This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16c8d8e2-32e4-4900-ad71-ed3473b45bb4.roa
File:                     16c8d8e2-32e4-4900-ad71-ed3473b45bb4.roa (raw, json)
Hash identifier:          HRCSfTvuRpPrupQSkYMISRlwAgt7n91yGurDgbAB+Tw=
Subject key identifier:   4E:22:25:BA:98:3E:45:3D:80:6E:6D:92:78:D6:E6:6E:AE:57:40:9D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1E1BBDCA1C89EA571E2FF5F56CFA5E11360BFA0E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16c8d8e2-32e4-4900-ad71-ed3473b45bb4.roa
Signing time:             Tue 25 Nov 2025 05:21:31 +0000
ROA not before:           Tue 25 Nov 2025 05:21:31 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b30::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1b:bd:ca:1c:89:ea:57:1e:2f:f5:f5:6c:fa:5e:11:36:0b:fa:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:21:31 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=1fe2a1609c6cdaedd409ffdbd54978482ed007c09fbf83418ee116a8a0d2cace, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:90:1b:39:6a:1c:ee:9b:51:d7:3e:b4:2b:
                    88:f9:bf:01:76:85:19:b4:7c:12:b3:16:dc:79:a1:
                    87:b9:4b:97:a8:c3:7f:ba:b9:46:1b:ce:7a:7b:22:
                    f6:bf:9e:97:44:9e:5f:00:81:19:48:5b:20:8e:42:
                    1c:b8:f4:f0:7d:33:6b:6a:94:0c:b6:a0:ee:63:5f:
                    11:18:c4:9d:11:04:9f:31:b4:6c:9f:09:b5:62:5d:
                    59:d0:c8:fd:89:11:25:f4:cf:5e:34:70:d7:6f:d4:
                    d7:19:74:eb:70:76:10:11:ec:af:0a:b0:64:3a:bf:
                    32:63:68:15:fb:a4:21:c3:14:20:e5:d7:0f:f8:32:
                    f7:35:9b:fd:e0:90:27:4f:58:c7:5c:5f:4e:39:3a:
                    c7:0f:58:98:65:ed:a9:07:dd:4e:44:27:c2:cf:92:
                    24:60:e5:a9:a0:ea:02:4e:32:79:57:43:3f:72:63:
                    37:78:43:a5:b5:60:2c:95:02:4f:ed:c8:e0:66:68:
                    07:70:f6:ba:51:a9:6d:32:d7:d4:3e:f4:38:d6:b7:
                    75:48:81:6d:d4:af:f2:61:e0:2e:6b:64:56:7d:48:
                    82:00:60:8d:56:64:58:65:cb:40:5f:ea:c0:73:aa:
                    9a:42:69:49:c9:7b:4e:e4:4f:6b:a3:6d:ed:dc:17:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:22:25:BA:98:3E:45:3D:80:6E:6D:92:78:D6:E6:6E:AE:57:40:9D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16c8d8e2-32e4-4900-ad71-ed3473b45bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b30::/45

    Signature Algorithm: sha256WithRSAEncryption
         3b:13:6b:7d:56:fc:23:d4:30:a6:04:03:95:ac:9f:91:e6:18:
         51:5b:db:0b:4d:f8:e7:75:14:6e:6d:95:3a:76:75:e0:16:50:
         9a:d8:91:c3:80:f1:10:b7:71:04:cf:d0:96:45:d6:d3:4d:22:
         80:ee:1f:52:8b:c8:7f:38:d5:e1:1e:22:50:e6:af:68:36:ca:
         8d:0a:8b:c9:ed:56:96:cc:ba:57:c8:d5:ae:e1:1e:70:99:94:
         2b:3f:54:64:fd:cb:c9:86:17:1f:d7:c7:46:52:d0:ef:ee:f5:
         76:a6:19:f2:f4:7f:31:9a:53:e4:e8:9f:96:78:88:0b:27:51:
         34:1a:ac:c6:6c:df:33:29:b9:d0:c7:a8:e6:72:55:1d:9d:96:
         82:bb:e4:18:82:fe:7a:b5:63:ce:8a:b1:3f:6d:39:ff:68:8f:
         2f:64:19:40:47:00:bb:1e:12:c3:4b:f7:40:44:0c:22:1a:70:
         d4:e3:b3:35:bb:19:d4:b6:d0:91:4a:19:e2:26:a4:5e:65:ea:
         3d:61:3a:a7:c8:16:e2:42:cb:a0:57:5d:04:d8:36:c2:e9:ac:
         a8:6b:54:16:39:f3:31:b7:2b:04:0f:47:63:01:71:89:05:42:
         f5:fb:d8:f2:14:7b:54:44:42:a5:75:28:c3:e0:27:18:9b:ed:
         ef:35:0c:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:26 2025 by rpki-client