This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/220a7e68-1e40-4249-8ca9-818aa78e65cc.roa
File:                     220a7e68-1e40-4249-8ca9-818aa78e65cc.roa (raw, json)
Hash identifier:          pBcW8i4uPYq0KnSCg6HVgKuJ/Rjj5V+ovAhq8LTx2Mk=
Subject key identifier:   94:F4:8A:A3:EE:6F:8B:54:DE:68:F4:5A:E8:AB:E8:CF:78:3C:20:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       711FB8292A90FBFAF1D4FFE01B82274082EC40F2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/220a7e68-1e40-4249-8ca9-818aa78e65cc.roa
Signing time:             Mon 24 Nov 2025 06:20:56 +0000
ROA not before:           Mon 24 Nov 2025 06:20:56 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1d58::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1f:b8:29:2a:90:fb:fa:f1:d4:ff:e0:1b:82:27:40:82:ec:40:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 06:20:56 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=85a220fa2e2d0706399b72c4d1eb4ccd2a6f6dcb1cac444423f7ef5d07aa5b7b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:96:6d:92:85:49:2b:87:90:5f:e9:5f:e7:
                    13:24:02:e2:1b:6d:28:87:a4:1c:3b:54:16:f5:9a:
                    55:87:80:4e:07:86:22:a0:b6:e8:47:ac:db:66:6d:
                    53:fb:d7:12:cc:44:d2:5c:f3:ce:85:cd:09:f3:06:
                    ba:dd:e6:c8:da:db:76:a3:53:b1:89:c2:3c:a2:b8:
                    fe:5b:36:1b:80:b7:b5:10:a1:4e:58:fa:fd:e8:7f:
                    7d:7a:6e:eb:7d:f5:7e:bb:32:90:f4:e7:fa:e4:4b:
                    85:82:da:a6:ae:f9:76:c9:32:74:8c:6e:09:1a:b4:
                    c3:8a:64:b3:df:a0:29:8e:c0:51:13:dd:a5:d8:97:
                    06:39:ab:de:f0:89:84:c4:be:82:36:64:b5:5e:6f:
                    81:e8:3e:c6:dd:02:c7:6c:b7:ea:80:2e:2a:a7:b5:
                    b4:20:df:c4:c5:94:7c:fd:b5:d5:c8:d6:54:af:bc:
                    7c:23:2e:b6:b0:5b:f2:e7:93:d6:a0:f2:cb:c9:90:
                    34:c9:46:74:01:50:df:2b:11:7d:e2:34:3f:8f:e3:
                    7d:6d:c4:1b:ee:56:eb:0e:d5:80:ba:a7:4b:dc:b2:
                    4d:1f:88:07:55:b3:0b:64:f5:74:2b:95:fa:a6:07:
                    a4:d9:d9:db:32:d0:5b:af:fd:a4:81:9a:2b:6d:79:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F4:8A:A3:EE:6F:8B:54:DE:68:F4:5A:E8:AB:E8:CF:78:3C:20:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/220a7e68-1e40-4249-8ca9-818aa78e65cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1d58::/47

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:11:69:fd:c1:2b:e6:cc:61:f7:a7:6d:41:9a:b5:15:06:
         94:19:5c:5f:75:54:c3:26:1e:9d:f4:b2:80:4d:ab:68:5f:9a:
         d7:e0:fa:1e:f4:1c:02:83:f7:20:9e:c2:43:d6:e0:80:28:ae:
         58:0d:a9:69:2f:67:ef:1e:75:43:b5:fe:6c:6a:89:4f:24:69:
         f3:83:18:3f:c1:08:31:f4:72:5a:03:27:3d:23:56:71:cd:11:
         35:19:26:bf:29:b3:0e:51:3d:44:cb:68:07:bf:51:93:f2:02:
         b1:54:62:d4:50:94:0f:08:ca:ad:9e:cd:af:b0:30:e8:20:53:
         17:92:a8:47:4d:a9:f9:90:79:1d:95:33:d1:69:21:94:89:23:
         91:99:4e:e2:24:31:07:9c:4e:90:c3:f1:ec:07:20:0d:4e:cb:
         65:25:b9:45:ec:21:c0:cb:c0:5e:d3:4c:36:c5:3d:94:0d:7d:
         29:47:78:fd:99:7e:c1:fb:ac:5b:1f:7b:b8:ed:42:93:1f:31:
         9d:98:b8:86:d7:96:7a:ec:b5:25:2d:5b:5e:a1:f3:09:11:82:
         d5:b6:95:98:f4:99:16:41:89:cb:d2:f0:88:e8:3b:41:0a:fe:
         6e:ae:53:cf:ad:6a:b1:1b:f1:bd:55:c4:ef:fe:85:ae:7d:6b:
         1c:26:81:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:52:40 2025 by rpki-client