This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17c7634c-cf86-4199-907b-de61df67c081.roa
File:                     17c7634c-cf86-4199-907b-de61df67c081.roa (raw, json)
Hash identifier:          UfHQ9YB/xXbmx3RURQincECQNB+dNzV00r5M8a+rZto=
Subject key identifier:   25:F0:BA:37:12:CD:E7:E8:5D:8C:03:ED:93:14:7C:3D:72:B8:3F:3D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       43014F239458E441DC19E64C21337C98BFEC1A2D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17c7634c-cf86-4199-907b-de61df67c081.roa
Signing time:             Mon 24 Nov 2025 03:40:58 +0000
ROA not before:           Mon 24 Nov 2025 03:40:58 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:268e::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:01:4f:23:94:58:e4:41:dc:19:e6:4c:21:33:7c:98:bf:ec:1a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:40:58 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=73d779e05803bcf8fbe43b173599e262c6a21889fdf708b637b50bb2a2b4934e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:42:54:f7:9f:61:f9:31:df:0a:87:7e:cd:
                    84:cf:a7:ff:71:81:fb:18:dc:a9:29:31:6b:67:b7:
                    52:a8:e7:f0:b5:5f:68:81:3b:3c:33:fe:d7:1e:b3:
                    97:1f:f0:0c:dc:58:08:c1:47:90:fb:89:0d:8f:fe:
                    20:6f:a4:31:90:d3:42:29:b6:f4:3a:8c:b3:c1:9c:
                    d3:de:f9:af:e4:a7:d3:1d:d4:8e:1a:b0:c1:04:f8:
                    6a:43:d3:1e:6f:06:bb:83:6f:26:39:32:6c:b9:64:
                    1d:91:c4:dc:fc:07:94:48:93:1f:72:09:37:63:4d:
                    bf:fb:27:dc:f9:2c:4f:ed:70:3f:05:ee:38:fd:54:
                    aa:e0:67:06:b4:3e:d9:9e:35:e0:b2:42:01:6d:bb:
                    a0:ff:d8:14:81:70:0e:94:7e:6e:7e:8b:75:ed:e8:
                    8f:57:f9:19:b5:b5:5f:bc:03:b4:1e:d9:8c:b6:69:
                    8c:6c:b5:f9:22:04:bb:eb:01:7a:4e:a7:fa:5d:3a:
                    e1:8f:b6:ce:15:4e:00:eb:c5:0f:2e:e3:cb:f2:de:
                    17:a9:77:49:8d:ee:b2:2e:da:bd:4b:9f:c3:79:b0:
                    a2:e1:76:9e:e5:fc:00:ca:c1:51:99:75:63:3e:7c:
                    98:f6:e6:2b:43:10:bc:3b:88:92:47:0b:cc:09:86:
                    ed:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F0:BA:37:12:CD:E7:E8:5D:8C:03:ED:93:14:7C:3D:72:B8:3F:3D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17c7634c-cf86-4199-907b-de61df67c081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:268e::/47

    Signature Algorithm: sha256WithRSAEncryption
         49:08:29:59:2e:2a:2f:81:93:ce:c8:77:9a:29:2d:0e:f5:8f:
         4e:0f:20:1b:6d:3c:60:f8:a5:bf:a9:64:16:5d:52:2e:20:e4:
         e9:67:fa:66:40:22:b1:81:6e:63:18:53:48:56:8b:d3:cb:c4:
         5a:6c:57:4e:a8:f8:47:f8:16:90:4f:6a:e9:82:85:eb:ce:2d:
         30:3f:45:a6:37:6d:f3:33:57:b2:d6:45:eb:14:12:07:2c:fe:
         cf:6c:50:20:9a:a9:c3:ef:f0:c0:d0:90:a5:28:a9:35:d0:6b:
         f3:02:ff:41:bf:d7:8f:1c:eb:5c:3b:84:79:9f:0f:dd:55:e5:
         6e:f8:03:e7:f8:d3:b0:01:cd:82:58:8b:74:67:ed:9a:65:fe:
         1a:7a:8c:39:a9:58:8f:41:9e:63:fe:c2:a4:05:96:d3:19:0d:
         a7:28:a3:0b:ec:6a:af:d5:d5:33:d7:0a:08:05:f2:cb:7b:57:
         e7:63:23:63:ab:1c:db:f7:d0:45:0a:66:01:2e:fd:45:64:5a:
         9b:c4:50:64:b9:5d:77:cf:97:07:78:0f:e6:2c:01:54:90:b4:
         e8:58:e8:b1:6d:58:37:ad:ec:05:12:41:97:3d:87:ac:56:5f:
         1c:ad:38:48:78:b3:d1:7c:a0:57:d4:a4:49:41:b6:3a:6e:ed:
         19:f2:5e:fa
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQwFPI5RY5EHcGeZMITN8mL/sGi0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDM0MDU4WhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3M2Q3NzllMDU4MDNiY2Y4ZmJlNDNiMTczNTk5ZTI2MmM2
YTIxODg5ZmRmNzA4YjYzN2I1MGJiMmEyYjQ5MzRlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDC20JU959h+THfCod+zYTPp/9xgfsY3KkpMWtnt1Ko5/C1
X2iBOzwz/tces5cf8AzcWAjBR5D7iQ2P/iBvpDGQ00IptvQ6jLPBnNPe+a/kp9Md
1I4asMEE+GpD0x5vBruDbyY5Mmy5ZB2RxNz8B5RIkx9yCTdjTb/7J9z5LE/tcD8F
7jj9VKrgZwa0PtmeNeCyQgFtu6D/2BSBcA6Ufm5+i3Xt6I9X+Rm1tV+8A7Qe2Yy2
aYxstfkiBLvrAXpOp/pdOuGPts4VTgDrxQ8u48vy3hepd0mN7rIu2r1Ln8N5sKLh
dp7l/ADKwVGZdWM+fJj25itDELw7iJJHC8wJhu3hAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJfC6NxLN5+hdjAPtkxR8PXK4Pz0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzE3Yzc2MzRjLWNmODYtNDE5OS05MDdiLWRlNjFkZjY3YzA4MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAJo4wDQYJKoZIhvcNAQELBQADggEBAEkIKVkuKi+Bk87Id5opLQ71
j04PIBttPGD4pb+pZBZdUi4g5Oln+mZAIrGBbmMYU0hWi9PLxFpsV06o+Ef4FpBP
aumChevOLTA/RaY3bfMzV7LWResUEgcs/s9sUCCaqcPv8MDQkKUoqTXQa/MC/0G/
148c61w7hHmfD91V5W74A+f407ABzYJYi3Rn7Zpl/hp6jDmpWI9BnmP+wqQFltMZ
Dacoowvsaq/V1TPXCggF8st7V+djI2OrHNv30EUKZgEu/UVkWpvEUGS5XXfPlwd4
D+YsAVSQtOhY6LFtWDet7AUSQZc9h6xWXxytOEh4s9F8oFfUpElBtjpu7RnyXvo=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:58 2025 by rpki-client