This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16627bfd-6afc-4792-b86f-8d8ca9309e34.roa
File:                     16627bfd-6afc-4792-b86f-8d8ca9309e34.roa (raw, json)
Hash identifier:          +2ZGi1dPHqRC+DGntwe5PzYRZ9jEiCDf4BBrrLl3iV0=
Subject key identifier:   AE:4E:68:A6:48:F3:F9:02:1B:E6:1F:42:C4:0C:55:53:C3:FB:BA:D9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12EEAD5712494F7FF1CF5E970847CA2EA52DFD74
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16627bfd-6afc-4792-b86f-8d8ca9309e34.roa
Signing time:             Tue 25 Nov 2025 18:02:08 +0000
ROA not before:           Tue 25 Nov 2025 18:02:08 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3360::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ee:ad:57:12:49:4f:7f:f1:cf:5e:97:08:47:ca:2e:a5:2d:fd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 18:02:08 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=e4487df9bde92b2c1115977ea30c39f75aafc9cf8f3c3e6be042c81aac80a6c9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:8f:41:46:bc:46:cb:93:10:e2:5d:ea:25:
                    00:be:46:33:ef:38:57:ec:5e:52:98:13:21:ca:de:
                    f8:62:4c:d6:31:4a:54:a1:b4:1c:7f:b4:47:02:77:
                    08:e9:c9:a1:95:6c:7c:d6:e1:df:b6:af:d5:f0:1d:
                    da:ba:fd:9a:c3:c5:10:47:03:3d:c2:36:05:ee:50:
                    40:93:55:2a:e0:42:28:e4:60:f3:87:1e:35:79:6b:
                    9a:58:a3:9a:30:8c:5f:97:3e:d3:ec:3a:36:af:40:
                    03:04:62:7a:57:54:25:4b:d7:26:36:0e:e8:28:0a:
                    95:b0:ef:7e:3e:17:ab:8f:1d:61:df:6f:84:53:b0:
                    7b:f8:c5:3f:27:46:fd:b6:f3:37:a9:13:1e:08:09:
                    37:29:ad:f4:5e:d2:0a:f8:fe:3b:00:a2:e2:eb:20:
                    0e:20:77:74:2b:eb:2b:8f:34:ef:e0:5b:bc:5d:04:
                    2d:cd:50:1f:d2:32:7a:78:10:d8:d4:37:56:76:c3:
                    77:97:3e:3b:a5:54:43:86:7e:9d:ab:d2:71:e6:70:
                    82:74:26:a0:af:33:5c:cb:20:5f:37:51:e3:c9:41:
                    40:c8:16:d4:f6:51:8a:7e:bc:bc:69:2f:76:05:17:
                    a0:3b:8d:76:0c:08:c9:e4:b9:dc:00:11:2b:21:31:
                    4d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4E:68:A6:48:F3:F9:02:1B:E6:1F:42:C4:0C:55:53:C3:FB:BA:D9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16627bfd-6afc-4792-b86f-8d8ca9309e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3360::/47

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:4d:aa:6d:95:62:5b:c4:c6:2b:e7:62:57:d1:c7:d6:39:
         78:c3:b7:50:3c:14:54:69:8e:60:d7:5e:c6:18:ae:ed:7f:d2:
         de:65:30:15:49:a5:d8:ae:f3:fc:36:b9:4a:65:85:98:de:d3:
         4b:fd:de:44:9b:72:25:b9:5a:e1:cd:39:79:45:24:5d:5e:27:
         f7:6b:33:3f:e4:97:f6:2c:f0:1a:8d:8d:44:96:74:50:ad:77:
         af:03:84:45:03:50:f9:3d:57:f3:93:cf:f8:35:91:51:5d:ed:
         77:90:fd:e2:cb:a5:0c:39:5f:cb:91:9c:2c:99:c0:b6:75:9f:
         82:28:17:7b:7d:7b:21:b0:c1:05:28:ed:cb:19:df:11:17:4e:
         8f:aa:56:d6:26:67:0a:bb:3d:1c:2a:9d:4b:c1:f0:a7:21:f2:
         b1:ec:c7:ac:65:01:f4:6d:62:1a:a8:e6:c2:5b:02:74:bb:b3:
         bb:6c:9c:d3:27:2a:76:3b:04:13:92:87:2e:bf:17:0c:36:06:
         47:74:e4:c0:cf:a0:ae:50:67:ae:59:a4:ae:f7:15:b0:5a:ce:
         b9:f3:1d:cf:94:70:a0:c9:18:84:13:3b:c5:7f:02:71:3c:fe:
         a1:b9:fb:40:63:db:25:71:42:bd:dc:6a:a4:e2:64:45:ef:de:
         8a:35:6c:d0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEu6tVxJJT3/xz16XCEfKLqUt/XQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTgwMjA4WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNDQ4N2RmOWJkZTkyYjJjMTExNTk3N2VhMzBjMzlmNzVh
YWZjOWNmOGYzYzNlNmJlMDQyYzgxYWFjODBhNmM5MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJ849BRrxGy5MQ4l3qJQC+RjPvOFfsXlKYEyHK3vhiTNYx
SlShtBx/tEcCdwjpyaGVbHzW4d+2r9XwHdq6/ZrDxRBHAz3CNgXuUECTVSrgQijk
YPOHHjV5a5pYo5owjF+XPtPsOjavQAMEYnpXVCVL1yY2DugoCpWw734+F6uPHWHf
b4RTsHv4xT8nRv228zepEx4ICTcprfRe0gr4/jsAouLrIA4gd3Qr6yuPNO/gW7xd
BC3NUB/SMnp4ENjUN1Z2w3eXPjulVEOGfp2r0nHmcIJ0JqCvM1zLIF83UePJQUDI
FtT2UYp+vLxpL3YFF6A7jXYMCMnkudwAESshMU2NAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrk5opkjz+QIb5h9CxAxVU8P7utkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzE2NjI3YmZkLTZhZmMtNDc5Mi1iODZmLThkOGNhOTMwOWUzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAM2AwDQYJKoZIhvcNAQELBQADggEBABQcTaptlWJbxMYr52JX0cfW
OXjDt1A8FFRpjmDXXsYYru1/0t5lMBVJpdiu8/w2uUplhZje00v93kSbciW5WuHN
OXlFJF1eJ/drMz/kl/Ys8BqNjUSWdFCtd68DhEUDUPk9V/OTz/g1kVFd7XeQ/eLL
pQw5X8uRnCyZwLZ1n4IoF3t9eyGwwQUo7csZ3xEXTo+qVtYmZwq7PRwqnUvB8Kch
8rHsx6xlAfRtYhqo5sJbAnS7s7tsnNMnKnY7BBOShy6/Fww2Bkd05MDPoK5QZ65Z
pK73FbBazrnzHc+UcKDJGIQTO8V/AnE8/qG5+0Bj2yVxQr3caqTiZEXv3oo1bNA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:54 2025 by rpki-client