This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108dc8fc-95a4-4ed4-8a59-dca5d5a81dd8.roa
File:                     108dc8fc-95a4-4ed4-8a59-dca5d5a81dd8.roa (raw, json)
Hash identifier:          +0aVgelP0Q5VdMBnkFlAEE1xC6eU41p0lSUJ46soXYQ=
Subject key identifier:   28:6C:27:0F:AF:A2:85:37:AA:3B:58:72:98:E5:44:86:A0:54:B5:AF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5A29BD5A6A5535309185DE5A56D29A03E89D8270
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108dc8fc-95a4-4ed4-8a59-dca5d5a81dd8.roa
Signing time:             Tue 25 Nov 2025 01:41:24 +0000
ROA not before:           Tue 25 Nov 2025 01:41:24 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a74::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:bd:5a:6a:55:35:30:91:85:de:5a:56:d2:9a:03:e8:9d:82:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 01:41:24 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=f6aa181884d27eaa688d4f01763662a3ad7bcd51652efcf261c375047910fc31, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:f1:4f:bb:bd:ed:9b:af:f0:ae:9f:39:92:
                    97:51:53:9c:03:63:b5:40:45:ff:f8:77:8d:f7:53:
                    5b:1e:58:89:e8:b8:12:10:03:5e:d2:13:ee:47:7e:
                    c5:d1:48:47:9d:5f:4f:ff:db:5e:39:a0:8a:52:55:
                    a2:2e:a7:63:e8:f1:f2:41:94:a7:55:0f:25:e9:81:
                    4f:75:e2:66:77:89:25:1e:1f:ec:df:57:78:c2:ca:
                    12:04:83:99:40:55:72:8f:c2:e8:a3:54:ea:5e:7e:
                    5f:37:0b:cf:f9:c4:67:b7:94:4b:14:a1:64:48:7f:
                    5a:5c:e5:87:70:ee:59:b8:84:95:09:3a:fe:a9:eb:
                    dc:31:49:42:41:28:f8:52:38:2d:98:f2:59:67:cf:
                    fc:b9:09:78:90:d1:b4:ee:8a:c3:50:98:e4:c0:2d:
                    1f:91:fe:91:85:36:ad:8e:53:75:e6:51:04:db:39:
                    9f:d2:d2:29:e0:78:2e:e6:64:6b:3b:fd:d2:f6:b1:
                    12:27:56:1c:73:c4:ac:6a:eb:46:4f:04:cc:67:9c:
                    2b:d6:34:52:3b:e5:a0:3d:57:12:30:58:75:20:86:
                    ab:f4:4b:b8:94:bf:be:42:76:57:6b:98:24:2d:38:
                    08:0c:f7:fb:61:d9:70:73:a1:60:10:73:1e:6a:fa:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6C:27:0F:AF:A2:85:37:AA:3B:58:72:98:E5:44:86:A0:54:B5:AF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108dc8fc-95a4-4ed4-8a59-dca5d5a81dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a74::/47

    Signature Algorithm: sha256WithRSAEncryption
         3e:a4:32:8b:a7:7e:1d:ca:be:9f:56:ad:6f:f4:53:9c:d5:57:
         68:b1:34:e0:af:04:68:2b:54:b6:7b:9a:7e:6f:e8:85:2b:a7:
         1d:77:52:26:66:16:80:85:41:fe:24:73:52:d0:50:be:ea:ea:
         dc:42:d5:72:a3:91:8c:62:7e:9a:a1:98:a2:25:c4:f3:ba:25:
         25:8c:01:4c:6d:fb:0c:a5:2b:9f:cf:b5:2d:ab:a8:f8:05:18:
         80:ec:5a:e8:e0:4a:c2:36:39:07:5b:9f:2d:5d:89:64:8d:fd:
         40:19:37:8a:d4:f7:03:6b:39:6b:e3:96:04:34:23:2a:c1:9e:
         0c:47:a9:69:e4:23:3a:50:8d:a0:e9:35:34:94:32:0c:b9:6a:
         48:37:9a:46:40:cd:ed:b4:a7:3e:7e:58:06:af:d5:42:8f:c0:
         b3:63:60:99:92:f3:78:f0:3b:24:07:78:df:94:d5:65:59:2b:
         7a:f0:59:ef:70:44:18:ca:60:da:e8:75:85:47:91:2d:53:e0:
         f8:e3:9f:af:e2:47:7c:7c:a4:2f:b0:5f:0c:b6:4d:8b:a8:f0:
         88:36:3d:a6:ec:29:d5:d4:fd:2b:75:af:5c:29:f9:48:87:b8:
         40:b6:ce:79:76:d9:f9:4f:31:40:45:9a:65:15:2c:64:55:13:
         de:76:43:53
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWim9WmpVNTCRhd5aVtKaA+idgnAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDE0MTI0WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNmFhMTgxODg0ZDI3ZWFhNjg4ZDRmMDE3NjM2NjJhM2Fk
N2JjZDUxNjUyZWZjZjI2MWMzNzUwNDc5MTBmYzMxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMnPFPu73tm6/wrp85kpdRU5wDY7VARf/4d433U1seWIno
uBIQA17SE+5HfsXRSEedX0//2145oIpSVaIup2Po8fJBlKdVDyXpgU914mZ3iSUe
H+zfV3jCyhIEg5lAVXKPwuijVOpefl83C8/5xGe3lEsUoWRIf1pc5Ydw7lm4hJUJ
Ov6p69wxSUJBKPhSOC2Y8llnz/y5CXiQ0bTuisNQmOTALR+R/pGFNq2OU3XmUQTb
OZ/S0ingeC7mZGs7/dL2sRInVhxzxKxq60ZPBMxnnCvWNFI75aA9VxIwWHUghqv0
S7iUv75CdldrmCQtOAgM9/th2XBzoWAQcx5q+hfbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKGwnD6+ihTeqO1hymOVEhqBUta8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzEwOGRjOGZjLTk1YTQtNGVkNC04YTU5LWRjYTVkNWE4MWRkOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOnQwDQYJKoZIhvcNAQELBQADggEBAD6kMounfh3Kvp9WrW/0U5zV
V2ixNOCvBGgrVLZ7mn5v6IUrpx13UiZmFoCFQf4kc1LQUL7q6txC1XKjkYxifpqh
mKIlxPO6JSWMAUxt+wylK5/PtS2rqPgFGIDsWujgSsI2OQdbny1diWSN/UAZN4rU
9wNrOWvjlgQ0IyrBngxHqWnkIzpQjaDpNTSUMgy5akg3mkZAze20pz5+WAav1UKP
wLNjYJmS83jwOyQHeN+U1WVZK3rwWe9wRBjKYNrodYVHkS1T4Pjjn6/iR3x8pC+w
Xwy2TYuo8Ig2PabsKdXU/St1r1wp+UiHuEC2znl22flPMUBFmmUVLGRVE952Q1M=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:03 2025 by rpki-client