This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1db184eb-9ace-4555-be1d-f0a643f24dfe.roa
File:                     1db184eb-9ace-4555-be1d-f0a643f24dfe.roa (raw, json)
Hash identifier:          DHa4cY9Z0ImRI0x6RcPONQIAOvxW/drThI8o2nvPsnU=
Subject key identifier:   01:A2:0F:EA:04:CF:E8:5B:DD:73:45:BB:6D:C9:BD:41:44:66:E8:11
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       560EF149CB673EC275EA6797F48B9B26EA631DDA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1db184eb-9ace-4555-be1d-f0a643f24dfe.roa
Signing time:             Tue 25 Nov 2025 05:30:54 +0000
ROA not before:           Tue 25 Nov 2025 05:30:54 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3820::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0e:f1:49:cb:67:3e:c2:75:ea:67:97:f4:8b:9b:26:ea:63:1d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:30:54 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=219ba2f08de18992428d05fee2f0cdc7036ab2fea39302884995216cabb8a644, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:30:c6:c8:10:e5:40:c3:9f:34:8e:be:25:
                    1b:f6:92:4b:27:c5:8d:62:20:6c:f4:2a:a7:d5:fb:
                    6f:0f:6b:ee:36:69:93:b4:be:4b:1d:9a:14:8d:28:
                    1e:97:b7:f3:ac:61:0d:9d:57:f9:60:3e:37:5e:ae:
                    aa:66:76:1b:54:72:2f:71:54:ec:6b:21:d5:02:94:
                    95:0e:51:61:ed:e4:ff:f7:86:44:48:94:ce:d3:f5:
                    17:1f:6d:4b:97:c5:dd:43:28:8b:b0:67:ac:2a:b4:
                    b2:61:ca:c2:2d:25:89:cb:42:59:00:a8:fe:18:d2:
                    25:a6:8e:e9:38:2a:1a:eb:77:46:24:34:1c:19:43:
                    41:65:67:75:d5:ec:0f:5a:55:f9:cf:0a:3b:e5:58:
                    ba:a7:1e:3e:85:3c:db:4c:95:a5:c5:eb:9f:a2:53:
                    80:15:22:62:01:a0:d2:6e:d0:a3:8d:ee:35:ef:4b:
                    5a:e9:9c:2e:23:85:6a:cc:78:29:47:25:85:b5:2e:
                    94:56:65:22:18:42:b4:b4:09:9e:aa:88:f9:4c:34:
                    e6:ae:10:10:1d:a7:1a:db:fa:52:37:ae:82:d7:79:
                    08:d7:e7:a7:2f:cb:1e:43:54:b0:c8:31:29:d4:56:
                    3a:52:77:91:e4:61:0e:0e:06:e1:43:45:fa:82:04:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A2:0F:EA:04:CF:E8:5B:DD:73:45:BB:6D:C9:BD:41:44:66:E8:11
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1db184eb-9ace-4555-be1d-f0a643f24dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3820::/45

    Signature Algorithm: sha256WithRSAEncryption
         3c:f5:69:1b:fe:47:7a:58:85:3e:f5:f2:ad:8d:3b:39:b7:89:
         6d:ca:06:48:75:50:7a:a4:03:6b:6c:a2:61:f9:92:23:a6:0b:
         f4:53:9e:79:09:95:bc:d9:1e:d2:71:9b:f3:8e:d7:f2:a5:01:
         a7:85:25:37:1a:98:31:db:98:d5:bc:6f:68:fa:33:ee:16:1b:
         3d:eb:d2:c1:0e:5c:44:69:9d:29:60:a8:fc:e7:1d:c9:bb:45:
         ed:4b:87:27:4d:66:d7:48:f0:ce:fc:e1:d1:11:fc:47:bf:d9:
         57:9c:04:43:48:e1:76:c1:af:15:3f:34:42:af:02:24:3a:6e:
         0f:db:d3:37:1c:20:60:d7:4e:c1:49:1e:5d:d4:51:18:dd:fd:
         f8:e8:e9:1f:85:74:06:c8:85:87:fa:cf:39:63:31:7c:94:66:
         b3:64:fc:00:ab:15:35:d7:f1:2e:49:57:9e:24:b0:dc:4d:61:
         0d:55:e3:18:d7:a4:68:9c:fa:d1:5d:41:c3:ee:3c:0a:cf:c9:
         d4:af:56:de:f7:a7:89:fd:1c:8c:0e:c1:51:04:2a:aa:df:38:
         68:62:17:ee:18:db:e6:82:d1:4d:51:dc:bb:76:f5:22:18:82:
         99:ef:db:7f:39:d8:5c:58:a3:65:f3:d4:cd:68:36:e7:bd:2a:
         b1:b0:89:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:51:17 2025 by rpki-client