This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15fd004e-950e-476a-926d-2ef64ffa1de9.roa
File:                     15fd004e-950e-476a-926d-2ef64ffa1de9.roa (raw, json)
Hash identifier:          EQhztCEzWdP9pRa44C7R6CXmQi/Y5JAxsqPw2EO1vAg=
Subject key identifier:   C8:26:AA:0B:15:BC:CD:01:91:C5:E0:F3:0B:ED:E6:E0:3B:0F:80:A4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2AA5DD217E6C1CA14E0B3809601C7EC637708B01
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15fd004e-950e-476a-926d-2ef64ffa1de9.roa
Signing time:             Tue 25 Nov 2025 04:21:25 +0000
ROA not before:           Tue 25 Nov 2025 04:21:25 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1fc0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a5:dd:21:7e:6c:1c:a1:4e:0b:38:09:60:1c:7e:c6:37:70:8b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:21:25 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=332007b6afcc1a5acef08edc55b5752ad38ec200d7d3e9dbf19dfefc544065cd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:50:25:b0:b7:73:cc:4c:8e:ab:b3:e4:84:
                    a4:5c:f8:12:e7:2d:44:f1:05:24:37:d9:76:62:0c:
                    1c:52:17:6c:ce:1f:c3:22:1c:7f:a1:fb:e7:6c:08:
                    fd:7e:dc:16:d4:53:3c:3a:38:18:e5:b6:96:b3:7b:
                    b3:70:8f:bd:08:90:4b:d4:da:24:d8:44:d5:ee:cb:
                    52:ff:4e:0b:fd:8e:31:bd:70:ff:01:87:86:7c:7c:
                    99:89:2e:fc:f8:22:a5:ad:89:a4:06:84:0b:97:02:
                    1c:19:fb:94:1a:29:df:03:c0:91:58:2f:52:8c:07:
                    4f:49:82:8c:7f:cc:37:f2:fb:36:99:83:f7:ee:3f:
                    69:39:0a:0a:82:ca:64:f3:66:a1:33:29:cb:b5:d0:
                    89:b6:0c:ed:29:ce:78:35:b7:0d:18:4a:b8:a9:07:
                    b7:a3:18:54:b1:3c:53:df:d6:61:68:08:43:c7:9e:
                    86:70:10:74:f9:d6:4f:e5:0e:14:69:ed:8b:81:bc:
                    7b:07:c7:bc:74:ee:f4:e2:32:87:68:b8:fe:43:cc:
                    a8:99:89:4b:7c:2d:44:56:60:13:1c:9e:41:af:f7:
                    64:3d:e6:77:71:6c:68:69:ac:da:88:e6:ac:65:70:
                    67:d4:b9:0e:fc:60:06:ec:9d:0a:f7:e3:c7:e9:9b:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:AA:0B:15:BC:CD:01:91:C5:E0:F3:0B:ED:E6:E0:3B:0F:80:A4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15fd004e-950e-476a-926d-2ef64ffa1de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1fc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         29:84:93:0f:ae:57:02:b3:33:6a:80:aa:4a:7e:44:30:9a:c9:
         99:09:1d:f0:c1:f7:c0:a8:30:99:dd:09:12:5f:57:49:9c:3e:
         2c:90:21:f2:54:93:e2:6f:33:bc:a7:4d:eb:ae:ab:61:b4:ae:
         a6:07:46:fc:55:24:59:2a:43:c3:37:92:a4:46:00:9c:66:20:
         16:6a:42:60:1e:ff:f3:b5:48:6e:5e:a4:12:e1:9d:03:21:f6:
         47:c8:88:93:c9:69:99:9f:57:4d:42:fd:86:fb:74:b4:e0:0f:
         4e:2a:78:9e:76:db:33:e9:8a:6f:3a:17:89:b7:e7:8b:eb:3c:
         05:d8:7b:59:d8:70:ad:5d:16:74:07:08:a9:74:9f:5b:b5:f3:
         83:65:d7:64:bc:34:bf:6a:15:ea:6f:62:19:1b:96:90:03:c5:
         f1:73:da:8d:d6:d8:4d:65:84:76:31:35:9c:04:7e:27:ad:f1:
         54:42:0d:fc:64:4e:77:65:23:b8:5d:57:9e:f9:2d:c0:a8:77:
         c9:32:b7:39:d8:b4:24:21:3f:5c:80:21:ac:89:98:36:b8:01:
         a9:26:3c:ee:3d:b1:d6:92:1c:6a:b4:4b:3f:f9:5a:90:99:f3:
         9a:32:8f:4d:5d:22:ac:8a:16:af:90:c6:f3:d3:7e:64:6d:06:
         7b:41:5f:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:02 2025 by rpki-client