This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/209a25b2-773a-41ef-bbcd-c7846df6bf48.roa
File:                     209a25b2-773a-41ef-bbcd-c7846df6bf48.roa (raw, json)
Hash identifier:          q/SizejtJ9IoCZ0d2JZXsjWYwFlHf/nj5C3PttzHw88=
Subject key identifier:   AF:B3:A1:0E:46:E6:30:DC:7F:AE:3C:10:8B:18:8E:E1:3F:4A:E3:83
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5AD48D684C2C7AFCA2FE0FA2874F3D918AAE1BCA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/209a25b2-773a-41ef-bbcd-c7846df6bf48.roa
Signing time:             Mon 24 Nov 2025 01:52:10 +0000
ROA not before:           Mon 24 Nov 2025 01:52:10 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1bf2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d4:8d:68:4c:2c:7a:fc:a2:fe:0f:a2:87:4f:3d:91:8a:ae:1b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 01:52:10 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=3856f33441841db3ec36416b6c6a3d0f99799c56f1bec0afe3df2c1312e02825, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:cb:f9:1b:5a:43:23:66:ea:86:86:90:dc:
                    9a:3d:08:52:9d:ed:3f:f0:cd:8a:32:67:d9:71:1b:
                    5d:00:1d:d3:a2:0e:94:e1:04:08:3b:b1:3e:d5:e2:
                    bc:a9:d5:45:fc:1a:66:73:a8:e9:8e:2f:18:9f:b7:
                    66:7b:e0:9f:94:b6:06:85:fb:b0:1a:d5:9b:79:2e:
                    e1:73:45:61:36:0e:68:5d:b2:ad:56:45:05:17:d3:
                    d6:8e:0f:c9:77:d8:43:4c:83:90:e7:e3:cb:0c:5a:
                    e3:fa:c6:95:7b:36:e7:d8:bb:3a:19:00:07:e6:23:
                    eb:a0:10:20:7e:1e:b1:4f:a7:31:4d:14:c5:3d:3d:
                    05:c1:76:15:72:f0:dc:d0:78:64:87:ad:d2:04:cb:
                    31:1a:75:c0:d0:08:54:e3:37:ca:f6:e6:7b:7a:92:
                    9b:d9:85:29:31:42:f5:0d:a8:de:25:fb:d2:fb:be:
                    f8:ef:b3:f9:1d:a0:6b:24:fc:4a:80:40:7f:57:8f:
                    52:0b:bc:50:95:b3:14:bb:96:ab:37:ac:81:89:d2:
                    f0:f7:99:e0:e2:39:2e:43:65:d3:a3:40:a3:29:31:
                    7c:41:e2:44:c1:98:f0:5b:ac:e3:fd:9a:d3:ab:1e:
                    8a:92:a4:1b:b7:97:90:d0:8c:8b:79:fa:e4:cf:98:
                    59:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B3:A1:0E:46:E6:30:DC:7F:AE:3C:10:8B:18:8E:E1:3F:4A:E3:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/209a25b2-773a-41ef-bbcd-c7846df6bf48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1bf2::/47

    Signature Algorithm: sha256WithRSAEncryption
         71:5a:f6:a5:50:d2:62:bc:08:a2:01:63:35:fc:17:ca:69:86:
         3c:ab:f9:1d:b4:79:c8:2c:24:b4:0e:5e:8a:67:45:bf:f0:75:
         d9:8c:f1:49:90:ae:1b:9b:ba:3d:e5:c5:52:a0:23:73:c3:fa:
         67:01:b3:ca:bf:7d:4e:12:82:2e:24:07:24:4a:c2:29:87:c9:
         1e:cf:f5:33:0c:c0:70:b8:c5:25:41:66:63:48:c6:e2:59:44:
         bb:db:d2:7a:72:f2:f8:ee:1a:c6:22:f0:a6:fc:dd:20:d7:c2:
         c7:6f:57:2b:fd:42:e4:7d:a5:94:4e:9a:91:50:e7:a9:a7:d5:
         b6:6a:5a:fe:d7:63:4a:cf:fe:8c:03:a0:b7:41:7c:67:a4:0d:
         bf:64:73:df:ff:6c:47:be:c0:7d:56:3a:d8:de:5f:44:fb:84:
         23:5f:a3:b1:cf:e3:58:0c:72:c4:8c:7e:4e:1e:48:91:8f:10:
         df:ac:8a:a6:cd:f1:a5:6e:cf:b4:a7:6f:26:1d:50:9a:c6:bd:
         c7:77:30:7c:a9:20:51:43:7d:65:b7:7c:8a:f7:c6:6a:cc:b3:
         bb:74:1a:65:38:56:64:f7:23:5d:69:bc:6b:ab:8f:9b:65:1c:
         52:e4:3e:ab:7c:a8:75:1f:51:50:65:90:f3:07:b6:88:30:8d:
         ce:68:cd:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:04 2025 by rpki-client