This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1159b99d-c0f1-4e4c-ad25-b03c8e30bd86.roa
File:                     1159b99d-c0f1-4e4c-ad25-b03c8e30bd86.roa (raw, json)
Hash identifier:          Ddd4H+I+UXCPJYiYWuiJfb5kNI1x5U/biUMZmclmIq0=
Subject key identifier:   95:3B:A9:34:11:C8:2F:D6:FE:45:D5:EA:61:39:4D:87:82:90:23:C7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5D1FD2FD0203A083AB8ADDF76A5BAFB037BFE3C4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1159b99d-c0f1-4e4c-ad25-b03c8e30bd86.roa
Signing time:             Mon 24 Nov 2025 00:11:14 +0000
ROA not before:           Mon 24 Nov 2025 00:11:14 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c84::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1f:d2:fd:02:03:a0:83:ab:8a:dd:f7:6a:5b:af:b0:37:bf:e3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:11:14 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=6889117e57b354617a61bbb58a2c09c05aa001936566519e3e3b50823118dd7c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:88:ed:e9:64:9b:ae:e0:0a:ce:43:6f:74:
                    20:e7:cf:28:e5:44:8e:b5:64:7d:c2:2e:99:3e:fe:
                    2a:4b:21:85:e5:eb:60:5f:ca:cc:c6:63:2f:44:b7:
                    86:51:3a:a9:2d:28:13:e2:a1:f8:5a:b9:33:c8:1a:
                    b5:0e:1b:3f:00:e0:bc:06:69:d9:78:18:54:fc:e6:
                    9f:8b:e7:5a:f9:77:ac:5d:f5:5d:8c:39:01:b5:9e:
                    d1:87:93:dd:12:99:b9:ac:72:10:65:56:cd:a3:97:
                    30:de:34:2d:a2:7a:b6:44:14:0f:c8:0b:76:ec:cf:
                    85:9f:8b:3b:35:59:75:08:a0:53:f6:4c:45:74:b3:
                    dd:b3:33:6b:4b:d6:48:28:bc:67:63:64:af:8d:ac:
                    12:ed:99:a8:f3:a9:fd:5b:b0:ec:cd:72:bd:75:62:
                    2f:f6:a5:74:55:54:63:e6:1c:96:84:bd:c6:8c:de:
                    ba:97:db:2e:9e:cd:ae:da:90:07:f4:0b:93:1b:7a:
                    d5:b0:82:05:e0:5c:cc:f4:75:c9:3d:b2:54:52:d4:
                    50:85:7a:51:39:1f:fd:f1:dd:26:a1:78:ff:14:2e:
                    a0:20:2f:ce:0b:1b:b9:a8:f9:6d:91:a6:13:3e:b0:
                    8d:ec:42:67:90:71:33:bf:a1:80:34:58:81:0c:bd:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3B:A9:34:11:C8:2F:D6:FE:45:D5:EA:61:39:4D:87:82:90:23:C7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1159b99d-c0f1-4e4c-ad25-b03c8e30bd86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c84::/47

    Signature Algorithm: sha256WithRSAEncryption
         25:93:83:f9:1b:dc:8c:70:1b:64:e4:e1:43:55:84:47:1b:ce:
         21:67:e6:a7:fc:ee:db:19:4c:e8:47:a7:ef:07:aa:0c:e2:a7:
         7e:42:7c:84:b0:ae:72:08:e9:a6:e4:f8:9f:92:d7:ee:60:4b:
         2d:fb:c2:ea:a2:b1:81:6b:fd:dd:ad:a7:ba:be:23:48:8f:66:
         ba:59:96:17:4c:37:21:08:1e:44:78:e7:2b:94:2a:38:00:77:
         36:83:4d:bb:6d:23:2b:70:37:cc:4d:ce:b8:13:69:4f:86:13:
         76:1c:99:f0:f2:6e:b9:0c:a1:37:dc:0b:59:e0:f8:c9:f7:74:
         59:32:a4:0d:0e:81:da:7d:01:ec:40:2a:ab:0a:cc:45:30:3e:
         6a:60:81:76:ef:b6:33:41:16:00:e4:50:1e:26:74:12:9f:1e:
         a8:47:f8:18:c6:fb:90:cb:da:99:ef:9d:6c:05:71:cd:7a:79:
         98:d8:a7:cf:bf:e9:1e:7f:da:6c:88:60:0b:1d:62:fb:52:56:
         29:ed:f2:21:96:96:ff:f3:a3:9f:21:69:b6:48:e4:b7:78:1b:
         95:bf:05:3e:88:bb:9e:71:46:15:38:56:ec:53:97:2c:96:f3:
         98:f6:14:18:be:8c:19:70:c6:06:99:a7:23:ab:f7:a4:d1:ba:
         ed:11:f4:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:27 2025 by rpki-client