This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1246369f-7e24-4a6e-95d1-2cfc646e520c.roa
File:                     1246369f-7e24-4a6e-95d1-2cfc646e520c.roa (raw, json)
Hash identifier:          YOZ1YZsy7mMf3dn8RnijdmFzxN/Gy1lhCRwcIr8c874=
Subject key identifier:   9B:82:A2:6A:36:59:8E:43:F7:18:48:0A:53:3A:E2:5D:0A:37:20:B2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7B3C400E8FD5CF031E0F166042213707368024BB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1246369f-7e24-4a6e-95d1-2cfc646e520c.roa
Signing time:             Mon 24 Nov 2025 04:41:17 +0000
ROA not before:           Mon 24 Nov 2025 04:41:17 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2050::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3c:40:0e:8f:d5:cf:03:1e:0f:16:60:42:21:37:07:36:80:24:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:41:17 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=912738f0ae11380322fb4fcf9793e675b4b3d735d9d74a0c5061e19f023a7011, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:1d:8b:e4:8e:15:ec:0f:d8:74:f5:d7:8f:
                    16:1c:df:d6:d8:af:43:00:3b:0c:bd:7f:56:46:4e:
                    bd:5c:42:1f:83:aa:6a:bd:89:e3:6f:fc:a5:78:25:
                    3c:d8:bb:35:05:f4:8f:6a:53:e3:44:fb:d8:ae:fa:
                    55:11:b2:a0:e0:51:92:79:e7:e2:91:13:76:22:dd:
                    03:08:dc:63:f4:d3:db:29:c7:99:89:1d:71:0c:e5:
                    32:2f:57:83:d0:e7:66:bf:1f:93:39:c9:3d:74:46:
                    ce:06:3b:da:c9:a4:fa:53:12:b5:21:5a:83:12:f4:
                    43:73:3c:f5:32:6f:0d:75:e4:0b:6c:51:49:ca:9d:
                    ee:29:9d:6f:48:41:71:9a:ee:dc:eb:85:41:c0:8b:
                    54:f0:d6:3c:d8:d6:56:15:6a:50:d5:e8:4a:9b:39:
                    f6:29:6e:a6:30:37:99:bc:30:8b:48:b6:9c:e3:c9:
                    97:76:66:0c:11:4d:40:32:35:a9:60:60:5e:bf:8e:
                    bd:bb:24:d5:d9:9a:4c:bb:1f:3d:c3:08:a0:94:f6:
                    9c:47:4a:cf:fb:11:0a:58:55:9a:be:a2:00:b0:28:
                    d4:9a:cd:1f:34:32:16:19:0e:dc:c0:91:ac:1e:5e:
                    da:77:93:77:f6:6e:55:79:85:eb:b5:13:b8:8a:54:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:82:A2:6A:36:59:8E:43:F7:18:48:0A:53:3A:E2:5D:0A:37:20:B2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1246369f-7e24-4a6e-95d1-2cfc646e520c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2050::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:c1:a9:19:42:72:e1:fb:8e:ec:8e:ad:27:e8:b1:c8:53:6b:
         36:5f:21:f0:94:9f:60:1b:41:db:33:37:fd:af:a7:9d:a8:41:
         96:dd:4a:78:0f:4c:4e:c4:c3:1d:2f:b1:39:7b:d4:26:7c:31:
         ce:ab:62:2d:d7:f6:b0:f7:b5:fd:c5:c3:a1:2c:50:a9:ca:83:
         3a:b4:24:fa:7a:43:9d:99:20:6b:52:59:5f:1b:22:80:eb:aa:
         24:18:ba:67:5c:a8:7b:a1:2c:b9:73:94:5f:82:c6:96:8e:b1:
         75:69:e8:8e:e7:1b:98:69:69:8e:34:f2:1b:c5:68:00:3a:54:
         b7:7d:68:1b:05:52:83:ae:bf:57:11:58:4f:86:f8:4f:64:42:
         0b:8c:a7:26:6c:d3:23:3e:d4:e2:a0:62:6d:00:6b:e4:3e:1e:
         d5:ba:f9:91:9a:87:1a:05:16:30:9a:3b:d0:86:00:fe:3f:a1:
         d6:43:a9:c8:18:5f:94:8c:68:28:0c:d7:be:1c:83:0c:7d:91:
         e2:87:69:4f:ef:a7:fc:c3:76:f9:c1:7e:87:86:6b:cf:63:26:
         6a:95:08:ca:d7:8e:fe:6a:66:d7:bd:dd:c5:0e:ba:ca:48:26:
         66:50:ef:9f:a0:59:c8:df:2b:f0:bf:8e:dd:8c:ac:47:44:fc:
         ce:1e:d4:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:52:12 2025 by rpki-client