This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/13641c46-c49a-4f6e-97a5-fec1ac14eeb4.roa
File:                     13641c46-c49a-4f6e-97a5-fec1ac14eeb4.roa (raw, json)
Hash identifier:          LERGYTsiTuFQ8KNMMkl3ADDsCoIqBfVwMyMqW6cHsP4=
Subject key identifier:   0F:26:12:E9:23:09:50:40:15:B1:DA:2F:71:13:A0:73:CD:F6:2D:4E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       401B05327FFBC22A3F460801373FE821BA500152
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/13641c46-c49a-4f6e-97a5-fec1ac14eeb4.roa
Signing time:             Tue 25 Nov 2025 05:42:09 +0000
ROA not before:           Tue 25 Nov 2025 05:42:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1b:05:32:7f:fb:c2:2a:3f:46:08:01:37:3f:e8:21:ba:50:01:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:42:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=7c9d89ed6cef950b6a9e506bd5c2c45f4ce719c515f4d6e38751f57cfc2b31f4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:d9:0b:65:dc:b9:40:76:0c:0a:78:42:45:
                    9c:7b:04:2e:dd:3e:d1:54:e9:40:49:d8:f0:d1:f9:
                    02:8d:fc:f6:60:4e:43:89:46:0c:49:ff:b2:b0:4c:
                    04:d6:c9:22:91:b3:0c:e0:53:8c:ba:66:84:0d:f3:
                    26:7a:9c:ca:fb:e0:1d:9a:0b:7b:ab:e5:a8:df:76:
                    53:97:6a:f6:65:b7:88:8b:1c:cc:df:14:d5:c1:f8:
                    dd:3a:8d:aa:16:1d:64:73:7f:60:e9:82:ef:0d:b7:
                    12:a4:49:e8:87:48:af:69:12:fc:3b:7a:0a:f4:25:
                    65:56:c7:a0:c6:30:2d:dc:b7:b6:02:39:46:a1:c1:
                    4f:6a:31:3b:e4:0d:70:d6:c7:a8:1a:34:5d:a6:73:
                    77:7f:ab:e7:a8:00:3f:c0:b7:e8:6f:50:23:65:7a:
                    fc:13:26:47:2a:e0:e1:c8:d4:74:19:41:09:eb:92:
                    67:23:08:cd:b6:68:e2:31:6b:38:58:95:78:d9:e2:
                    a4:1e:fb:ef:2f:5e:fa:81:dc:b5:48:1f:d1:a0:80:
                    e7:ca:26:86:b8:a1:93:b0:26:c2:18:23:37:88:5e:
                    dd:20:cc:15:11:3e:b2:24:57:5e:18:7d:29:35:3c:
                    99:b2:d5:83:01:76:2d:d8:bb:b3:a6:f7:d4:14:5b:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:26:12:E9:23:09:50:40:15:B1:DA:2F:71:13:A0:73:CD:F6:2D:4E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/13641c46-c49a-4f6e-97a5-fec1ac14eeb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2150::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:4d:a5:2f:4c:03:bb:e5:f8:6b:e2:61:9d:5a:54:9c:7c:91:
         3d:e3:3b:b0:c7:71:46:2a:88:f8:e5:1a:bb:93:ec:af:11:0f:
         29:fe:70:30:eb:f8:1c:06:4a:b6:11:ee:e5:66:1b:5c:2e:87:
         a9:74:25:85:6b:8b:e8:6e:d8:d9:c3:a8:97:d2:01:93:c5:fc:
         b3:01:a5:16:3a:b9:3a:2e:38:8e:d6:f4:dc:ac:2f:6b:e5:9b:
         eb:2d:93:fc:ea:96:83:b4:e0:3a:7b:dd:b3:79:5f:50:2a:fb:
         f8:78:28:44:92:ae:e1:b8:32:33:61:48:ca:cb:44:63:8d:e7:
         75:41:45:ce:d1:41:2d:17:26:d2:a8:6e:7d:2b:1c:b6:5e:77:
         bd:73:c9:67:0b:bb:83:56:f9:84:c6:5d:e0:7e:81:d9:f7:53:
         1d:6b:f0:42:e8:da:75:ee:4a:65:b8:b8:d7:4f:36:e2:2c:a6:
         2d:34:07:25:f2:ab:29:d1:fb:39:96:a0:1a:6e:84:a5:36:94:
         a4:a4:74:bd:eb:81:4d:ea:a0:28:62:e9:80:f3:7f:e2:5a:cd:
         b9:84:73:96:41:17:dd:60:5d:2d:3d:89:8a:50:ec:d6:a7:a5:
         47:30:4f:7d:4f:e8:ea:81:4d:23:ac:2d:f8:8a:37:55:ef:ec:
         c1:f9:9f:92
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQBsFMn/7wio/RggBNz/oIbpQAVIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDU0MjA5WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3YzlkODllZDZjZWY5NTBiNmE5ZTUwNmJkNWMyYzQ1ZjRj
ZTcxOWM1MTVmNGQ2ZTM4NzUxZjU3Y2ZjMmIzMWY0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzz9kLZdy5QHYMCnhCRZx7BC7dPtFU6UBJ2PDR+QKN/PZg
TkOJRgxJ/7KwTATWySKRswzgU4y6ZoQN8yZ6nMr74B2aC3ur5ajfdlOXavZlt4iL
HMzfFNXB+N06jaoWHWRzf2Dpgu8NtxKkSeiHSK9pEvw7egr0JWVWx6DGMC3ct7YC
OUahwU9qMTvkDXDWx6gaNF2mc3d/q+eoAD/At+hvUCNlevwTJkcq4OHI1HQZQQnr
kmcjCM22aOIxazhYlXjZ4qQe++8vXvqB3LVIH9GggOfKJoa4oZOwJsIYIzeIXt0g
zBURPrIkV14YfSk1PJmy1YMBdi3Yu7Om99QUW5nvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUDyYS6SMJUEAVsdovcROgc832LU4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzEzNjQxYzQ2LWM0OWEtNGY2ZS05N2E1LWZlYzFhYzE0ZWViNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAIVAwDQYJKoZIhvcNAQELBQADggEBAGpNpS9MA7vl+GviYZ1aVJx8
kT3jO7DHcUYqiPjlGruT7K8RDyn+cDDr+BwGSrYR7uVmG1wuh6l0JYVri+hu2NnD
qJfSAZPF/LMBpRY6uTouOI7W9NysL2vlm+stk/zqloO04Dp73bN5X1Aq+/h4KESS
ruG4MjNhSMrLRGON53VBRc7RQS0XJtKobn0rHLZed71zyWcLu4NW+YTGXeB+gdn3
Ux1r8ELo2nXuSmW4uNdPNuIspi00ByXyqynR+zmWoBpuhKU2lKSkdL3rgU3qoChi
6YDzf+JazbmEc5ZBF91gXS09iYpQ7NanpUcwT31P6OqBTSOsLfiKN1Xv7MH5n5I=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:45 2025 by rpki-client