This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/295d462f-974f-4410-9043-a1e0c06630cc.roa
File:                     295d462f-974f-4410-9043-a1e0c06630cc.roa (raw, json)
Hash identifier:          nVtZ2wWNRUNprAOR1+HMFXESI2jZafWrS5yV/+ioM98=
Subject key identifier:   23:E1:5B:16:C9:D6:2C:99:71:FE:0B:5E:36:AA:33:0D:19:B8:6E:85
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4E1EF763F7D1834D31901583455B360AE4169C6C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/295d462f-974f-4410-9043-a1e0c06630cc.roa
Signing time:             Mon 24 Nov 2025 00:20:47 +0000
ROA not before:           Mon 24 Nov 2025 00:20:47 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:18d4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1e:f7:63:f7:d1:83:4d:31:90:15:83:45:5b:36:0a:e4:16:9c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:20:47 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=a62a2b4797d7938eae14b564cb6792dfc86ec7129b94f19539fc95f9b89676ab, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:74:69:f1:db:56:df:09:b0:da:16:76:72:
                    08:9d:da:88:2c:fc:7f:8f:fa:d0:9d:cc:5d:aa:e0:
                    fe:83:2b:4b:75:c7:44:92:84:24:02:6e:18:de:a8:
                    b2:a2:2b:3e:a9:bf:ef:d3:aa:20:f4:84:60:2f:d9:
                    b2:d5:01:cd:90:15:e6:e2:06:58:b7:f5:7c:43:dc:
                    51:d3:49:e8:44:9d:69:5b:00:1c:dc:cf:ab:1b:d4:
                    c4:72:7e:00:3c:95:60:3a:63:66:a2:c5:77:c5:2e:
                    15:5a:4b:76:3b:7d:62:9a:c6:34:04:6b:dd:81:1e:
                    9d:55:eb:d6:38:57:84:b0:5a:46:1c:0a:4b:ea:fe:
                    9e:d0:ce:a4:b6:e9:3e:a0:f2:d0:3f:08:60:76:bf:
                    b7:d4:3f:51:f6:f7:d3:d0:60:50:48:ff:da:aa:1f:
                    28:6f:f6:69:de:41:f0:71:49:bc:dc:71:2d:44:0a:
                    59:8b:09:5f:2b:b1:16:48:e0:0a:cd:33:17:b8:b9:
                    83:8d:ac:f2:b0:31:b4:33:a3:b0:90:6a:bf:9f:93:
                    c1:07:9d:63:1a:2c:e1:42:23:3a:f4:71:3d:ef:67:
                    d1:ff:38:12:75:8a:63:94:9e:15:4b:31:e4:9e:b3:
                    e9:7c:77:34:4b:e0:de:37:0e:95:1e:ae:5c:94:07:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E1:5B:16:C9:D6:2C:99:71:FE:0B:5E:36:AA:33:0D:19:B8:6E:85
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/295d462f-974f-4410-9043-a1e0c06630cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:18d4::/47

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:48:fa:d3:73:a8:2f:66:f8:ba:3b:cc:69:a1:75:78:a2:
         ef:12:fb:62:c7:42:bc:cc:05:68:9c:4e:2e:da:d8:26:84:91:
         38:f6:4e:c0:34:ca:72:1a:22:55:c9:9e:bc:cd:fe:a6:fe:54:
         5c:39:96:76:59:50:2a:98:c0:f2:1c:f0:ff:c9:48:ab:e0:d4:
         7a:fa:4b:41:5c:9f:1d:2a:5b:96:0a:d8:4a:c9:98:d0:2a:e3:
         45:9f:a1:47:d4:fc:eb:76:08:2a:05:bc:ab:bf:74:eb:0a:08:
         aa:c1:f3:03:27:34:eb:01:c1:af:f0:e5:58:47:99:4a:5a:8f:
         a9:25:78:c0:29:3b:18:89:51:ae:ab:fd:22:57:3f:e6:2b:ba:
         3a:7b:40:7e:8f:cb:e6:29:48:ee:92:7e:e1:87:ee:03:6b:55:
         f4:e6:8c:40:f4:5b:0c:39:f9:f9:69:4d:65:96:2e:a2:3c:41:
         e2:54:71:10:8e:12:43:e5:2e:34:52:98:47:3f:43:41:03:f3:
         0e:b2:7d:5f:78:fd:3e:8b:c9:e0:11:7d:84:d6:49:26:83:d1:
         9c:9d:88:71:9f:fb:3a:9d:41:ec:fd:0e:cb:57:77:38:40:5c:
         94:df:25:9a:08:fb:db:15:f1:5f:9d:f7:74:a3:91:93:d2:3b:
         ff:19:49:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:11:28 2025 by rpki-client