This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ab3f0df-fb39-4bf2-a025-d4fe2af87322.roa
File:                     2ab3f0df-fb39-4bf2-a025-d4fe2af87322.roa (raw, json)
Hash identifier:          6AHBGup4eoiWfh0gcr2oZK675eM/0yQPylAOTSZwrMw=
Subject key identifier:   95:44:E6:5A:54:88:91:29:0A:97:BC:DE:71:DC:B0:4F:73:23:D0:C2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       520EBDD55130B4DD28A7CEC61F442ABFD42060BA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ab3f0df-fb39-4bf2-a025-d4fe2af87322.roa
Signing time:             Mon 24 Nov 2025 07:31:33 +0000
ROA not before:           Mon 24 Nov 2025 07:31:33 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1580::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0e:bd:d5:51:30:b4:dd:28:a7:ce:c6:1f:44:2a:bf:d4:20:60:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 07:31:33 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=26eb0b02e1052cdb7319aebd10926b9bd2c61b3128bd2b7626eb60927a77ffc2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:d1:14:50:ee:5c:95:cc:e5:f8:79:64:ba:
                    0c:29:1d:91:f5:d8:27:16:52:1d:a9:50:ac:ff:23:
                    2d:34:65:79:29:e3:1a:44:92:48:1d:78:5d:e7:e2:
                    43:3d:a1:43:cb:b4:c6:50:bd:cc:35:62:23:45:11:
                    ac:cd:41:28:45:07:02:f4:62:28:41:10:54:3a:92:
                    4b:53:f8:c7:d1:f6:7c:68:96:f0:ee:4c:8b:a2:3b:
                    a4:af:c9:4d:87:d3:d5:c7:eb:cb:1a:2f:d5:30:f5:
                    15:ff:7d:59:07:04:4a:fd:3b:1c:59:b2:dd:59:00:
                    33:ed:87:7b:cf:f7:ce:27:d6:02:93:d4:53:07:c3:
                    3a:35:a0:b8:7d:5e:da:d2:e7:f0:d9:94:82:bf:52:
                    5d:fb:36:95:53:b9:d7:81:0f:28:b7:66:f7:62:c1:
                    59:97:a8:67:f3:29:47:86:bc:a5:d7:58:57:3b:c1:
                    27:28:c5:14:01:4b:3b:c7:63:ff:0d:42:7b:36:43:
                    d6:45:f0:9a:dd:8f:bb:d7:aa:be:74:fb:33:92:db:
                    db:8e:eb:99:96:63:99:22:3d:ab:a6:78:87:79:1f:
                    a3:41:fa:db:2b:46:2f:98:27:65:1f:1b:73:e7:0b:
                    b8:71:00:bd:f5:92:94:61:12:42:c7:4f:3d:71:33:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:E6:5A:54:88:91:29:0A:97:BC:DE:71:DC:B0:4F:73:23:D0:C2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ab3f0df-fb39-4bf2-a025-d4fe2af87322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1580::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:ca:88:31:02:e6:7e:76:49:31:a9:f8:cc:93:f3:50:91:a2:
         ca:d3:86:47:8f:15:55:17:ea:2d:a4:20:2c:dd:3e:58:b0:d2:
         2f:0b:0e:49:70:fa:dc:60:58:a3:78:28:9d:b2:bf:bd:70:1b:
         58:13:43:1c:60:f7:fc:27:30:45:20:0d:69:81:0e:1a:77:d1:
         4e:98:ad:4e:6d:99:6b:77:27:ee:4e:d6:17:2a:35:84:ee:54:
         c0:ec:d8:45:ce:20:16:92:27:03:7d:28:ee:55:9f:35:4b:86:
         b8:c7:c8:23:45:73:de:9b:37:15:cb:e0:fb:fc:bd:14:cc:45:
         dc:90:d6:75:f9:cd:98:5b:ac:0b:8c:3c:89:fe:76:72:ae:50:
         db:21:17:f6:3b:b6:70:d0:6c:a0:a1:3e:50:9b:a3:73:0b:58:
         36:6b:a7:9a:36:6b:d9:a6:53:c1:d8:99:49:1f:6c:e9:a1:65:
         03:8b:cd:55:21:08:9f:52:25:f3:6c:6b:a4:0a:cd:2c:b0:b3:
         b2:d8:3b:cc:e2:ba:6e:ee:32:72:03:b1:0c:ae:45:fe:1e:4a:
         ab:92:b8:a5:c3:d5:03:63:81:a9:51:4f:52:f2:09:87:35:fe:
         b8:75:55:8d:11:39:40:13:1a:69:64:e2:29:d8:ab:7e:fb:3e:
         cc:4a:dc:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:17 2025 by rpki-client