This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/115d173d-d37e-4c15-aed3-46f86f5ce631.roa
File:                     115d173d-d37e-4c15-aed3-46f86f5ce631.roa (raw, json)
Hash identifier:          Ularg4bc4VOeoeYr8PrQ7IfcU4Pep4/A8pNYbRJXU1g=
Subject key identifier:   CB:13:1D:C6:C9:03:12:99:D1:E8:64:96:51:70:15:34:D7:7A:05:35
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       8E474C4B421ED86D1976C0C1E8DAE92C627D06
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/115d173d-d37e-4c15-aed3-46f86f5ce631.roa
Signing time:             Tue 25 Nov 2025 10:11:58 +0000
ROA not before:           Tue 25 Nov 2025 10:11:58 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e3e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8e:47:4c:4b:42:1e:d8:6d:19:76:c0:c1:e8:da:e9:2c:62:7d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 10:11:58 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=863771a90162f4a5676499a4aaf49be797e04b1e2ea3e31e25810269df0fbac6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:9d:75:02:6e:f3:0e:00:63:f8:53:f4:d5:
                    7c:e9:72:46:04:b1:d0:d1:b9:08:f2:72:4f:96:5a:
                    5a:2c:b5:bb:cc:bd:a1:0c:df:d5:95:44:33:6c:90:
                    d7:c0:1c:40:f4:12:88:56:83:05:0b:82:ac:05:38:
                    35:56:4b:50:cc:72:e7:47:e0:f1:c3:84:a5:4e:29:
                    9b:3a:fd:63:b6:92:f8:1a:c3:7f:a2:d3:10:3a:de:
                    7d:38:75:40:f3:a6:4a:7b:2f:cc:ed:3d:c1:97:fe:
                    b3:0b:16:b7:3b:a1:88:45:70:c1:6f:43:aa:20:84:
                    8f:ec:31:5e:40:92:d7:00:2b:ef:98:85:44:22:85:
                    4c:af:7f:b0:09:d5:2b:6f:dc:cd:b2:92:f7:6c:c8:
                    ed:b1:f3:af:63:4a:5b:67:27:a1:5c:ca:04:fa:56:
                    4b:8b:df:b3:69:d8:4c:03:69:d1:20:44:9c:fb:e9:
                    a9:f1:31:c9:28:8f:11:59:f0:e8:a2:43:c8:10:a8:
                    00:84:c4:cd:f7:26:a2:f3:5e:e6:39:88:f0:09:04:
                    1f:8d:73:36:13:32:81:f7:70:b0:cc:c9:fb:15:5d:
                    42:9b:93:92:d0:a4:1f:e7:92:e4:d7:35:ff:35:23:
                    40:4b:9b:5e:61:78:80:f2:0f:00:83:e7:cf:19:74:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:13:1D:C6:C9:03:12:99:D1:E8:64:96:51:70:15:34:D7:7A:05:35
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/115d173d-d37e-4c15-aed3-46f86f5ce631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e3e::/47

    Signature Algorithm: sha256WithRSAEncryption
         19:95:82:00:18:7f:ab:d0:f8:f6:3b:75:c8:01:f1:5a:a8:3c:
         ca:f9:a1:1c:a4:0b:6b:81:76:9e:f6:fe:87:a1:74:24:4d:71:
         69:5f:d9:7b:0d:20:33:49:79:1b:e7:1a:7b:a8:5f:f4:4a:4c:
         f6:31:d4:db:e3:de:0d:2c:0a:a2:6e:42:a2:fb:c0:91:aa:20:
         2c:26:79:36:29:3c:ad:ed:b4:05:76:c9:cb:07:29:a8:e0:3d:
         37:6a:9d:d1:ce:5f:43:76:26:5f:ed:88:b9:2d:4a:71:4e:7e:
         6b:d4:14:e0:04:2a:3b:8d:9b:59:da:60:e2:95:7a:59:67:7c:
         9e:7b:6b:a1:01:d2:47:d9:51:c6:9c:82:49:a8:91:05:8a:30:
         77:9a:d4:fe:dd:12:e7:5d:57:5a:e3:c7:10:07:a8:9a:51:a9:
         fd:bc:62:64:29:97:8f:c9:fd:f6:37:a2:19:11:d4:fc:0c:09:
         d5:aa:65:fb:5c:83:1c:7b:d4:f6:c6:d6:4d:a1:ff:49:5e:c8:
         8d:d0:e7:51:27:4a:d8:d1:04:9a:58:53:9f:80:17:f5:2e:fd:
         a9:3d:33:2b:c3:8c:f8:53:df:59:de:34:96:4f:65:99:a9:d9:
         50:02:72:6b:f2:32:20:01:68:64:b9:b7:d7:32:c7:4e:c4:e2:
         19:57:0d:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:33 2025 by rpki-client