This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1330cb4c-56e3-4646-be21-9ab48c311102.roa
File:                     1330cb4c-56e3-4646-be21-9ab48c311102.roa (raw, json)
Hash identifier:          l1LJDebSdimzjPEaxW+61yByoUAZIaggU+ntDr8g3g4=
Subject key identifier:   4F:4E:FB:B9:47:CE:C5:9E:D3:D8:3E:66:3E:5B:CD:E4:16:66:2F:6D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55B5DCEED154F7D6CDF863FAD2ECA06B1EC1B957
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1330cb4c-56e3-4646-be21-9ab48c311102.roa
Signing time:             Tue 25 Nov 2025 06:11:05 +0000
ROA not before:           Tue 25 Nov 2025 06:11:05 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b5:dc:ee:d1:54:f7:d6:cd:f8:63:fa:d2:ec:a0:6b:1e:c1:b9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:11:05 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=d1dd9ffc8465af60d7f1e5aa09c49261511a312ecd19c1d086afe05ba097e0bc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:d8:81:19:4a:2a:6f:ef:a4:b4:2a:c3:97:
                    3e:f0:cc:dc:f9:d4:3c:3c:ae:10:0b:54:95:25:75:
                    31:e6:31:af:6d:82:3d:32:d4:c9:39:e6:b6:71:b9:
                    c1:c6:19:d0:b1:82:06:95:c7:af:26:c0:e6:86:72:
                    66:b5:e6:67:00:71:fc:32:4c:99:3d:9a:36:12:2b:
                    0d:61:62:63:ae:23:71:70:f4:77:3c:5e:47:bb:84:
                    94:91:8e:f0:53:28:e6:3b:fd:b7:e2:d7:86:ec:4d:
                    dd:89:ac:76:65:95:7e:e4:37:6d:63:0d:73:7e:d3:
                    96:f1:50:c3:84:27:c2:7f:29:37:30:fe:d4:9a:a3:
                    6b:32:aa:00:27:25:e2:89:fd:c3:d8:12:ca:e1:0d:
                    29:7c:45:19:bf:6a:65:b1:d6:b6:e8:dc:db:51:41:
                    7e:1e:82:93:e5:18:1c:12:eb:b5:27:fe:b9:fa:a3:
                    9a:03:3c:2c:fa:d5:43:5f:9a:09:3e:97:3c:85:3e:
                    6b:e0:eb:a3:e3:05:ed:39:7c:84:f1:93:ca:a2:87:
                    d5:c5:a4:00:2e:e2:d0:33:d0:80:e3:5c:57:ad:09:
                    92:b0:ad:45:70:32:1c:98:1c:39:fe:c8:b3:27:8c:
                    56:c0:73:74:37:89:a2:07:29:bb:fc:b6:d3:cc:d3:
                    ed:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4E:FB:B9:47:CE:C5:9E:D3:D8:3E:66:3E:5B:CD:E4:16:66:2F:6D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1330cb4c-56e3-4646-be21-9ab48c311102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:7d:02:82:29:5d:15:37:22:fd:09:1c:ef:a2:b5:59:8d:
         86:f8:3e:8e:56:95:15:1b:12:98:e2:c5:c5:16:f8:29:74:27:
         81:1f:1e:98:5f:3e:fb:f4:c2:e3:6e:a4:a1:c9:91:cd:80:7e:
         30:7e:32:75:24:90:85:47:39:8b:d4:cf:63:1a:17:c3:32:d9:
         58:4e:f3:49:3e:71:3e:e1:08:42:81:d9:17:14:ca:2d:d1:56:
         36:39:56:15:ee:b6:66:78:80:b9:97:ae:c2:86:9c:15:89:2c:
         7d:2d:cd:a6:74:85:a6:a2:9c:48:be:71:75:ee:12:39:7f:01:
         cf:25:64:dd:39:86:1d:9f:73:3e:fd:16:0b:17:8c:12:c9:d2:
         6c:cd:93:8f:b6:f9:ea:5e:ad:2a:03:f9:b9:f2:3b:5e:63:94:
         1c:43:48:51:0e:2a:d4:77:41:f3:ed:58:d7:b4:6a:93:4e:bc:
         f9:ed:be:89:7b:e8:6b:47:0c:96:85:74:03:95:5c:a6:07:34:
         74:fb:2b:67:1e:89:e4:20:b9:81:7a:f7:9b:e1:db:b1:9b:ab:
         a3:80:a1:19:bc:4d:70:e9:de:1a:6b:f3:2d:da:05:d6:52:52:
         6e:fe:cb:18:2d:26:36:1b:ea:9c:e0:b0:5a:56:35:7e:27:31:
         d1:83:06:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:19 2025 by rpki-client