This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d655949-6748-4c86-b57c-142185d67107.roa
File:                     1d655949-6748-4c86-b57c-142185d67107.roa (raw, json)
Hash identifier:          Dz6CG5ljMb3DRlKyoJv1ACWuh+iFiAJ8FSwxHQVCBAw=
Subject key identifier:   93:9A:C4:DE:EF:CC:F0:51:B1:D0:4D:F0:AD:FF:2F:47:BF:1A:DD:6B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46E371F29C5B1274F7BFB2EE56996A50312974B3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d655949-6748-4c86-b57c-142185d67107.roa
Signing time:             Tue 25 Nov 2025 14:30:11 +0000
ROA not before:           Tue 25 Nov 2025 14:30:11 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fe0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e3:71:f2:9c:5b:12:74:f7:bf:b2:ee:56:99:6a:50:31:29:74:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:30:11 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=468c520cd813745188c2439f9c1e02ee8f89bce080370e3fddd2d594eb4e34e1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:0c:e2:fb:06:32:30:b3:e9:87:be:99:c1:
                    7f:c7:e6:44:13:ad:59:b9:38:fb:64:a2:88:87:0c:
                    d7:f1:ea:fe:5a:e7:16:c4:e2:5d:25:2d:d5:68:b6:
                    2c:86:c2:19:a4:0b:05:a3:11:c6:56:16:65:76:db:
                    b0:83:4a:80:cf:b6:46:80:30:c8:75:d0:79:e1:a0:
                    aa:f9:a3:95:07:2e:1a:d8:e0:f4:bb:02:62:9b:ba:
                    1d:0d:4b:d9:57:3e:55:28:4c:6b:87:56:7c:84:f1:
                    7f:08:b8:cd:29:5a:6a:3a:21:8b:e5:b1:81:d6:2c:
                    64:4f:43:1a:e1:78:d9:5a:8f:bf:7f:fa:01:70:f3:
                    9c:d9:30:88:b7:c3:a9:50:62:c2:b6:c9:a2:2b:01:
                    19:7f:e9:99:62:40:3d:95:a0:58:d8:60:18:05:f0:
                    25:a0:d1:52:dd:c0:48:49:eb:32:5f:c3:c3:32:fc:
                    e1:bf:9b:94:bb:97:c6:29:de:a3:98:d9:02:b8:ed:
                    0a:ee:ff:12:27:76:6b:c8:b6:7a:e6:ae:31:ef:75:
                    11:70:c3:ff:a5:3f:6f:8c:88:37:72:f2:d3:33:ab:
                    bb:1a:80:fc:23:51:8b:b2:1a:37:c7:6e:b7:0b:df:
                    4e:2f:28:c5:5a:f8:fd:aa:36:4d:a7:16:34:14:9d:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9A:C4:DE:EF:CC:F0:51:B1:D0:4D:F0:AD:FF:2F:47:BF:1A:DD:6B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d655949-6748-4c86-b57c-142185d67107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fe0::/46

    Signature Algorithm: sha256WithRSAEncryption
         0a:75:63:bd:55:3c:54:98:41:1c:b3:89:9e:a5:26:69:27:37:
         2e:96:0c:24:72:6f:a8:11:cf:8c:a3:bf:ef:98:a8:ec:df:64:
         56:d0:03:4d:4b:b7:ca:6f:78:a6:60:65:9d:fd:08:c8:04:4f:
         62:80:f8:85:bb:3c:35:91:21:ad:7c:64:32:23:8c:8d:6a:40:
         13:43:ec:8d:ce:a4:5c:76:2e:fe:fd:60:87:f9:66:f6:e7:bf:
         b2:b4:2d:c7:67:c4:33:f0:87:6a:ea:8e:28:11:ab:34:74:c5:
         26:ee:94:34:b7:42:6f:46:4d:51:30:c0:57:6e:8b:aa:b2:ee:
         78:c8:2e:d9:ff:69:ab:55:1f:8d:d9:53:bc:ff:cc:e7:92:ed:
         f8:76:a3:84:e2:e4:c4:e9:39:4e:28:f7:d3:f4:a0:df:f9:ab:
         c4:f3:c6:70:c8:90:2c:40:86:2f:bd:06:5a:f5:4c:fd:b5:0d:
         ba:21:3a:ca:c4:b8:83:81:73:21:c7:ad:4e:74:b5:fa:90:bf:
         38:07:57:3e:7a:cb:4b:8e:97:6e:c9:0d:37:de:0f:f3:e4:5b:
         a1:53:85:bf:c2:08:6a:7b:19:1a:95:59:8b:19:fd:49:cf:40:
         06:1d:83:ba:54:9c:35:c6:2f:9d:3f:56:80:55:31:ee:8a:f4:
         b4:91:29:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:34:06 2025 by rpki-client