This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/29fcca67-6148-4b3f-8787-600144d09af8.roa
File:                     29fcca67-6148-4b3f-8787-600144d09af8.roa (raw, json)
Hash identifier:          2bjIjWZjXanOhTUsSi5OeCXPWeKllxTgUuCnOmWncsU=
Subject key identifier:   4D:B5:0F:67:5F:F8:01:44:A9:CF:F3:24:38:3E:DE:B9:32:B9:51:3C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3BB4D9BDF88F1B6B130EFCC985B745D4F2104150
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/29fcca67-6148-4b3f-8787-600144d09af8.roa
Signing time:             Mon 24 Nov 2025 03:02:11 +0000
ROA not before:           Mon 24 Nov 2025 03:02:11 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1da4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b4:d9:bd:f8:8f:1b:6b:13:0e:fc:c9:85:b7:45:d4:f2:10:41:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:02:11 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=a25d150596db1eaea9abbba33e498ab636d725052cba0262e799aba7d2f4e140, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:0f:8a:a5:a7:07:47:83:5a:32:cc:3f:b9:
                    cd:08:61:92:9b:2f:04:43:6e:67:2f:10:10:dd:5d:
                    35:b5:1e:50:69:f7:17:a1:21:19:d2:f2:fd:19:37:
                    77:03:2c:ec:f9:07:74:05:80:04:15:c2:e2:da:90:
                    73:49:e8:c1:60:89:65:9b:34:79:97:3c:fb:89:43:
                    2a:d0:e4:5d:85:ed:62:f5:c0:6d:98:33:d0:3e:19:
                    7b:b0:92:ce:87:a5:ee:5b:cd:5f:6d:f8:e9:08:bb:
                    0d:5e:ae:ba:7c:57:75:c1:cb:a6:7e:2d:a0:f4:50:
                    a8:f8:51:10:13:3c:2f:33:1d:13:c3:e2:c8:7a:20:
                    7e:d0:ad:1a:41:02:b2:40:2e:5a:ca:fa:1a:40:65:
                    da:1d:ef:fe:8c:17:e5:a6:1b:2d:15:26:cf:17:78:
                    45:94:28:b2:da:87:48:f0:e7:50:de:9d:51:db:92:
                    97:3e:50:a7:9d:13:6c:c3:64:74:b4:f3:5b:06:fc:
                    cc:57:60:b4:81:3d:32:3c:93:9d:14:51:6d:78:a7:
                    ba:93:83:b3:1f:36:f0:a4:3f:ca:5f:c7:6b:e4:f5:
                    a4:25:08:7a:99:33:4b:1f:b5:8b:a5:f2:f5:4c:bf:
                    d9:bd:8b:b6:43:d3:b8:e7:68:6d:0f:24:e3:34:99:
                    ab:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:0F:67:5F:F8:01:44:A9:CF:F3:24:38:3E:DE:B9:32:B9:51:3C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/29fcca67-6148-4b3f-8787-600144d09af8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1da4::/47

    Signature Algorithm: sha256WithRSAEncryption
         70:7f:f2:c6:42:86:f0:ab:ea:d2:0d:e5:22:70:7a:e8:33:65:
         03:b7:86:e3:0c:89:c0:94:09:95:aa:40:be:18:4a:7f:e8:63:
         24:e6:08:04:89:5e:dd:58:f1:b1:b7:9f:3c:21:e3:58:b5:99:
         b1:d1:57:1c:80:4f:cd:c8:2a:7e:1e:0e:9a:97:b5:0f:58:f4:
         26:19:3d:da:60:53:6a:8f:f6:3c:ab:25:0f:8c:db:0a:17:3b:
         cf:92:34:ac:77:c7:28:74:49:68:bb:9e:71:03:23:91:d6:2e:
         38:fa:1f:8e:b1:31:e7:dd:be:00:1a:b7:5b:95:40:3c:8b:a0:
         41:a7:85:a0:42:54:c8:68:84:7e:bb:69:f2:71:5f:ff:fb:2c:
         e0:cc:ff:5a:2c:a5:24:ad:dd:a5:9d:0e:8a:d8:dd:bd:da:33:
         d5:07:9c:f0:c4:7b:2a:53:6b:f5:39:5f:4a:38:ec:6f:95:b1:
         05:7d:90:a4:06:6d:8c:d1:47:4c:d9:ff:cd:f5:e1:8b:09:6c:
         02:2a:29:ea:f3:f9:63:d5:8e:f9:9b:f7:a1:49:d0:d8:b2:8a:
         3e:08:30:aa:99:13:16:63:c0:53:95:38:a7:a6:3f:6f:f9:7c:
         6b:ea:0d:1d:71:6b:5b:51:0d:47:83:42:49:ae:fd:6c:5e:ab:
         0d:82:4b:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:48 2025 by rpki-client