This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a7120da-b813-45da-bb41-0566b93db409.roa
File:                     0a7120da-b813-45da-bb41-0566b93db409.roa (raw, json)
Hash identifier:          Ph7cbOgpMERkjUOtbJwUiqmb7DXIrqo8btr4b4VNxpY=
Subject key identifier:   CF:88:14:D5:EA:31:16:00:46:3E:02:37:DA:6D:0E:F8:60:B2:D5:29
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       619B5699790D654CD4282FC515B6AD95B935C8CA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a7120da-b813-45da-bb41-0566b93db409.roa
Signing time:             Tue 25 Nov 2025 06:30:15 +0000
ROA not before:           Tue 25 Nov 2025 06:30:15 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1960::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9b:56:99:79:0d:65:4c:d4:28:2f:c5:15:b6:ad:95:b9:35:c8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:30:15 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c75cc50cd2d97282c5cac2aadd5e3a3a5d1fdf24e8c4fcd1886c533bc07dac56, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5c:cc:97:a9:b5:4a:b1:66:46:47:2b:d0:ec:
                    62:02:12:9d:ee:16:0f:2e:c2:d4:3f:87:42:d1:af:
                    46:25:34:cb:26:85:44:7b:1a:02:b7:78:54:b2:39:
                    f4:66:c4:24:aa:40:2f:7e:37:98:74:82:d5:8c:d7:
                    e4:8c:6f:d3:5a:dc:be:da:9f:63:09:01:c7:33:cc:
                    cf:70:24:9a:83:08:5d:83:0c:70:b4:58:ad:a6:1e:
                    6b:45:14:ad:13:4f:2c:40:ce:5d:d5:d3:01:f8:49:
                    c6:0a:4c:5f:66:3c:66:5b:c7:4c:da:92:a4:8e:c6:
                    8e:25:9a:db:c9:53:f3:7b:26:00:c9:12:3c:0d:c3:
                    03:85:61:18:40:5a:81:de:50:b3:db:08:d8:72:4d:
                    4b:74:7f:0a:c1:3d:60:e0:34:86:9e:e4:5c:3a:78:
                    ce:bb:6a:c4:f8:5a:84:b9:78:b0:09:f0:30:10:69:
                    1b:ac:9a:bd:2e:3f:3b:42:5c:30:ff:ab:4c:32:c0:
                    8c:43:ac:35:44:30:85:b3:d5:53:a1:b7:5c:9e:1f:
                    8b:71:6a:d5:e5:fb:57:31:08:79:51:be:4f:03:30:
                    19:68:73:5b:ef:3a:eb:9c:82:2a:ce:a5:46:b6:46:
                    20:94:ae:b6:66:65:27:6e:1e:18:36:18:a8:dd:e7:
                    1f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:88:14:D5:EA:31:16:00:46:3E:02:37:DA:6D:0E:F8:60:B2:D5:29
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a7120da-b813-45da-bb41-0566b93db409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1960::/45

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:a4:bd:d1:59:98:14:60:19:f2:21:31:2f:6a:c1:f9:c4:
         45:a0:e5:ef:ed:83:70:64:1f:3d:0d:f2:e5:d7:6d:f8:e3:fa:
         7d:74:3c:8c:8e:69:34:3b:2f:71:50:a7:6f:76:7d:50:e9:26:
         94:52:95:aa:87:1b:a8:0b:4a:01:7b:31:1e:fa:8f:2f:10:ac:
         43:66:07:0f:af:21:1a:ae:15:2a:ed:65:75:38:db:45:06:e7:
         b4:13:94:79:c9:09:37:41:07:4a:42:a4:70:0a:cb:cf:b7:05:
         de:20:eb:2f:f6:4c:42:c9:10:1d:5b:70:55:58:26:ff:88:17:
         79:41:05:28:3b:b8:fd:11:9d:da:22:0b:68:24:ae:e5:c2:fe:
         4f:54:48:d3:81:a1:33:b5:ce:fa:5c:67:e7:5f:fe:7d:f8:6c:
         54:58:9c:29:51:56:4d:bf:99:53:c4:3b:db:56:ea:36:86:ad:
         91:9c:95:ba:a8:77:66:93:f6:d8:7d:94:a1:c8:83:20:3b:6e:
         53:8b:fb:c9:6a:9d:16:7f:ef:3a:24:ca:79:b8:c8:0e:c6:6c:
         74:10:61:5a:c3:32:5f:44:a7:80:3c:15:7b:36:6f:3d:05:86:
         e6:b9:37:76:ac:08:82:7c:05:30:2a:21:b6:31:45:98:c6:a4:
         0d:12:9c:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:46 2025 by rpki-client