This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1be66a9f-06ef-4147-a1f0-784365c9a60c.roa
File:                     1be66a9f-06ef-4147-a1f0-784365c9a60c.roa (raw, json)
Hash identifier:          EORHn8eCJVZ5Ig9hjtqfz/yEFsxaIa6m62DDE1zLyto=
Subject key identifier:   EE:32:D6:57:55:5B:81:6E:1E:08:85:F0:EA:4E:45:4D:27:45:04:56
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       65038E5812EFEFEAC469D19910CB48D089003371
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1be66a9f-06ef-4147-a1f0-784365c9a60c.roa
Signing time:             Mon 24 Nov 2025 08:00:49 +0000
ROA not before:           Mon 24 Nov 2025 08:00:49 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:28f0::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:03:8e:58:12:ef:ef:ea:c4:69:d1:99:10:cb:48:d0:89:00:33:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 08:00:49 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=ce7198b1ffd726b78953322798d273ffaab9d3ba372b9e98d3c7aca6a350c60b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:0d:84:d8:44:6f:aa:21:2b:2c:00:b5:92:
                    a0:d7:44:95:98:ba:d9:fd:1c:e2:94:9c:b6:ba:e2:
                    28:3a:47:60:f5:9b:f4:7e:02:6c:50:df:81:64:fb:
                    5e:c6:52:d5:1d:6c:05:33:e9:45:f8:56:c7:9e:32:
                    c3:cb:1c:5d:d6:e1:23:3e:99:b8:8c:0c:1e:6d:22:
                    47:9e:c4:0a:15:03:60:9b:11:df:6f:36:65:2e:f2:
                    bc:5d:03:e1:e9:d7:05:3c:63:31:22:f1:60:65:66:
                    d8:ef:a8:83:a5:c3:8a:c9:da:84:0b:c7:0c:63:02:
                    21:13:c3:72:a8:8e:58:94:80:be:53:cf:41:99:f6:
                    b7:f5:78:ab:93:5d:65:41:fd:0a:c1:f6:6b:fe:70:
                    d0:e5:fe:dd:b3:80:26:45:14:a8:e9:c6:fe:8e:53:
                    e0:04:35:43:1c:d0:05:06:19:eb:56:ba:2f:fa:8b:
                    b6:ab:ff:b5:bd:6a:e8:47:97:0a:00:3b:bc:b1:53:
                    c3:76:d0:55:9f:27:92:f3:c6:c3:74:da:ad:24:2f:
                    1e:aa:e8:e6:6e:3c:91:d1:1f:14:29:62:17:db:ff:
                    55:e0:d5:68:e1:ab:6d:45:32:ef:3b:9f:7c:04:25:
                    31:47:01:aa:02:d9:25:6b:4e:18:fd:67:53:50:7a:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:32:D6:57:55:5B:81:6E:1E:08:85:F0:EA:4E:45:4D:27:45:04:56
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1be66a9f-06ef-4147-a1f0-784365c9a60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:28f0::/45

    Signature Algorithm: sha256WithRSAEncryption
         26:67:3b:9c:6c:3d:7e:65:2b:32:2f:fe:94:58:a0:e5:58:29:
         97:04:31:4d:e3:2e:21:74:c4:c9:f9:2c:1f:8c:e7:25:15:bc:
         b5:24:2d:4e:44:cd:02:4e:b1:51:5f:e9:cf:94:50:f3:f9:21:
         9d:7f:fc:4f:af:2b:5c:f9:fc:8f:1e:c7:38:7a:21:0b:3d:be:
         c1:48:c7:45:d4:31:3b:2f:db:31:c0:77:8d:ae:7d:f3:06:70:
         54:f8:c4:f4:fc:8a:27:88:59:e9:e9:17:8b:22:06:a3:84:8e:
         1d:9d:b7:94:51:3a:69:e6:b1:bf:d8:6e:8e:fb:dc:b5:4b:01:
         66:b9:d4:c6:74:3b:04:de:ec:1b:86:e6:02:ea:ed:6f:2e:38:
         de:01:e2:e8:6b:27:46:af:67:08:3a:a3:a9:4d:31:ee:2e:1e:
         1b:e7:b6:70:e2:18:4c:54:9f:13:21:a4:73:09:1c:52:db:ac:
         31:99:b8:68:ad:04:e8:6d:14:73:45:9f:64:b4:bd:84:79:6c:
         7a:48:f4:da:8d:88:4a:ea:f8:2d:16:4d:34:63:8a:99:73:79:
         c2:76:9a:a9:16:82:b8:74:4e:5c:c8:25:82:92:ca:72:8d:90:
         c2:3e:87:32:37:d7:3c:5d:4b:d5:d9:97:96:b4:11:ef:09:95:
         48:2b:92:5d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZQOOWBLv7+rEadGZEMtI0IkAM3EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDgwMDQ5WhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZTcxOThiMWZmZDcyNmI3ODk1MzMyMjc5OGQyNzNmZmFh
YjlkM2JhMzcyYjllOThkM2M3YWNhNmEzNTBjNjBiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3QA2E2ERvqiErLAC1kqDXRJWYutn9HOKUnLa64ig6R2D1
m/R+AmxQ34Fk+17GUtUdbAUz6UX4VseeMsPLHF3W4SM+mbiMDB5tIkeexAoVA2Cb
Ed9vNmUu8rxdA+Hp1wU8YzEi8WBlZtjvqIOlw4rJ2oQLxwxjAiETw3KojliUgL5T
z0GZ9rf1eKuTXWVB/QrB9mv+cNDl/t2zgCZFFKjpxv6OU+AENUMc0AUGGetWui/6
i7ar/7W9auhHlwoAO7yxU8N20FWfJ5LzxsN02q0kLx6q6OZuPJHRHxQpYhfb/1Xg
1Wjhq21FMu87n3wEJTFHAaoC2SVrThj9Z1NQesNRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU7jLWV1VbgW4eCIXw6k5FTSdFBFYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzFiZTY2YTlmLTA2ZWYtNDE0Ny1hMWYwLTc4NDM2NWM5YTYwYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAKPAwDQYJKoZIhvcNAQELBQADggEBACZnO5xsPX5lKzIv/pRYoOVY
KZcEMU3jLiF0xMn5LB+M5yUVvLUkLU5EzQJOsVFf6c+UUPP5IZ1//E+vK1z5/I8e
xzh6IQs9vsFIx0XUMTsv2zHAd42uffMGcFT4xPT8iieIWenpF4siBqOEjh2dt5RR
Omnmsb/Ybo773LVLAWa51MZ0OwTe7BuG5gLq7W8uON4B4uhrJ0avZwg6o6lNMe4u
HhvntnDiGExUnxMhpHMJHFLbrDGZuGitBOhtFHNFn2S0vYR5bHpI9NqNiErq+C0W
TTRjiplzecJ2mqkWgrh0TlzIJYKSynKNkMI+hzI31zxdS9XZl5a0Ee8JlUgrkl0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:44 2025 by rpki-client