This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/153e037c-09f2-474c-a565-b2f40539af01.roa
File:                     153e037c-09f2-474c-a565-b2f40539af01.roa (raw, json)
Hash identifier:          Uv+0L9qk2RubkSPBmHVkaZRUvbsi9wUt6zJhJvxzIcw=
Subject key identifier:   82:45:5C:FA:97:B8:A8:F4:C6:C8:89:81:07:6D:FE:6E:12:3E:4F:0E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1003A0B8A82914977ECFAB68304F9308852F0BD5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/153e037c-09f2-474c-a565-b2f40539af01.roa
Signing time:             Tue 25 Nov 2025 09:30:13 +0000
ROA not before:           Tue 25 Nov 2025 09:30:13 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:03:a0:b8:a8:29:14:97:7e:cf:ab:68:30:4f:93:08:85:2f:0b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 09:30:13 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=4aebbef54ce3b54f0ddd4b79b2ed81924a589fcfad5ccc0b91c6cec85db482b2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:66:55:ae:f2:49:04:cc:45:4e:28:61:db:
                    5b:e1:a0:cc:57:7d:3a:c7:e4:ef:29:5c:69:b2:1f:
                    e9:1e:8e:b0:18:66:db:e7:d6:b7:d3:0d:95:44:f7:
                    d5:91:c0:9e:4c:19:27:4a:3c:c2:78:f6:80:4f:6f:
                    63:b9:bd:2b:21:39:af:8b:03:b5:03:c0:ae:39:ea:
                    63:b2:cf:2e:36:b5:7c:c5:bc:e9:c3:d1:13:ac:8d:
                    6d:12:64:9e:78:17:fd:d4:d0:98:7d:f3:32:46:37:
                    13:0f:04:96:cf:c1:52:88:aa:b7:83:e9:84:93:eb:
                    ab:69:93:e9:20:d2:af:ee:1e:2c:95:15:e5:e9:50:
                    86:75:b1:b2:f3:74:bb:99:a7:8b:21:06:07:42:9a:
                    b1:ce:6f:84:63:00:1d:cc:c5:f2:40:76:f9:de:b2:
                    c8:88:eb:76:d1:66:2e:3b:4d:69:15:f7:9c:53:6b:
                    52:d4:aa:7e:69:89:00:04:4d:00:3d:76:9e:d6:63:
                    b5:97:7b:6a:cc:b2:d8:ea:f7:07:b9:b5:87:1d:6f:
                    72:41:b6:03:d1:e0:2a:e1:4a:48:99:e9:45:e6:36:
                    72:21:aa:71:45:84:55:fd:69:0d:6e:0b:75:48:6a:
                    92:26:82:81:11:11:0c:ee:c0:4d:f6:8e:29:db:07:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:5C:FA:97:B8:A8:F4:C6:C8:89:81:07:6D:FE:6E:12:3E:4F:0E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/153e037c-09f2-474c-a565-b2f40539af01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1d80::/41

    Signature Algorithm: sha256WithRSAEncryption
         ab:1d:23:49:83:d1:a3:ee:4a:27:60:61:ac:53:4d:81:f1:7e:
         d5:44:fa:15:f2:80:e7:6b:08:13:1e:bc:23:50:98:a6:36:61:
         08:b3:f0:ee:f6:0b:68:58:d5:e5:bc:6a:51:b4:64:61:a1:16:
         5e:50:bb:2c:03:c3:6c:46:65:63:ae:24:a1:d9:27:4c:70:05:
         c3:d1:93:75:97:b2:6f:18:2a:23:4d:24:32:68:0f:07:72:5e:
         f0:26:9f:c7:45:fb:4f:3e:ca:6f:1d:8f:73:e1:a9:76:7e:59:
         13:76:a5:49:07:43:33:13:c6:aa:82:59:0a:b5:dc:57:a2:87:
         46:0f:8b:9b:28:1c:5c:40:f9:fb:47:ab:ab:e5:49:b5:f8:a2:
         a3:79:cb:43:73:86:df:01:e1:f9:d4:68:a9:16:32:b6:46:d0:
         5c:2b:78:71:86:8f:37:96:dc:9c:ae:dc:e4:2c:1c:90:33:bc:
         ff:c2:aa:1e:c1:8b:11:c8:7c:e3:c9:05:1e:3c:f7:9f:dd:01:
         60:ff:5e:1c:e4:25:b3:f9:2b:7a:69:06:b8:cc:ac:e5:d1:70:
         66:c5:54:c1:b3:88:96:cb:d4:49:c3:84:c0:16:e0:c2:af:aa:
         f3:f9:7f:c3:b2:30:8f:94:b3:c1:ba:0e:fe:63:5e:2e:5e:c4:
         fa:02:40:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:46:57 2025 by rpki-client