This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23a2f56b-ffb4-40b9-8336-4a5e18f720af.roa
File:                     23a2f56b-ffb4-40b9-8336-4a5e18f720af.roa (raw, json)
Hash identifier:          ApCIOmTH5u/0MuVbA61I1x/p4ibGWBPVxA7CqJko8gk=
Subject key identifier:   2E:FF:9E:4A:13:45:25:49:D4:D3:F4:47:C1:D3:A0:C1:84:77:8B:44
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5FCAEABF3DF4D424264CA6BE936A4194482D15BF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23a2f56b-ffb4-40b9-8336-4a5e18f720af.roa
Signing time:             Tue 25 Nov 2025 13:50:08 +0000
ROA not before:           Tue 25 Nov 2025 13:50:08 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38b8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ca:ea:bf:3d:f4:d4:24:26:4c:a6:be:93:6a:41:94:48:2d:15:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 13:50:08 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b42ab07d7a8f647c6e1cd2ebdb93f1d47f6b7c82f0312d4574f9b3613b935ce9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:43:48:08:78:e7:e9:d8:44:d1:48:67:3f:
                    2f:dc:91:44:bc:8b:b5:04:1f:4d:ea:93:13:21:bb:
                    36:54:64:79:61:60:70:4b:8f:c5:96:c9:e4:a4:a2:
                    c4:14:ec:b6:6c:4a:00:52:f1:59:4d:f9:f0:d5:80:
                    96:ed:8f:b1:31:c5:4e:78:3e:b0:ef:be:c3:53:e9:
                    24:68:32:28:7d:33:d9:f3:1f:8d:a4:79:5f:c3:51:
                    0b:ca:42:c3:90:76:2c:f6:f0:59:f6:62:a8:f4:2d:
                    61:8b:03:3f:32:3a:68:2e:b6:f8:41:92:5f:fc:38:
                    19:5d:c4:07:52:f3:b9:82:e9:92:0a:bd:c1:e9:5c:
                    97:f7:80:03:66:05:65:85:ba:c4:51:38:c1:3c:95:
                    0b:3d:55:45:6c:89:26:82:ac:85:db:82:3c:41:ba:
                    73:e0:f4:00:29:f5:15:ef:45:68:f8:49:fb:c6:33:
                    db:c2:26:19:86:11:fe:02:bb:5a:6e:05:11:85:83:
                    4a:40:70:d9:5a:97:20:5a:cd:8b:ce:1d:21:0f:50:
                    36:1f:4d:c6:ee:de:20:8b:a2:47:6c:9f:e7:d7:24:
                    01:55:49:ed:e6:4b:a3:2c:62:24:28:ed:5f:fb:6d:
                    1d:a5:99:8a:0c:ff:ec:0c:71:14:4d:cb:a7:da:0f:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FF:9E:4A:13:45:25:49:D4:D3:F4:47:C1:D3:A0:C1:84:77:8B:44
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23a2f56b-ffb4-40b9-8336-4a5e18f720af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38b8::/45

    Signature Algorithm: sha256WithRSAEncryption
         9e:00:df:f1:a7:1c:94:90:31:41:bc:b8:0f:f0:c9:dd:7c:4c:
         bc:ba:ea:15:69:82:68:04:ac:76:7e:32:ba:57:44:36:40:b9:
         2c:6a:f4:9b:42:6b:e4:3f:8b:25:21:96:8f:d6:06:dd:e9:88:
         0c:b6:c1:7c:fe:49:9c:ec:84:70:0f:91:5d:e1:79:b4:df:96:
         6e:5b:86:53:17:f6:be:e7:9c:11:31:b9:5b:d6:a8:a0:3d:ac:
         a3:6d:ff:51:03:f8:f4:5c:9b:4f:9a:fc:04:80:77:63:bd:b9:
         8d:f8:72:48:8e:41:65:15:dc:61:97:7f:1c:af:eb:e2:48:7a:
         18:a7:15:2f:a1:fc:87:a7:aa:cd:54:c0:e4:48:d3:43:e1:99:
         52:81:ae:46:c4:a2:13:da:d9:b1:7a:72:73:c2:51:19:d3:97:
         56:45:03:50:eb:e8:02:07:11:2f:96:cc:da:b5:63:31:da:57:
         d8:48:ef:75:f3:4a:fc:2a:93:28:0b:f1:81:36:85:17:c1:9d:
         76:af:32:a1:2e:42:dc:b2:c4:5d:d6:26:3b:93:8f:f0:0f:10:
         eb:70:2d:1e:ba:41:9a:6a:a8:b1:2f:af:d3:ad:8f:69:0c:2e:
         3c:f5:e8:7d:c5:b2:0c:51:0a:80:94:58:d5:48:04:9a:c0:cf:
         66:7a:b0:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:41 2025 by rpki-client