This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fa93952-f616-4e4c-aecb-a117964371f1.roa
File:                     0fa93952-f616-4e4c-aecb-a117964371f1.roa (raw, json)
Hash identifier:          qCwYSPyWIOwE2l+pVFpUEhxSER1EFBH88QcMLMT9wEk=
Subject key identifier:   BA:B3:AC:57:48:5B:97:D8:BE:13:63:04:F3:B4:5F:10:3E:62:05:D1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       56B60146C525BEC22677570D36BC455A30E13E0C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fa93952-f616-4e4c-aecb-a117964371f1.roa
Signing time:             Tue 25 Nov 2025 17:11:26 +0000
ROA not before:           Tue 25 Nov 2025 17:11:26 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:15a8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b6:01:46:c5:25:be:c2:26:77:57:0d:36:bc:45:5a:30:e1:3e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 17:11:26 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=11209c65f8a175afa7ea0222c31984ffb0122cafedb09b9363951c2eee6647dc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:60:63:52:d1:5e:44:62:f0:06:a1:3c:4d:
                    67:11:db:b1:c3:58:dc:62:00:d8:5a:d6:d7:dd:b8:
                    c1:0d:05:15:7b:a3:4c:ca:c8:dd:19:1a:56:41:82:
                    2e:00:52:7e:e4:f5:02:dc:ab:5d:a6:e8:ab:cd:6a:
                    33:af:71:89:82:1f:2c:a1:1b:32:1c:98:bf:85:21:
                    91:91:50:71:33:8f:94:42:b6:b8:28:95:b5:26:b1:
                    dd:bc:19:b8:c6:3e:42:78:c7:26:c3:71:f3:a9:b8:
                    f3:5e:0e:f3:2a:91:ea:6b:78:34:9e:01:79:57:99:
                    ac:e8:0d:cd:bf:9f:cd:b2:a7:08:24:d9:82:5f:b6:
                    eb:2b:5f:55:f8:5f:48:95:5a:4b:d9:83:18:03:78:
                    e4:1d:de:dd:12:45:90:d3:7a:bc:43:6b:5e:89:02:
                    cd:89:37:f5:93:b2:af:5c:8d:5a:07:8a:5e:50:9b:
                    5b:11:88:9c:77:9c:0d:02:6b:c3:03:7e:75:59:d3:
                    21:44:44:94:41:df:45:e1:57:47:7e:6b:08:b9:da:
                    f9:ab:07:77:5e:21:4e:d7:43:65:fd:fb:5f:ff:2c:
                    3d:86:01:10:d6:db:38:99:99:02:01:b1:0d:42:27:
                    4a:d5:ef:66:20:69:1f:a9:43:b5:7c:5d:ec:3d:8a:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B3:AC:57:48:5B:97:D8:BE:13:63:04:F3:B4:5F:10:3E:62:05:D1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fa93952-f616-4e4c-aecb-a117964371f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:15a8::/46

    Signature Algorithm: sha256WithRSAEncryption
         0a:f7:60:75:ec:0e:46:67:ab:f4:7c:66:47:fc:60:94:40:a3:
         03:c1:62:95:0f:e8:33:a7:82:07:52:b1:b9:8d:5b:da:0e:fe:
         88:81:22:a9:e9:e0:fd:6c:4e:a6:64:88:b0:9e:83:52:5f:ba:
         44:df:80:26:45:af:b0:72:9f:42:03:a7:6d:93:fc:c3:7b:5b:
         7d:d9:c8:c5:a6:06:c1:13:98:4d:f4:f9:c1:83:65:ec:05:05:
         e0:4c:f0:f0:f4:ea:e5:0b:ab:7b:b8:54:9d:33:65:c8:46:5e:
         ab:67:aa:22:40:4d:3f:62:74:10:e5:e4:e9:b9:5e:7b:b8:ef:
         8d:79:b3:c5:2f:89:b2:19:87:1f:19:78:2a:29:08:d1:2f:77:
         4a:b2:e5:92:02:89:1e:d5:d7:03:c9:91:c8:a8:69:03:45:3d:
         a9:66:13:91:cd:8c:11:f9:b8:48:e3:ae:0f:58:12:cf:42:72:
         c6:20:22:1f:5a:fe:39:15:a8:03:88:89:db:a7:9a:ee:74:ae:
         0f:0c:79:e4:f7:74:29:06:85:08:13:04:40:b6:65:99:e2:63:
         6a:50:fc:be:d2:fc:7a:b0:59:b0:f5:31:f1:5c:fd:f5:ed:78:
         38:9c:92:42:7c:67:66:8b:d1:7e:9c:0d:4d:86:ab:b7:ca:10:
         49:4e:93:08
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVrYBRsUlvsImd1cNNrxFWjDhPgwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTcxMTI2WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMTIwOWM2NWY4YTE3NWFmYTdlYTAyMjJjMzE5ODRmZmIw
MTIyY2FmZWRiMDliOTM2Mzk1MWMyZWVlNjY0N2RjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfLGBjUtFeRGLwBqE8TWcR27HDWNxiANha1tfduMENBRV7
o0zKyN0ZGlZBgi4AUn7k9QLcq12m6KvNajOvcYmCHyyhGzIcmL+FIZGRUHEzj5RC
trgolbUmsd28GbjGPkJ4xybDcfOpuPNeDvMqkepreDSeAXlXmazoDc2/n82ypwgk
2YJftusrX1X4X0iVWkvZgxgDeOQd3t0SRZDTerxDa16JAs2JN/WTsq9cjVoHil5Q
m1sRiJx3nA0Ca8MDfnVZ0yFERJRB30XhV0d+awi52vmrB3deIU7XQ2X9+1//LD2G
ARDW2ziZmQIBsQ1CJ0rV72YgaR+pQ7V8Xew9igHBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUurOsV0hbl9i+E2ME87RfED5iBdEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzBmYTkzOTUyLWY2MTYtNGU0Yy1hZWNiLWExMTc5NjQzNzFmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAFagwDQYJKoZIhvcNAQELBQADggEBAAr3YHXsDkZnq/R8Zkf8YJRA
owPBYpUP6DOnggdSsbmNW9oO/oiBIqnp4P1sTqZkiLCeg1JfukTfgCZFr7Byn0ID
p22T/MN7W33ZyMWmBsETmE30+cGDZewFBeBM8PD06uULq3u4VJ0zZchGXqtnqiJA
TT9idBDl5Om5Xnu47415s8UvibIZhx8ZeCopCNEvd0qy5ZICiR7V1wPJkcioaQNF
PalmE5HNjBH5uEjjrg9YEs9CcsYgIh9a/jkVqAOIidunmu50rg8MeeT3dCkGhQgT
BEC2ZZniY2pQ/L7S/HqwWbD1MfFc/fXteDickkJ8Z2aL0X6cDU2Gq7fKEElOkwg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:16:34 2025 by rpki-client