This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15525109-3df9-482e-8232-46a048989e28.roa
File:                     15525109-3df9-482e-8232-46a048989e28.roa (raw, json)
Hash identifier:          fiDJQ5lbDJjyzOWt2y+8qXVSPHvTxa2sAseR5ymaq+8=
Subject key identifier:   46:7F:57:F9:79:7F:42:88:77:5E:75:9B:75:3C:39:D5:63:37:04:6A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       153DE412C6F55DBD3FAC7219021748F44C37228B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15525109-3df9-482e-8232-46a048989e28.roa
Signing time:             Mon 24 Nov 2025 06:11:39 +0000
ROA not before:           Mon 24 Nov 2025 06:11:39 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:179a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3d:e4:12:c6:f5:5d:bd:3f:ac:72:19:02:17:48:f4:4c:37:22:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 06:11:39 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=007bf5b4ecca4c7bad99f3c367e1065372b6723606f849d9b9dc2bf180c812e3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:1f:61:f8:c1:e1:3a:ab:7b:7d:4c:3f:92:
                    de:08:0d:ee:d8:b5:7d:8a:18:41:06:7d:a2:92:44:
                    f5:4b:57:29:6f:77:96:21:ee:76:bd:56:64:73:d7:
                    fd:ee:31:1e:54:52:a5:e4:d4:f6:72:28:9f:1f:04:
                    81:c1:ea:61:1c:55:55:ae:6f:8a:69:a6:48:6c:a3:
                    f0:53:74:68:24:84:0e:80:d0:6f:83:70:3d:6d:16:
                    9f:d1:2f:f8:0c:25:e4:f8:0a:58:89:86:7c:c5:b0:
                    d2:3e:c7:f0:bc:31:9d:8c:9b:36:62:57:1f:60:a2:
                    b1:a1:ef:a5:f1:d9:c1:94:4c:69:ad:3c:c7:6a:c3:
                    84:37:f4:9e:20:b1:3d:db:5a:0b:3f:da:8d:39:70:
                    ff:06:60:cb:f0:b3:18:16:a2:5e:89:22:dc:70:1f:
                    7d:c5:2c:e9:c1:71:07:c4:98:ff:f5:4e:f5:fc:91:
                    ee:87:55:0c:09:53:c4:47:6e:7e:4f:96:c8:83:e0:
                    11:7f:77:a7:58:5e:4f:7e:f3:4d:9a:b2:3d:14:6e:
                    81:62:82:8b:5e:c9:20:cd:e7:ef:24:b9:c6:bf:1f:
                    d2:a5:42:a0:46:b0:64:f8:3c:60:7e:ea:2f:96:f0:
                    ad:8a:db:d5:7c:dd:15:78:e7:71:04:2d:3c:34:ee:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7F:57:F9:79:7F:42:88:77:5E:75:9B:75:3C:39:D5:63:37:04:6A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15525109-3df9-482e-8232-46a048989e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:179a::/47

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:6a:5a:99:81:c2:05:a2:b1:ad:17:b2:ff:81:d1:71:d9:
         fa:6e:3e:f1:eb:63:cf:49:a5:b8:68:18:f5:5d:12:6d:ce:d3:
         e6:e8:b1:02:95:87:0f:8f:01:29:9b:c2:79:da:ab:31:54:cb:
         13:2a:db:19:5b:67:07:dd:0a:86:f5:fb:04:5a:06:9b:45:b1:
         21:2a:1e:94:29:20:98:17:eb:51:92:65:b7:04:2a:2d:11:e8:
         8a:88:78:c2:64:ee:52:60:26:ba:77:25:d7:96:c7:e4:72:fb:
         d8:da:a9:b0:ec:e9:c6:b7:e4:c0:dd:de:c8:1a:47:00:39:1b:
         e4:ba:5f:10:fe:63:db:59:47:91:47:5f:02:64:52:2b:ac:31:
         26:db:e6:83:8b:be:ec:71:f6:34:8a:4d:65:02:94:02:47:88:
         c3:01:83:8d:b9:b1:5d:4e:39:8c:69:39:b5:9e:6c:3f:a4:e9:
         33:c6:51:40:0f:3b:2b:b6:75:b0:96:d7:59:0e:30:64:c8:26:
         58:b7:41:10:61:6b:c7:ac:11:a7:97:5c:32:0d:69:e7:ea:0f:
         a3:ad:e1:3e:c4:63:ab:e2:c9:19:f1:0e:b4:c4:70:7e:3e:17:
         ca:f8:18:c3:c4:cd:0a:65:a7:ed:9d:7f:db:53:a3:78:f8:28:
         54:a7:3c:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:51:17 2025 by rpki-client