This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/236cb033-a7da-4716-b125-9dafbcb8abef.roa
File:                     236cb033-a7da-4716-b125-9dafbcb8abef.roa (raw, json)
Hash identifier:          Ktp65K3zTfnzVkDtOeYQdQHq1AwaflFooaAK37sca7g=
Subject key identifier:   54:A4:4F:7C:5C:DF:C7:A6:DF:2F:A1:EB:5B:25:52:34:13:58:49:94
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       721DD1593C916D7DCAA1F6DBD5B2EEC7B1597756
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/236cb033-a7da-4716-b125-9dafbcb8abef.roa
Signing time:             Mon 24 Nov 2025 03:31:04 +0000
ROA not before:           Mon 24 Nov 2025 03:31:04 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3160::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1d:d1:59:3c:91:6d:7d:ca:a1:f6:db:d5:b2:ee:c7:b1:59:77:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:31:04 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=cfc582fc73950e60ebac24f6223cd75b5f3af91509b9a52cfbda618723cb8ff6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:9d:7e:c9:b4:15:86:56:a5:6e:21:d6:45:
                    82:da:d8:45:69:82:26:a6:ff:cd:9f:07:47:ac:d9:
                    65:43:2c:3a:b8:26:55:c1:11:0d:0d:e3:2c:39:c5:
                    5c:f4:5f:a5:09:aa:f7:11:2e:25:bd:7f:35:27:04:
                    d3:b1:f1:da:1f:7c:c2:bb:06:f1:7d:67:74:96:33:
                    29:c7:74:51:af:f2:7d:a9:a8:f8:32:97:0e:23:58:
                    05:b0:2a:b2:c7:ac:c2:52:17:00:28:25:95:22:89:
                    ef:a1:af:c1:68:41:24:52:ff:fa:fc:fb:51:e6:51:
                    ee:d2:af:8c:44:83:f0:5b:3f:7e:1c:43:3f:d2:b7:
                    7c:1e:f7:c9:2d:ca:68:83:15:cc:0f:8a:42:4c:5a:
                    f0:e5:25:ec:38:20:43:2d:0f:c2:d7:a7:1a:27:9a:
                    85:a2:05:9d:1b:ef:16:e7:33:a6:3c:33:c6:8a:d0:
                    9a:48:3b:2b:2e:57:e4:52:d2:1f:85:1a:a2:08:d3:
                    b0:e1:01:b8:ef:66:4e:0b:20:19:55:4a:41:c3:ec:
                    64:1e:2b:e0:85:8e:11:2f:36:39:08:e9:0b:14:df:
                    31:c2:a4:54:af:db:ec:e1:0c:d0:00:a8:b5:78:40:
                    bd:d0:c8:50:03:69:66:b8:31:9a:f1:6b:25:b6:2f:
                    67:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A4:4F:7C:5C:DF:C7:A6:DF:2F:A1:EB:5B:25:52:34:13:58:49:94
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/236cb033-a7da-4716-b125-9dafbcb8abef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3160::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:55:59:aa:67:de:d4:5f:dc:e0:10:45:84:8f:e3:04:29:
         17:a2:fb:55:dc:e1:e2:4d:2b:8f:3d:29:4c:f5:c5:ce:be:db:
         1f:c2:38:2c:98:d6:64:ae:f9:26:b8:2a:93:4d:43:1d:68:fa:
         2e:25:13:c7:39:29:17:2c:ad:6d:1c:6c:7a:0f:f6:52:8d:30:
         8e:b7:58:91:33:4d:f4:c6:e8:57:96:75:a6:49:89:45:bd:b5:
         76:9a:10:7b:61:b5:f0:2a:55:03:17:c6:26:1c:92:a7:e2:49:
         be:61:47:ec:08:a1:1f:56:ce:cb:e7:d7:a1:38:50:81:1f:6e:
         3d:2d:d8:20:c1:62:99:b4:be:dc:bd:04:67:2d:43:b8:d2:65:
         60:00:96:5b:94:cc:cb:fb:a8:93:cb:1b:33:9d:58:28:b3:10:
         41:7c:6d:bd:f7:db:5f:58:41:a7:bc:16:e7:da:e7:10:80:fa:
         4c:47:3d:8c:21:6d:89:88:bd:43:00:f7:56:7b:1e:de:91:2a:
         20:41:46:64:d4:96:fd:64:da:d7:35:c3:5d:28:4a:21:f5:a9:
         59:e4:ba:f0:85:d3:96:4e:78:89:f1:2b:85:8a:02:27:78:66:
         a8:f8:2a:d2:92:a2:c3:96:50:17:c7:59:b9:5a:8d:b2:cc:ee:
         8a:0d:8a:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:19 2025 by rpki-client