This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1cedca13-83c5-4e28-aaac-1b749ae13577.roa
File:                     1cedca13-83c5-4e28-aaac-1b749ae13577.roa (raw, json)
Hash identifier:          8r9F7blmXr9YhoBQuWNNxiPbcfANoKCC0VmgAioFpyY=
Subject key identifier:   AC:D5:9B:AF:DD:5C:AC:02:B6:A4:EC:9A:C5:03:63:40:D2:38:93:61
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       245078058CC34150D3A3930B2DECF2142A004F04
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1cedca13-83c5-4e28-aaac-1b749ae13577.roa
Signing time:             Tue 25 Nov 2025 10:42:09 +0000
ROA not before:           Tue 25 Nov 2025 10:42:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a78::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:50:78:05:8c:c3:41:50:d3:a3:93:0b:2d:ec:f2:14:2a:00:4f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 10:42:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=0bbf0b481ec83c08c15efc78127d9381102c30b56733bdaff05bc8737675da80, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4b:c5:f4:03:39:4a:eb:d7:9d:7b:eb:f2:1b:
                    bf:70:dc:2a:43:6f:11:35:33:48:7d:7e:a8:9a:ac:
                    66:22:85:8e:1b:f8:11:c1:42:74:90:44:32:9b:35:
                    be:26:2e:19:8a:b0:7f:a7:82:f8:cf:f8:4c:05:fe:
                    d0:54:01:d2:91:a5:5f:83:ee:94:b4:46:5d:c8:13:
                    ce:5e:76:9c:db:f1:4d:38:be:8b:bc:a4:e9:fe:1e:
                    00:5e:a9:06:cd:3d:75:ac:73:62:aa:4a:60:1f:95:
                    96:de:73:ba:f1:ce:1b:97:36:a1:6b:02:c6:94:85:
                    a1:80:4e:e6:ea:8f:43:8a:bb:2f:bf:09:8f:35:e3:
                    05:95:6f:2e:13:9e:61:74:b4:4a:8f:0a:25:f3:78:
                    0a:93:f2:28:ba:a9:ad:e0:44:29:15:a4:19:a5:c0:
                    95:60:d4:93:8b:6e:c6:38:ba:c4:48:3c:7f:ea:c1:
                    92:55:7f:e4:77:af:71:0a:65:cf:a4:40:59:76:cb:
                    ad:8f:4a:b8:00:dc:72:77:90:e6:af:b5:e1:96:f9:
                    38:95:71:15:ba:0e:3a:ec:02:21:6c:e2:1e:45:52:
                    de:57:33:40:fc:b2:ed:af:b5:06:76:20:b3:51:60:
                    ee:79:3d:3b:3f:23:8e:66:f3:7f:88:b4:46:7f:c6:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D5:9B:AF:DD:5C:AC:02:B6:A4:EC:9A:C5:03:63:40:D2:38:93:61
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1cedca13-83c5-4e28-aaac-1b749ae13577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a78::/46

    Signature Algorithm: sha256WithRSAEncryption
         86:9c:81:c4:8f:86:ba:cb:c6:51:b3:fc:5f:0e:9d:60:cc:58:
         f0:6d:07:ff:2a:60:e3:81:54:9d:e8:08:cc:b0:6e:78:93:6d:
         f1:f2:f3:9b:09:cb:8d:c2:04:56:22:8d:89:70:ca:3a:5c:52:
         0e:d2:a3:dd:3b:b3:5a:c0:9d:33:21:9c:52:40:ee:ce:9e:8a:
         01:13:a6:cb:30:45:74:b2:a9:7f:e9:fc:d9:af:3e:0c:4a:cc:
         db:d0:df:a6:cc:56:b2:e6:ef:52:c5:b1:20:5f:a1:56:aa:fe:
         4f:ae:2e:0c:46:06:6a:6f:da:d8:87:1a:4e:3c:dc:a2:46:f4:
         e3:00:f6:36:92:1b:9d:65:f1:e7:12:a0:0d:bc:74:95:4a:a3:
         bd:0e:a3:5c:96:30:61:10:8c:be:9b:78:96:91:1a:75:6b:6c:
         e7:28:a0:8e:9b:78:95:3e:28:53:28:6f:9d:2b:c2:f6:35:98:
         79:67:50:aa:fa:aa:17:8f:fb:92:6e:d5:96:26:0d:79:b4:90:
         2c:56:1d:66:7e:72:05:ca:61:ba:0d:9f:87:f4:d3:2b:48:80:
         f4:55:22:34:8e:c6:01:ab:d0:e3:23:9b:db:51:7d:5b:ef:4a:
         e8:50:11:ff:05:09:84:7b:0a:ff:e5:c5:b6:31:ee:36:a9:53:
         1b:2c:f2:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:51 2025 by rpki-client