This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1df0434b-86c1-4f16-b5c2-06db7b2c2713.roa
File:                     1df0434b-86c1-4f16-b5c2-06db7b2c2713.roa (raw, json)
Hash identifier:          iIchyd7rOoIdIPgp3MWyPEZj3mQdemUF8ZYpAu82yr0=
Subject key identifier:   18:F6:0B:E1:2F:6E:81:94:C4:E3:94:D9:C9:90:23:95:BC:9F:0B:02
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       03F22217486030D803DD03736552BABDDFC79290
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1df0434b-86c1-4f16-b5c2-06db7b2c2713.roa
Signing time:             Mon 24 Nov 2025 02:31:51 +0000
ROA not before:           Mon 24 Nov 2025 02:31:51 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1568::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f2:22:17:48:60:30:d8:03:dd:03:73:65:52:ba:bd:df:c7:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:31:51 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=25c3450eae7fc51aa2c27d87e1c6b410b33f6b8b270b3c552f64c6bc7488ff89, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:7d:54:8c:1b:c4:9b:31:72:1b:c3:5d:54:
                    3f:5d:6d:f1:08:c2:ea:7b:d6:b0:5b:0c:62:29:06:
                    6c:ec:b3:d9:b6:68:41:8c:b0:72:fe:26:e0:b8:00:
                    45:38:29:91:2e:4a:c5:93:5c:00:6d:2f:24:79:49:
                    72:ee:5b:a0:c3:e8:1e:4a:63:2f:3d:79:c0:4b:b9:
                    ac:bf:76:7a:a0:e3:07:e0:e2:29:c8:4f:85:df:14:
                    d2:20:c2:ca:f7:9b:ff:c5:62:17:be:09:9e:17:ef:
                    b7:7a:ff:30:75:96:f7:29:98:fe:88:fe:3a:6b:bb:
                    b8:b0:4a:f6:3f:15:e5:09:5f:47:d0:6b:3d:a1:97:
                    33:0b:31:5f:0a:68:b2:f3:20:f7:cc:a8:a1:57:5d:
                    59:85:c7:9f:46:f2:20:44:46:a2:7f:9a:76:29:43:
                    0d:e1:54:d9:eb:da:e2:c4:5b:e9:93:e9:4b:58:05:
                    49:b9:1f:7c:5a:91:64:e1:52:2a:5e:83:f3:a6:a3:
                    f0:36:d2:0a:de:12:24:15:43:54:ff:07:2d:ca:41:
                    d1:6b:f7:9e:19:7c:76:cf:d8:d8:6d:1b:71:36:8e:
                    83:9b:29:4b:d7:3f:36:45:11:37:40:a5:e6:ac:09:
                    fc:cd:9d:a2:d5:75:2d:f3:e2:b3:42:f3:85:d2:19:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F6:0B:E1:2F:6E:81:94:C4:E3:94:D9:C9:90:23:95:BC:9F:0B:02
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1df0434b-86c1-4f16-b5c2-06db7b2c2713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1568::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:76:f2:0a:c6:98:96:a4:24:8a:b7:36:4a:33:04:37:f4:ab:
         55:8c:80:a2:2d:b9:d1:cb:75:49:48:56:0a:ea:6d:c9:3d:6d:
         5a:21:e9:7f:9d:53:cf:33:b9:30:bb:88:3a:92:20:88:a5:11:
         32:99:44:f8:6b:1b:8b:4b:b3:fd:d3:f4:fd:f2:3e:df:67:57:
         69:9c:15:47:16:11:74:df:69:eb:e2:a1:9e:dd:11:c1:bb:ce:
         cb:df:60:1f:10:29:91:ba:df:29:16:e7:91:80:b4:77:b8:92:
         63:29:d5:65:48:49:a2:6b:72:9e:33:1e:2c:52:5c:a7:3d:c9:
         c4:bb:ee:aa:3b:9e:8f:83:3a:8b:65:3c:bd:ff:33:3d:d3:e0:
         cb:3d:e2:51:3f:3a:b6:cf:af:70:a1:a4:66:b6:43:d2:40:e0:
         e0:a0:a0:bf:8c:af:bf:cd:64:2d:21:b8:d7:f6:39:f7:58:6d:
         fd:3f:e7:f8:c6:57:e0:e9:37:13:bf:1f:20:8b:a6:e7:07:40:
         91:16:eb:e9:cd:2f:b6:14:21:92:20:83:37:eb:c8:57:51:82:
         30:82:be:ac:41:de:91:2e:56:95:a7:ca:75:19:54:29:04:24:
         0d:b4:98:58:04:25:21:96:f5:f2:8c:b2:45:9c:59:fe:5b:4f:
         9f:7a:95:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:03 2025 by rpki-client