This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09fbc811-b67b-424c-9103-a1c2cbec252b.roa
File:                     09fbc811-b67b-424c-9103-a1c2cbec252b.roa (raw, json)
Hash identifier:          WU25l16apw/CZAeG2u5bCIQF7B7uYg1aG0Qbj+zii6Y=
Subject key identifier:   E9:D6:1F:C9:EE:91:45:ED:01:CF:0B:D5:15:C5:8D:CF:16:DD:7C:E6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0113B086397AC30B6DAD28A4814304DC9C476952
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09fbc811-b67b-424c-9103-a1c2cbec252b.roa
Signing time:             Tue 25 Nov 2025 06:21:33 +0000
ROA not before:           Tue 25 Nov 2025 06:21:33 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d80::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:13:b0:86:39:7a:c3:0b:6d:ad:28:a4:81:43:04:dc:9c:47:69:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:21:33 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=0ecb459bfcf0d3205df819aa4601342ed6ffdea2f4040e831b80b7cd25a8991b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:76:b8:cd:94:05:e4:1d:d6:33:ed:ce:29:
                    78:05:a0:2d:d1:c8:28:5a:7a:be:4f:83:e8:ed:9a:
                    6a:f8:76:6a:a0:bd:9e:60:65:27:c9:36:bf:84:10:
                    b0:b3:0c:f9:c3:2e:5e:de:09:22:e8:94:f1:7e:84:
                    ad:d2:e6:3f:38:cc:f5:62:34:84:5a:ff:c9:85:e1:
                    6b:ef:a1:79:bb:5a:1a:13:16:52:1a:dd:81:5e:ef:
                    df:80:5a:6e:61:24:df:69:9a:88:a5:28:63:bc:b2:
                    24:a5:a2:28:5d:ef:3b:14:fd:12:3b:9a:3d:8a:e5:
                    09:78:e7:7d:c2:a5:67:92:ac:43:eb:cb:3c:b6:70:
                    c5:47:54:3e:c5:cf:e4:eb:fe:b2:5e:7b:bf:25:4f:
                    a0:7a:a5:25:f7:3d:ad:da:ca:f2:17:56:62:82:0b:
                    b0:5c:b1:39:e8:7c:a2:25:8c:06:fc:16:ec:7b:3d:
                    b2:8f:f6:bf:5b:d5:1b:ce:9e:6f:1c:91:8d:4b:d9:
                    54:04:a3:e3:53:c4:d1:60:e6:f5:79:ae:5f:e2:d4:
                    7c:57:e4:44:3e:4c:c6:03:f1:f9:53:24:aa:25:8e:
                    9e:88:6c:ab:3d:a3:51:5c:94:d0:a4:d9:ce:3f:37:
                    30:11:77:e3:60:1e:63:ef:36:4f:c4:7a:8f:f3:cb:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D6:1F:C9:EE:91:45:ED:01:CF:0B:D5:15:C5:8D:CF:16:DD:7C:E6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09fbc811-b67b-424c-9103-a1c2cbec252b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d80::/45

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:d0:67:d2:94:6e:96:da:49:4b:78:f3:c8:5c:a5:1e:11:
         c9:26:d2:52:d5:9f:42:21:ef:fe:e6:b0:7b:63:ba:f2:63:d3:
         6b:95:d9:1e:bd:87:49:ac:e1:f0:eb:e7:b9:f3:18:3b:fc:4a:
         b7:28:56:d7:5f:e8:20:fd:8c:ca:7f:19:9d:c6:74:a1:48:8e:
         83:ed:ba:ae:20:64:2d:c0:2c:b4:80:1e:5a:ba:58:2c:33:e8:
         64:36:31:d0:31:b4:4b:04:e8:61:4f:36:76:ea:82:6c:5a:f7:
         b0:28:22:e7:33:00:3b:5a:25:41:22:55:1c:dd:fd:8a:8e:23:
         87:ab:81:da:b0:53:bf:be:ef:7b:97:90:b9:e6:8c:dd:25:d4:
         ca:41:8c:67:ee:bf:21:fb:86:e0:8f:b4:b2:70:04:70:9f:cf:
         73:db:cf:93:58:66:96:60:55:46:31:1f:ab:97:95:05:35:be:
         ed:5b:12:f2:a1:8b:76:a5:c7:55:dc:92:1d:f7:45:b6:65:7f:
         0c:9f:ea:26:13:e4:c5:b3:bd:6f:e1:79:0b:7e:84:39:06:75:
         9f:b0:95:32:e1:a4:fb:47:0f:7c:b7:1a:56:8a:48:ec:67:37:
         4d:7e:df:67:18:62:b4:4d:aa:d9:66:5c:8b:4d:50:7a:c6:b7:
         7e:16:24:3a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAROwhjl6wwttrSikgUME3JxHaVIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDYyMTMzWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZWNiNDU5YmZjZjBkMzIwNWRmODE5YWE0NjAxMzQyZWQ2
ZmZkZWEyZjQwNDBlODMxYjgwYjdjZDI1YTg5OTFiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCewHa4zZQF5B3WM+3OKXgFoC3RyChaer5Pg+jtmmr4dmqg
vZ5gZSfJNr+EELCzDPnDLl7eCSLolPF+hK3S5j84zPViNIRa/8mF4WvvoXm7WhoT
FlIa3YFe79+AWm5hJN9pmoilKGO8siSloihd7zsU/RI7mj2K5Ql4533CpWeSrEPr
yzy2cMVHVD7Fz+Tr/rJee78lT6B6pSX3Pa3ayvIXVmKCC7BcsTnofKIljAb8Fux7
PbKP9r9b1RvOnm8ckY1L2VQEo+NTxNFg5vV5rl/i1HxX5EQ+TMYD8flTJKoljp6I
bKs9o1FclNCk2c4/NzARd+NgHmPvNk/Eeo/zy40pAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU6dYfye6RRe0BzwvVFcWNzxbdfOYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA5ZmJjODExLWI2N2ItNDI0Yy05MTAzLWExYzJjYmVjMjUyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAPYAwDQYJKoZIhvcNAQELBQADggEBAC/n0GfSlG6W2klLePPIXKUe
Eckm0lLVn0Ih7/7msHtjuvJj02uV2R69h0ms4fDr57nzGDv8SrcoVtdf6CD9jMp/
GZ3GdKFIjoPtuq4gZC3ALLSAHlq6WCwz6GQ2MdAxtEsE6GFPNnbqgmxa97AoIucz
ADtaJUEiVRzd/YqOI4ergdqwU7++73uXkLnmjN0l1MpBjGfuvyH7huCPtLJwBHCf
z3Pbz5NYZpZgVUYxH6uXlQU1vu1bEvKhi3alx1Xckh33RbZlfwyf6iYT5MWzvW/h
eQt+hDkGdZ+wlTLhpPtHD3y3GlaKSOxnN01+32cYYrRNqtlmXItNUHrGt34WJDo=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:52:16 2025 by rpki-client