This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/248ab006-c7db-4e38-96dd-d0b88bde763c.roa
File:                     248ab006-c7db-4e38-96dd-d0b88bde763c.roa (raw, json)
Hash identifier:          BKStUHuq2kaKvkxrxMB8+tzQJnYtz8NklXpTrjD4QwE=
Subject key identifier:   61:9E:0D:10:B9:9F:81:02:29:0B:AC:72:6A:E2:28:80:00:C0:5E:7E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       220606C95F1CF4B8ED65432A5AE0925C7D43C94F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/248ab006-c7db-4e38-96dd-d0b88bde763c.roa
Signing time:             Tue 25 Nov 2025 14:50:04 +0000
ROA not before:           Tue 25 Nov 2025 14:50:04 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e98::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:06:06:c9:5f:1c:f4:b8:ed:65:43:2a:5a:e0:92:5c:7d:43:c9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:50:04 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=d00f0fc81c5a1c9ee1f02c783c95bde5b505e2b78e99262b7a076ffaac7dea4c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:f4:9a:41:8b:f1:81:d3:a3:33:53:c6:cd:
                    7a:93:1f:e1:80:a0:41:cc:b1:95:80:f2:6a:11:8a:
                    b3:9f:85:b4:24:8f:80:da:fd:b7:c0:03:c0:fd:39:
                    88:e1:95:c1:8c:81:74:7f:73:21:83:96:ae:89:4a:
                    e2:8b:c8:d7:5b:46:50:2e:95:7a:1b:aa:ca:aa:a1:
                    6f:a9:05:dd:a6:69:de:65:be:9f:8c:ca:2a:8c:2b:
                    73:d4:30:c9:3f:10:e5:56:c6:59:75:9b:e1:97:6a:
                    ea:d1:81:ea:35:7c:b7:75:57:c9:d9:61:ef:f4:63:
                    3f:27:b4:6d:a1:6a:2a:1d:aa:31:36:23:21:e0:37:
                    c0:54:1d:38:ef:2d:e8:67:1d:6c:06:2b:66:05:a1:
                    20:ac:83:2c:66:b2:34:15:26:9e:07:f4:a5:aa:ec:
                    35:5a:74:0d:f0:fa:cb:d1:36:bc:80:a8:8b:3a:9f:
                    c7:cf:3e:62:fa:62:34:c1:6b:50:39:f5:1c:00:39:
                    00:32:58:4e:ab:4f:b4:7a:b0:45:4c:4c:3d:4b:ef:
                    fc:a5:7c:31:57:f5:da:e8:0a:e8:ea:d1:39:0a:e1:
                    4a:51:99:c5:29:36:10:22:8e:e3:f1:cf:49:40:9c:
                    4f:0f:61:42:b8:15:2b:e9:99:a3:9d:46:69:59:57:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9E:0D:10:B9:9F:81:02:29:0B:AC:72:6A:E2:28:80:00:C0:5E:7E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/248ab006-c7db-4e38-96dd-d0b88bde763c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e98::/46

    Signature Algorithm: sha256WithRSAEncryption
         3b:de:fb:1e:eb:64:56:94:2b:24:d3:7e:15:fe:f5:ce:35:e6:
         88:01:88:cd:9b:01:07:e1:f2:6e:a0:16:2a:85:ad:e9:5b:f2:
         5f:a7:da:3f:9f:4a:11:87:82:8d:f8:a4:63:bf:7d:17:cd:b6:
         c7:07:47:92:94:a0:64:e1:b8:a7:c4:4e:d2:f8:81:d5:d6:a4:
         2d:5a:8a:bc:ff:72:71:9f:8c:24:7d:1f:29:f3:2b:49:57:20:
         05:e4:33:ad:8f:27:cb:26:c9:47:d9:53:58:1a:21:0b:39:5d:
         91:22:9b:e8:94:e8:1f:6f:fe:0e:4c:fb:af:96:d2:0c:45:31:
         68:a1:aa:08:28:61:10:d0:63:8e:96:41:8a:c5:58:3c:c3:e3:
         fa:56:c6:75:66:90:ad:27:d5:a2:b8:ad:39:71:a2:44:97:a5:
         cc:b6:24:87:0f:0c:d3:8f:ce:48:fa:b1:6c:fd:22:b8:b8:8c:
         35:dc:80:af:69:8f:d9:1e:a8:88:00:e4:fe:b7:d1:66:88:4f:
         cf:59:b0:b5:d7:44:7d:42:25:78:d6:be:7f:27:4f:c8:1b:5c:
         66:0f:ae:48:ee:54:b5:df:d0:1a:fd:cf:66:67:93:93:f2:f9:
         b9:d6:4b:10:52:ff:1b:25:44:9a:ad:df:c9:19:b8:b9:85:2b:
         4e:39:17:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:51:31 2025 by rpki-client