This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e6d30f8-5821-4614-a430-918ce4314604.roa
File:                     0e6d30f8-5821-4614-a430-918ce4314604.roa (raw, json)
Hash identifier:          eLBuDHNlVOt33kvJrvveqaVA+tLIZ1IprSbmDQYnbjU=
Subject key identifier:   60:52:69:C4:86:D8:B7:08:94:0F:83:70:5E:BF:8C:60:B1:CF:AD:E7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0F0C7FD245DF0292F3004D89BFEACCDFAEFD1B39
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e6d30f8-5821-4614-a430-918ce4314604.roa
Signing time:             Mon 24 Nov 2025 06:10:53 +0000
ROA not before:           Mon 24 Nov 2025 06:10:53 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:14e6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0c:7f:d2:45:df:02:92:f3:00:4d:89:bf:ea:cc:df:ae:fd:1b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 06:10:53 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=b40a4925d2c9b5c6acca397bcea261559d2349ea90f92244ad552de6b4cc7b84, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:c1:52:f1:63:03:45:93:ba:d7:32:c6:80:
                    b6:bc:53:3c:9f:65:17:e9:fd:ae:12:66:96:fc:ca:
                    72:04:49:ff:52:d2:52:9d:b6:a7:e1:a8:88:36:64:
                    ca:00:c5:0b:6d:55:c3:78:67:ce:cd:e0:43:0e:60:
                    08:ee:a3:e2:19:72:7c:ab:bd:99:bd:b1:c7:91:c8:
                    de:2c:eb:13:f3:8d:12:dc:7b:04:de:35:fc:ec:49:
                    ae:49:81:2c:7f:67:2d:5c:fb:40:08:8c:b7:90:6b:
                    48:7f:94:84:6c:86:77:e2:36:b9:04:42:02:2b:19:
                    6d:7b:47:f5:c7:b8:9c:7a:40:53:3a:c5:b7:c7:3e:
                    a1:c9:f0:8a:bd:15:b1:85:45:cb:07:47:96:61:45:
                    ad:df:39:cc:8f:00:d1:31:12:57:6f:3b:0e:d7:33:
                    9c:75:8b:7a:13:ac:aa:5c:90:f6:9b:c5:b8:14:fe:
                    8e:4f:c9:4a:79:8e:d3:21:61:71:62:92:c4:35:09:
                    94:bb:2e:21:dd:94:22:c7:71:d2:83:0a:6c:27:bb:
                    a2:6d:0f:2c:a2:b7:6f:64:7c:7c:e9:8d:48:78:94:
                    ff:d7:32:50:5e:23:31:0b:62:4c:d6:8a:bb:ea:9a:
                    a1:f1:5b:ae:ef:07:3e:7d:54:6d:22:dd:40:3f:5d:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:52:69:C4:86:D8:B7:08:94:0F:83:70:5E:BF:8C:60:B1:CF:AD:E7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e6d30f8-5821-4614-a430-918ce4314604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:14e6::/47

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:06:c6:ca:57:12:2c:dd:6e:38:24:4f:8f:9b:00:8d:3e:
         36:9c:d5:53:9a:5b:cb:5b:77:20:50:67:07:36:9a:6d:fb:a4:
         ad:69:d3:fd:72:46:5b:ca:53:c7:1d:57:43:2d:3f:a4:7d:d5:
         77:c7:12:e4:6a:b9:85:d8:73:a8:69:fa:54:5a:8a:23:95:23:
         69:c7:c8:81:3a:c3:b5:c7:9c:9e:c0:57:17:b8:30:a7:3b:de:
         80:8f:b4:9c:6a:ec:2b:9e:f7:6a:ec:87:b8:cb:bc:de:f7:b2:
         59:54:35:71:fa:b2:ab:c5:75:d5:b7:f7:20:9a:c0:ca:28:8b:
         f3:b3:a9:e9:b0:1c:6a:f2:3a:e1:4d:7d:80:b2:38:a4:d4:64:
         d8:2e:30:47:4d:b7:e6:66:e5:71:bc:09:37:ce:1e:c7:90:56:
         de:a5:58:1f:f2:e7:73:12:c7:ba:5b:bc:a3:2e:ad:e2:be:39:
         a3:14:d1:1c:7c:8a:54:00:aa:40:25:1d:a5:ac:4f:35:82:3b:
         83:87:89:78:af:c6:96:4d:6d:c0:00:f1:aa:82:46:fe:c9:76:
         c7:aa:4a:64:08:7c:cc:56:c9:f2:ad:af:ba:3d:f4:ef:74:66:
         b0:01:bd:dd:fe:38:65:26:81:a3:8a:4b:b3:ca:e5:5d:84:cb:
         58:71:1f:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:50:29 2025 by rpki-client