This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27d5a8ba-860f-4e2b-9bc1-6b2d364c9e7a.roa
File:                     27d5a8ba-860f-4e2b-9bc1-6b2d364c9e7a.roa (raw, json)
Hash identifier:          llniQeMdPsg1EZKr/VN/G8uN0MXkik90A8WH3nmNhlU=
Subject key identifier:   77:08:5F:D5:62:5C:AE:82:67:6A:63:21:ED:35:D0:EE:A2:F0:B1:25
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       67FEFD34391CCA0C7B0FC5411D2AEE4F3B895485
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27d5a8ba-860f-4e2b-9bc1-6b2d364c9e7a.roa
Signing time:             Mon 24 Nov 2025 00:50:12 +0000
ROA not before:           Mon 24 Nov 2025 00:50:12 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1b46::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fe:fd:34:39:1c:ca:0c:7b:0f:c5:41:1d:2a:ee:4f:3b:89:54:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:50:12 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=6656dca5fbcb6ad7eb657d98be88b98e3770b7be8bb5457856d3084e06393f0f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:90:9e:2f:e1:c9:6e:55:71:2a:1d:eb:63:
                    a1:b6:1d:3b:c2:e1:52:cb:81:31:4f:a8:b4:38:78:
                    db:9a:82:64:bc:b2:eb:62:f1:e6:02:ad:01:1d:f3:
                    1f:9c:aa:12:47:cb:89:c8:9e:da:8a:96:59:77:61:
                    68:8d:ca:60:1a:8d:ac:2e:d8:9c:8e:6d:11:47:83:
                    a3:07:44:f5:4d:ea:17:b4:99:ad:2a:01:b8:39:64:
                    14:b7:02:cf:34:be:26:84:12:04:e5:c8:29:21:37:
                    d6:4f:93:be:a3:0d:37:be:18:7a:85:80:a8:04:f7:
                    66:e9:fe:9b:10:bb:ab:db:d1:2c:6d:6a:8b:40:d2:
                    2c:ff:8a:a1:8b:b0:41:e2:c8:09:e7:64:a0:88:ac:
                    06:c3:14:52:72:ca:da:e1:7d:8f:25:d1:9c:34:72:
                    b9:f3:d5:9e:de:dc:bd:56:ff:05:ca:38:a3:77:52:
                    6e:e9:1a:92:fb:f8:57:20:b3:1d:03:dc:9f:45:1e:
                    d8:f5:ef:e7:1b:ed:73:72:5f:2e:5c:51:a1:6f:83:
                    2b:76:81:7b:90:19:f2:5a:df:15:b4:c2:52:a5:71:
                    e6:61:dd:31:3a:d2:e7:17:bf:8d:e2:a3:65:fc:8c:
                    f4:15:8c:c9:97:af:2c:af:60:a6:5e:99:50:71:10:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:08:5F:D5:62:5C:AE:82:67:6A:63:21:ED:35:D0:EE:A2:F0:B1:25
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27d5a8ba-860f-4e2b-9bc1-6b2d364c9e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1b46::/47

    Signature Algorithm: sha256WithRSAEncryption
         53:68:7c:ef:bb:8b:b7:ef:f1:bb:61:c2:85:cc:02:7f:44:04:
         f8:0e:9b:e1:22:3f:34:4d:a4:45:17:9e:6f:f9:2f:9a:8b:18:
         74:15:f1:0c:52:d9:9c:cd:c9:c3:83:d6:2c:0d:2e:35:bf:4c:
         11:05:fd:61:a2:1d:81:47:3a:86:e4:32:28:a3:d5:e1:78:02:
         50:5b:03:a1:2b:ff:59:7e:c7:8d:18:94:eb:a0:74:e2:d0:b2:
         9d:91:40:25:a8:24:33:c7:6d:f8:44:b4:ae:31:3c:74:71:ea:
         62:aa:fd:a6:ed:f8:7f:52:15:46:c4:cc:73:09:8d:d0:eb:e9:
         d8:5f:6b:9c:b3:8a:cb:d4:68:55:48:3e:3b:60:f7:9a:63:39:
         6a:0a:b4:94:6e:6f:22:26:e0:12:22:47:65:58:cc:9d:b2:31:
         92:98:7a:7d:9a:97:24:c4:a7:ee:78:36:5f:02:70:54:18:ee:
         79:3f:ea:4b:3b:38:d4:41:26:ac:d4:a4:1d:01:50:56:12:68:
         c7:ef:69:38:ee:f6:bf:5c:42:31:c4:65:81:2c:c9:83:93:1a:
         4b:20:e7:48:d7:e1:59:65:c3:99:b5:fa:e1:10:b2:f5:b7:e3:
         58:fc:5d:73:0d:63:37:38:7f:f7:e9:31:55:43:63:b8:68:ce:
         f1:0f:3f:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:40 2025 by rpki-client