This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22ce9ce6-7577-453d-b516-d789334cbf9f.roa
File:                     22ce9ce6-7577-453d-b516-d789334cbf9f.roa (raw, json)
Hash identifier:          C6fbjKzF9vDSVWfJ6j2S86JsTaaBKrVzc6rbu7UvN5g=
Subject key identifier:   29:7B:32:A9:53:BE:F6:D3:8C:CD:FC:6A:8A:8D:67:E9:4A:41:35:5C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       019E1947D758B733D2B6A01999FF1F2C3ACADBDD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22ce9ce6-7577-453d-b516-d789334cbf9f.roa
Signing time:             Mon 24 Nov 2025 02:51:37 +0000
ROA not before:           Mon 24 Nov 2025 02:51:37 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2abc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:19:47:d7:58:b7:33:d2:b6:a0:19:99:ff:1f:2c:3a:ca:db:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:51:37 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=0ec7cfdab2fe016688af775445c0b1d98c2bb02cf307444d02bf08bcb241536e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:9d:23:1a:d6:45:8a:7d:e3:af:76:4c:d1:
                    15:87:e1:bc:b5:ee:45:c6:d5:3a:c5:fc:78:2e:c4:
                    7b:04:21:86:ea:07:c2:0e:20:7d:84:d7:3e:3c:ab:
                    ef:b8:49:fa:b8:12:d3:63:99:bc:3b:03:4d:8a:b4:
                    a8:57:d3:00:7b:05:9c:f2:9a:04:f1:14:bb:7f:cb:
                    b0:84:24:97:95:ec:2e:8a:ce:90:bd:9b:8b:11:51:
                    dc:6c:08:b4:f7:72:0a:40:dc:58:3e:e6:e5:60:ce:
                    20:d6:c3:55:fd:bc:80:88:4c:55:70:b6:08:fb:b6:
                    a5:7b:2e:83:32:a1:d2:27:57:74:a4:b4:d1:f6:47:
                    a8:01:9f:71:c5:a4:7f:aa:55:60:ca:3c:97:b3:8b:
                    b4:3a:2d:20:cb:15:c0:c2:fe:25:89:ee:18:9d:b4:
                    88:ec:22:2a:fc:35:02:db:89:17:51:4b:0c:4a:3a:
                    da:22:c4:38:b2:57:49:9b:ec:ba:47:5a:60:1e:1f:
                    57:3e:07:de:13:8e:7e:b3:d1:93:81:4d:b3:28:0a:
                    ce:0c:7d:35:6a:ec:e1:a2:c4:e6:50:2e:82:29:17:
                    05:27:89:1a:ab:f1:9a:ba:11:88:66:d5:65:25:a6:
                    c2:2f:eb:fc:f9:ae:5e:94:27:53:76:b8:bf:6e:e8:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7B:32:A9:53:BE:F6:D3:8C:CD:FC:6A:8A:8D:67:E9:4A:41:35:5C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22ce9ce6-7577-453d-b516-d789334cbf9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2abc::/47

    Signature Algorithm: sha256WithRSAEncryption
         97:bf:52:35:7d:92:90:f9:e3:69:50:e3:72:eb:6c:95:30:cf:
         f6:3f:8f:f7:69:9d:53:60:a5:4f:be:63:85:be:2a:15:f9:3e:
         ee:85:e9:1d:86:3a:30:a4:8d:f2:32:95:cc:2f:dc:e4:7b:73:
         70:86:29:2d:9b:29:05:2f:69:4e:23:1d:fd:68:52:e7:24:08:
         88:d6:6d:0c:ee:41:98:b2:dd:e7:55:7e:8a:e7:cd:b1:a8:14:
         ee:e3:5b:7d:02:bb:7c:15:15:c2:5f:d3:a5:e9:55:6c:61:45:
         4a:34:d9:39:3c:45:b6:59:dd:d8:6c:45:5c:83:38:e6:0f:2f:
         4c:f0:ee:ad:46:98:04:de:f9:db:dc:9b:e9:26:0e:83:16:3b:
         f1:f4:0f:94:26:0e:4b:b2:00:7d:f0:fd:d8:0f:25:01:71:4f:
         7f:4d:02:57:83:1e:9c:5c:9b:ed:22:ad:87:4b:84:a0:b1:f3:
         c9:27:98:16:e5:0e:6e:1b:a1:7c:41:e1:80:7f:5f:8f:cd:57:
         5d:a0:a0:73:47:f7:a8:24:86:ad:63:b6:39:8b:24:e6:f6:e4:
         ec:89:40:df:53:a4:3a:4e:21:89:3c:c5:18:86:67:a3:24:13:
         bf:01:cb:b7:11:f2:16:8d:13:10:4d:f8:01:d0:a1:c4:d9:4e:
         9e:d0:c6:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:19 2025 by rpki-client