:a2:78:fc:a6:
                    1a:fd:69:e9:34:d5:2c:55:04:5e:d5:d3:4b:ea:e1:
                    9d:15:de:2d:42:bd:6b:a8:05:8b:51:3e:7c:28:07:
                    c3:28:93:27:94:f0:e5:a7:d3:2f:ae:31:d9:8e:4e:
                    77:9c:db:ae:cf:e6:4f:68:ac:e9:1a:38:b1:2c:ce:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:0F:C5:E1:74:CC:AC:79:C9:C3:41:13:05:6C:AA:54:8E:68:9F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/096bfd2b-b402-4c0e-99cb-c87936877dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bc6::/47

    Signature Algorithm: sha256WithRSAEncryption
         49:a7:4e:41:26:c3:57:8c:63:da:73:01:1e:eb:42:75:c3:91:
         b2:d0:a1:11:c3:09:86:f9:01:86:40:d9:ae:29:03:00:45:a1:
         34:19:a7:cf:a4:17:d2:7d:34:ac:c1:d0:21:3d:8a:9c:23:bd:
         62:24:b7:83:0e:15:9d:5b:21:e2:88:ab:42:2b:ef:17:4c:3a:
         d1:2f:54:15:48:1a:18:16:6b:58:64:d3:79:99:88:db:8e:9b:
         8b:a9:f3:d8:b2:d7:62:3d:b5:00:8c:8e:4a:40:36:c5:ec:fa:
         b6:95:e0:e4:6e:a6:66:ff:88:db:70:1e:5c:f3:03:71:15:50:
         9b:db:e6:51:96:96:d7:60:f2:97:03:9c:d5:ca:fd:b2:18:c2:
         37:04:cb:4c:b4:2c:1f:da:e7:29:83:ab:d1:04:cb:11:4f:1b:
         d3:f6:db:d7:08:fb:55:18:60:81:24:2d:43:c3:47:da:f2:8b:
         a6:49:5d:34:f6:05:7a:b5:92:46:e8:55:2d:bd:6c:68:96:f9:
         0a:aa:a4:f6:3b:c1:eb:ca:93:f5:55:8c:67:2a:d9:49:d0:fd:
         cf:8f:25:58:f5:ac:b0:a6:0b:47:80:48:a1:7f:da:55:47:8d:
         93:64:d5:6d:a6:24:af:f5:cb:30:9c:51:c9:b0:2e:27:12:94:
         08:78:be:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:01 2025 by rpki-client