This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24f3d126-e13d-4b5a-91b6-d8588e51cd3b.roa
File:                     24f3d126-e13d-4b5a-91b6-d8588e51cd3b.roa (raw, json)
Hash identifier:          IjB3j644NkFFATIjt53osbNentJU7c83BSKwG0JZO60=
Subject key identifier:   DF:38:97:0D:5F:A8:60:A8:57:44:2A:EF:DE:CA:6E:C4:BB:33:E0:AD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6F39FD329784D96AC5054C43D3EC6DE6E1204F63
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24f3d126-e13d-4b5a-91b6-d8588e51cd3b.roa
Signing time:             Mon 24 Nov 2025 02:20:39 +0000
ROA not before:           Mon 24 Nov 2025 02:20:39 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ae0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:39:fd:32:97:84:d9:6a:c5:05:4c:43:d3:ec:6d:e6:e1:20:4f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:20:39 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=0d650a2ac4275b6e1e52edf1461b513f5f832a8ba6e060cefe603e9c6c9566d8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:be:98:ce:c3:98:cb:69:f7:a0:eb:d2:dd:
                    e5:7f:2a:26:68:d5:f4:0a:e2:b7:dc:8d:8f:1c:c1:
                    3d:5c:79:f1:6e:04:00:d7:74:95:9c:fb:76:20:8e:
                    e9:10:2a:81:3d:f6:4f:68:31:21:b1:3a:7d:07:e8:
                    3c:11:aa:ea:78:f8:5d:4a:51:8a:89:fd:cd:29:5d:
                    60:ae:02:d3:72:79:be:60:41:92:01:24:52:e8:d0:
                    01:d4:8c:a4:a0:bd:68:c2:19:d1:91:64:a0:53:6c:
                    8e:bc:d3:9a:c1:71:16:c2:26:64:d7:aa:d1:eb:58:
                    8a:ab:f2:9c:1d:7e:e4:94:fc:cf:67:83:df:30:46:
                    64:10:35:28:1b:bd:0c:f4:05:37:c5:54:c7:44:99:
                    8b:74:50:53:84:b0:cc:45:d5:d4:8d:97:54:07:1c:
                    01:2c:a4:28:6d:06:02:31:8c:7a:17:7f:23:53:74:
                    e7:e1:22:9e:f4:68:86:7e:5a:b6:5c:8b:82:8d:cd:
                    69:d9:27:98:5d:0b:32:85:d2:9d:95:ea:2d:ae:37:
                    d6:0d:a5:43:73:1c:b7:81:cf:4b:fe:f3:19:5e:20:
                    98:0a:ec:8b:ea:6f:58:13:84:05:29:e4:47:15:6b:
                    b1:0d:54:21:46:16:6b:6e:d8:7f:5d:d7:50:fa:1c:
                    8e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:38:97:0D:5F:A8:60:A8:57:44:2A:EF:DE:CA:6E:C4:BB:33:E0:AD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24f3d126-e13d-4b5a-91b6-d8588e51cd3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ae0::/47

    Signature Algorithm: sha256WithRSAEncryption
         bb:0e:27:d3:71:28:a1:e1:3a:57:23:bb:17:01:75:19:c2:e9:
         6a:3f:fb:2e:e4:76:42:16:5f:e6:74:9c:2a:87:b6:51:2d:1b:
         ae:40:47:09:7b:09:95:5b:96:0d:96:12:11:e6:c1:5f:eb:de:
         40:64:42:3a:22:fe:43:26:54:2f:9e:0e:a9:fc:fa:c8:c3:2e:
         0f:a4:dd:d7:06:61:73:af:ea:38:6e:ad:42:47:ec:46:79:86:
         2a:78:48:ec:c7:b6:9e:af:f7:38:b1:73:b0:81:90:6c:6b:52:
         98:df:5d:79:49:08:90:02:1d:6e:aa:7e:97:06:e1:b6:65:54:
         d2:87:1d:8c:0f:ea:b2:0b:4a:0f:6c:18:03:fa:03:3a:6f:93:
         65:29:20:3f:94:3b:ee:dd:4b:8a:aa:f6:08:c8:44:09:65:d3:
         ee:98:62:2c:b0:bc:28:af:e4:f9:39:6e:59:87:51:19:39:b1:
         ca:6b:59:6f:64:39:04:19:e9:f6:a5:af:e1:2a:fb:b5:ab:92:
         2d:88:88:2d:15:3e:db:6a:05:27:6f:7c:df:b7:b9:78:1c:88:
         50:88:d2:17:15:3b:71:5c:34:1c:6a:4b:f7:28:d7:24:42:18:
         1f:f8:de:33:a7:02:a0:74:ac:0c:c8:23:8b:59:3b:bb:de:96:
         66:fc:6d:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:06 2025 by rpki-client