This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/229508b9-9faf-4e61-ac3c-aaae4d881cb3.roa
File:                     229508b9-9faf-4e61-ac3c-aaae4d881cb3.roa (raw, json)
Hash identifier:          omXRFY67UspinNXVQ6P6NQojV+xO6M4r9338nJ3pkag=
Subject key identifier:   51:98:5A:73:13:8D:44:5F:2F:3B:2F:F7:8E:FE:CA:DE:BF:87:B0:6F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       57CFE3A5A5FD65FCD9EFF4A45F89DA5ED3DE5569
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/229508b9-9faf-4e61-ac3c-aaae4d881cb3.roa
Signing time:             Tue 25 Nov 2025 02:41:29 +0000
ROA not before:           Tue 25 Nov 2025 02:41:29 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3378::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cf:e3:a5:a5:fd:65:fc:d9:ef:f4:a4:5f:89:da:5e:d3:de:55:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 02:41:29 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=ed9a1dee94de6c8215c938ba2fd648456033cb94eec2fa6d42a1a0f1fa1ef8bd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:b6:07:7c:13:88:3f:ea:65:06:2b:0b:8a:
                    e3:30:05:f1:ec:3e:2d:d9:ef:e8:cb:fa:c5:a8:2c:
                    69:e5:9d:c7:f3:5e:97:92:85:18:99:ae:b8:c5:af:
                    da:5c:d3:4d:42:aa:5d:09:91:3f:a1:01:86:62:cb:
                    87:6e:f4:4c:f0:54:84:1d:8c:7e:dd:0f:84:44:77:
                    4b:0f:3c:82:6b:2d:f5:95:7f:c9:6b:84:e0:7e:a5:
                    fb:19:00:eb:24:3c:a5:a0:1f:7e:e2:f9:dc:fd:16:
                    ef:70:c9:f5:be:3d:94:93:5c:b8:df:f7:9d:48:e4:
                    9b:48:ea:1e:dd:2f:74:08:75:9c:e6:cd:f1:27:08:
                    7e:f2:0e:46:ce:b6:25:20:73:bd:20:a4:b9:f1:a6:
                    8c:e5:74:6f:3c:e5:40:46:81:b6:37:ca:a5:0c:e2:
                    e2:fa:6d:52:f8:5c:dc:e3:6d:61:71:3d:d8:c9:8b:
                    ca:8d:52:ae:1a:a2:8f:87:f5:10:3b:3b:fc:85:3a:
                    5d:52:5b:2a:fc:0a:0d:2d:82:9b:dc:64:1b:c3:05:
                    2d:70:09:84:ba:f8:e5:53:ed:e4:8e:ce:c7:1a:59:
                    a3:b9:6f:25:46:a1:24:0d:c5:ef:6d:19:97:d2:f3:
                    1b:40:fe:14:2c:63:b2:c8:50:60:9d:a5:3b:ab:66:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:98:5A:73:13:8D:44:5F:2F:3B:2F:F7:8E:FE:CA:DE:BF:87:B0:6F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/229508b9-9faf-4e61-ac3c-aaae4d881cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3378::/45

    Signature Algorithm: sha256WithRSAEncryption
         b3:0b:f4:91:ae:31:d1:e3:ca:77:f8:b9:7c:8f:2a:52:b5:44:
         0b:3f:cb:d3:6e:b9:ef:6e:8e:c8:10:a3:af:62:44:a7:1e:03:
         bf:39:8b:71:7b:15:94:e2:0e:12:cf:09:03:0e:3e:77:f7:9c:
         6c:e6:8a:7a:62:6d:79:44:c2:8a:4e:a1:ac:25:0e:7e:77:db:
         1c:6a:7a:d0:52:b7:2d:e7:95:35:b6:f1:2d:27:ea:94:b1:f3:
         5c:8b:2c:bb:48:4b:87:9f:b7:1a:39:07:00:c4:16:9f:5a:4b:
         0c:44:99:9e:44:c5:02:e3:8f:82:90:f6:7e:1e:12:d9:c5:23:
         22:65:e1:67:d3:9c:16:93:fd:d3:00:6a:61:50:87:07:be:7d:
         02:73:03:bd:62:9e:b2:db:2a:0f:b4:9c:7c:b8:e0:d9:21:90:
         6d:55:70:32:3b:8c:b7:41:2e:32:0d:f4:9b:c8:c5:53:10:1f:
         1e:de:27:68:97:4f:04:7a:af:54:7f:68:7b:89:4a:d9:3c:0d:
         ab:93:8c:80:d1:4b:8b:b2:54:1e:f8:0e:05:23:1e:b8:27:93:
         17:b3:d9:1f:a5:41:a6:dc:df:5a:43:fa:2d:fc:76:a8:cd:55:
         dd:a0:3d:d6:c4:3d:7b:02:67:6b:c3:45:d7:67:32:70:55:52:
         ef:70:e9:33
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUV8/jpaX9ZfzZ7/SkX4naXtPeVWkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDI0MTI5WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZDlhMWRlZTk0ZGU2YzgyMTVjOTM4YmEyZmQ2NDg0NTYw
MzNjYjk0ZWVjMmZhNmQ0MmExYTBmMWZhMWVmOGJkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCl97YHfBOIP+plBisLiuMwBfHsPi3Z7+jL+sWoLGnlncfz
XpeShRiZrrjFr9pc001Cql0JkT+hAYZiy4du9EzwVIQdjH7dD4REd0sPPIJrLfWV
f8lrhOB+pfsZAOskPKWgH37i+dz9Fu9wyfW+PZSTXLjf951I5JtI6h7dL3QIdZzm
zfEnCH7yDkbOtiUgc70gpLnxpozldG885UBGgbY3yqUM4uL6bVL4XNzjbWFxPdjJ
i8qNUq4aoo+H9RA7O/yFOl1SWyr8Cg0tgpvcZBvDBS1wCYS6+OVT7eSOzscaWaO5
byVGoSQNxe9tGZfS8xtA/hQsY7LIUGCdpTurZjlJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUZhacxONRF8vOy/3jv7K3r+HsG8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzIyOTUwOGI5LTlmYWYtNGU2MS1hYzNjLWFhYWU0ZDg4MWNiMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAM3gwDQYJKoZIhvcNAQELBQADggEBALML9JGuMdHjynf4uXyPKlK1
RAs/y9Nuue9ujsgQo69iRKceA785i3F7FZTiDhLPCQMOPnf3nGzminpibXlEwopO
oawlDn532xxqetBSty3nlTW28S0n6pSx81yLLLtIS4eftxo5BwDEFp9aSwxEmZ5E
xQLjj4KQ9n4eEtnFIyJl4WfTnBaT/dMAamFQhwe+fQJzA71inrLbKg+0nHy44Nkh
kG1VcDI7jLdBLjIN9JvIxVMQHx7eJ2iXTwR6r1R/aHuJStk8DauTjIDRS4uyVB74
DgUjHrgnkxez2R+lQabc31pD+i38dqjNVd2gPdbEPXsCZ2vDRddnMnBVUu9w6TM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:27:17 2025 by rpki-client