This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28476f1b-f33d-423c-ad29-b9c8e25cbcea.roa
File:                     28476f1b-f33d-423c-ad29-b9c8e25cbcea.roa (raw, json)
Hash identifier:          x+HuTZg+H782+9I4WR3/AKp+MOpas9QjufktiH7TEpU=
Subject key identifier:   B0:FE:47:19:BF:25:E1:B9:B0:FC:03:58:EB:82:49:62:C5:94:B0:BB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5A7BC972FCDC4B74A04866CE3FE4611430CAB423
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28476f1b-f33d-423c-ad29-b9c8e25cbcea.roa
Signing time:             Tue 25 Nov 2025 16:21:40 +0000
ROA not before:           Tue 25 Nov 2025 16:21:40 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36a0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7b:c9:72:fc:dc:4b:74:a0:48:66:ce:3f:e4:61:14:30:ca:b4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:21:40 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=37af73037c253da6d6a8004bd980b8deba8c0e88b80e4e0f2b886c9f81d4ab6d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:21:9c:0e:7b:86:ca:84:2f:a5:a5:55:c6:
                    76:45:9f:6b:d9:f4:2b:4f:42:7a:ee:ef:43:64:03:
                    2a:f7:7c:da:e7:c4:98:20:47:04:0e:4d:07:4f:19:
                    74:48:e9:15:8e:d9:df:64:74:0e:fe:b8:c9:8f:18:
                    9a:0b:78:13:6c:23:6a:ef:82:03:ed:d6:51:f4:b1:
                    cd:64:a8:2c:51:e3:87:4d:2b:fe:57:91:b5:27:fc:
                    e2:54:26:d6:60:99:f2:36:47:fb:54:45:c4:52:b4:
                    98:d4:97:2a:21:62:dc:61:91:b0:27:b2:d0:30:55:
                    c0:d4:39:ec:87:07:b3:20:b4:08:c5:78:21:6c:35:
                    4d:2b:ac:f3:5a:19:2d:ae:0c:be:6f:ce:ec:1d:4a:
                    cc:ce:c1:48:98:58:3e:9d:d6:c9:01:5b:ac:9f:34:
                    de:b0:e6:d0:4e:e5:c3:1c:95:7c:ae:74:38:a6:f4:
                    64:d0:f0:54:26:9a:d6:3d:31:7a:84:cb:9e:b6:f2:
                    5c:2a:e0:d0:68:b0:29:01:24:03:cb:cb:75:05:77:
                    c8:2d:b1:bc:6d:ea:d5:b6:63:46:bb:6e:95:7d:d4:
                    f9:41:e1:62:f4:90:2f:4b:4b:44:4a:39:ef:c5:1a:
                    47:b2:99:9e:ec:bb:c5:8a:c2:b1:a7:84:d0:60:0d:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FE:47:19:BF:25:E1:B9:B0:FC:03:58:EB:82:49:62:C5:94:B0:BB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28476f1b-f33d-423c-ad29-b9c8e25cbcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36a0::/46

    Signature Algorithm: sha256WithRSAEncryption
         bf:f4:b4:de:ca:56:53:2b:b9:aa:82:ba:10:6e:ff:6a:e0:6c:
         f1:ce:26:e5:f4:db:0d:83:31:df:fb:0f:ee:a4:c1:4e:2b:15:
         ed:00:36:2b:b3:50:b9:6a:cb:00:16:7e:f7:5b:29:06:2a:4d:
         85:26:e9:61:c3:85:ef:3c:4a:76:d7:09:fb:9b:15:4e:1c:f7:
         cf:22:dc:6e:7d:bf:70:aa:ff:18:54:71:d0:26:38:59:1a:00:
         83:a1:a9:4c:08:38:ae:fa:43:22:b4:9b:0e:71:c4:9c:24:95:
         ef:51:53:45:4d:27:6b:1a:1d:e4:d3:11:1a:2a:4a:bd:13:c1:
         ce:70:2a:4c:10:f9:1a:88:95:f0:d8:9b:25:d3:10:e0:cf:33:
         3b:b0:e5:e2:63:34:0d:f8:3b:bc:14:de:7f:d7:7b:56:42:e6:
         11:59:0e:c0:a1:f0:52:6c:e0:98:ee:0d:59:a7:79:b4:89:7f:
         81:5a:c8:27:ec:4e:b6:a0:6b:ce:21:f2:1c:33:5c:db:1e:7d:
         47:82:85:a3:c4:4e:a7:0b:1a:1b:e6:fd:72:55:19:8c:44:b8:
         f9:86:01:a1:ab:41:36:4b:f9:e1:5f:c5:55:69:7e:91:61:36:
         b8:62:05:71:66:be:a9:32:8e:24:97:4b:8a:65:50:4e:78:3e:
         20:68:a5:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:35:27 2025 by rpki-client