This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ef7fb3d-304c-4e63-8885-7d299c513996.roa
File:                     0ef7fb3d-304c-4e63-8885-7d299c513996.roa (raw, json)
Hash identifier:          f61qTxvz11rS0oyO+72Zd8tsvjep0frFdDy4QoOTFU4=
Subject key identifier:   59:CE:DC:B4:5B:E6:23:12:26:87:BF:90:A5:F1:57:57:9B:68:34:C6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       18454598AB7E70E923B09AF208F5FAF208157E7F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ef7fb3d-304c-4e63-8885-7d299c513996.roa
Signing time:             Tue 25 Nov 2025 14:20:07 +0000
ROA not before:           Tue 25 Nov 2025 14:20:07 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1664::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:45:45:98:ab:7e:70:e9:23:b0:9a:f2:08:f5:fa:f2:08:15:7e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:20:07 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=5f86cf9de33cc48d82ffe0e3e00cd2285815ec14a70e45684ea8be190c170968, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:a8:fe:8e:38:ac:ef:4b:00:01:85:9e:8f:
                    76:96:02:61:02:cd:43:84:a1:c8:b3:34:cf:aa:9c:
                    1b:2d:11:8e:e2:04:39:6c:2a:36:de:a9:23:ca:7c:
                    b7:70:94:c6:6f:9e:c8:7a:21:98:18:67:41:c8:86:
                    3c:e3:fe:3a:34:ef:a6:8c:45:9f:a6:40:97:45:26:
                    19:f9:a7:28:af:10:cf:92:38:e0:9e:39:61:7b:6b:
                    b4:8f:b4:be:8a:0f:d4:6e:fd:51:c4:82:41:2a:85:
                    ae:ce:91:79:8b:ba:c3:48:c6:54:53:a1:68:6f:aa:
                    ab:b1:62:60:63:38:56:0d:6c:7b:ed:45:60:8d:77:
                    fb:f2:98:d6:04:6b:1b:05:a5:b9:e7:34:75:a6:a6:
                    09:15:06:42:b9:2f:f2:d7:cc:e3:8a:97:eb:3f:21:
                    43:7c:b1:13:64:19:70:fc:b2:e1:84:01:71:c0:b5:
                    25:70:d5:b7:15:4b:e4:29:c4:ec:18:06:89:a5:78:
                    5d:dc:70:27:59:0f:f8:e1:a1:db:55:e6:e9:1b:7c:
                    2c:0d:75:55:df:35:96:a8:5d:78:c0:d1:6d:76:7e:
                    ba:02:5d:3f:7a:ab:5b:e0:f5:7f:f2:b7:76:10:d5:
                    ea:f4:ad:e2:80:bd:04:bb:16:b0:d6:73:0a:e7:4a:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:DC:B4:5B:E6:23:12:26:87:BF:90:A5:F1:57:57:9B:68:34:C6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ef7fb3d-304c-4e63-8885-7d299c513996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1664::/46

    Signature Algorithm: sha256WithRSAEncryption
         25:b2:97:5e:5b:20:3a:3e:af:41:fa:10:0f:f5:af:5d:1a:0f:
         23:7f:8d:40:c6:28:0c:cb:9d:6b:67:59:43:b5:9b:39:cc:ab:
         2d:f4:17:77:6f:a3:e7:af:e6:82:9a:5c:8c:e0:df:cd:a8:1f:
         62:88:43:59:e9:48:bb:85:d3:84:7a:b7:6d:21:e9:6e:a8:0e:
         4d:ba:53:69:22:7d:72:9a:dd:9a:e5:42:15:90:76:30:10:78:
         af:71:3d:b1:69:3d:85:87:95:63:ed:ab:b3:2a:c1:3a:c7:69:
         a6:cf:f2:16:d6:20:b3:27:cb:e6:dc:8b:20:7f:c4:90:85:72:
         30:57:61:c5:69:16:95:13:db:e7:98:64:17:68:b5:28:ba:d8:
         c4:8e:ad:49:cf:65:b4:5b:8a:9d:ec:7c:85:fe:0d:84:74:ae:
         c0:65:22:61:f2:32:51:a0:df:a1:d4:7d:45:21:95:44:96:1f:
         90:67:30:2f:87:a9:30:a6:71:f0:d0:8d:ad:b2:6b:2c:18:ee:
         84:6f:3e:de:87:6f:74:6c:b4:ae:b2:5d:dd:ad:b1:23:68:b0:
         70:7d:54:fc:d5:d7:6a:d3:1e:e0:fc:d2:e2:07:3c:eb:62:cd:
         9f:12:de:57:03:28:88:03:51:43:84:42:af:68:61:6b:99:60:
         bb:8b:d4:9e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGEVFmKt+cOkjsJryCPX68ggVfn8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTQyMDA3WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1Zjg2Y2Y5ZGUzM2NjNDhkODJmZmUwZTNlMDBjZDIyODU4
MTVlYzE0YTcwZTQ1Njg0ZWE4YmUxOTBjMTcwOTY4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCr6Kj+jjis70sAAYWej3aWAmECzUOEocizNM+qnBstEY7i
BDlsKjbeqSPKfLdwlMZvnsh6IZgYZ0HIhjzj/jo076aMRZ+mQJdFJhn5pyivEM+S
OOCeOWF7a7SPtL6KD9Ru/VHEgkEqha7OkXmLusNIxlRToWhvqquxYmBjOFYNbHvt
RWCNd/vymNYEaxsFpbnnNHWmpgkVBkK5L/LXzOOKl+s/IUN8sRNkGXD8suGEAXHA
tSVw1bcVS+QpxOwYBomleF3ccCdZD/jhodtV5ukbfCwNdVXfNZaoXXjA0W12froC
XT96q1vg9X/yt3YQ1er0reKAvQS7FrDWcwrnSt2lAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUWc7ctFvmIxImh7+QpfFXV5toNMYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzBlZjdmYjNkLTMwNGMtNGU2My04ODg1LTdkMjk5YzUxMzk5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAFmQwDQYJKoZIhvcNAQELBQADggEBACWyl15bIDo+r0H6EA/1r10a
DyN/jUDGKAzLnWtnWUO1mznMqy30F3dvo+ev5oKaXIzg382oH2KIQ1npSLuF04R6
t20h6W6oDk26U2kifXKa3ZrlQhWQdjAQeK9xPbFpPYWHlWPtq7MqwTrHaabP8hbW
ILMny+bciyB/xJCFcjBXYcVpFpUT2+eYZBdotSi62MSOrUnPZbRbip3sfIX+DYR0
rsBlImHyMlGg36HUfUUhlUSWH5BnMC+HqTCmcfDQja2yaywY7oRvPt6Hb3RstK6y
Xd2tsSNosHB9VPzV12rTHuD80uIHPOtizZ8S3lcDKIgDUUOEQq9oYWuZYLuL1J4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:38:50 2025 by rpki-client