This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2bb731f8-c432-4cd5-afe4-735e9c3251a4.roa
File:                     2bb731f8-c432-4cd5-afe4-735e9c3251a4.roa (raw, json)
Hash identifier:          rWTKr/EQVERxuiYP41Edc35pauEgs70Ai+/ONACRZ4g=
Subject key identifier:   F6:5B:B6:AD:29:2C:04:F0:EA:E7:D4:6E:B6:A6:47:B1:EF:05:95:85
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5CBEDDB6A2324732B42DC30AB70C891B45A8F68A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2bb731f8-c432-4cd5-afe4-735e9c3251a4.roa
Signing time:             Mon 24 Nov 2025 01:32:07 +0000
ROA not before:           Mon 24 Nov 2025 01:32:07 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1bf4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:be:dd:b6:a2:32:47:32:b4:2d:c3:0a:b7:0c:89:1b:45:a8:f6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 01:32:07 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=bbd94e1b7d95ae81a6d9fae0026ca1234becb4d7ca095794c8da184436e4ed54, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:3d:1c:94:3c:8e:28:3a:bb:af:0c:9a:b5:
                    9f:2a:ab:56:09:66:9d:65:f8:25:df:4e:11:57:ca:
                    3d:7b:ba:c6:de:d1:29:8c:b2:66:1d:00:98:0a:d7:
                    e3:27:76:35:c7:27:49:e9:55:13:0d:84:ae:a9:d8:
                    53:4d:3a:c2:4b:b5:2e:ac:30:82:e9:a7:d7:66:db:
                    ae:ed:f9:37:ce:29:35:55:26:2e:be:2a:12:ff:8e:
                    bc:88:d7:2f:44:82:f3:78:f8:44:a2:12:65:d6:0a:
                    74:52:37:8a:7c:3b:2b:85:71:7b:f3:a9:10:93:fb:
                    da:4c:70:ae:b3:66:e8:be:58:9a:15:53:f0:fe:7b:
                    89:0b:5c:29:a3:f0:9f:f6:2a:50:1c:75:7f:45:9e:
                    10:f2:57:5c:a1:c5:a5:db:47:db:31:e0:66:72:0b:
                    8c:79:83:b0:33:45:9f:72:7f:da:ac:b3:95:65:df:
                    5a:34:fc:5f:93:4c:32:a8:d4:4f:19:cb:e1:6e:33:
                    0d:b3:c5:3a:e1:ca:fc:3c:51:1b:c3:83:99:d3:5c:
                    92:22:db:cc:ef:db:c4:62:49:cb:ff:f2:9c:c0:b7:
                    b6:9b:45:0a:25:88:ca:eb:f2:c3:29:90:f6:1a:1f:
                    5d:5a:80:33:b9:56:f0:6c:9a:75:06:c1:fa:e4:ab:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5B:B6:AD:29:2C:04:F0:EA:E7:D4:6E:B6:A6:47:B1:EF:05:95:85
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2bb731f8-c432-4cd5-afe4-735e9c3251a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1bf4::/47

    Signature Algorithm: sha256WithRSAEncryption
         85:06:1b:c3:74:4a:f2:9e:1d:6c:34:0a:23:b0:7f:60:f1:e7:
         c0:e0:4f:3f:72:78:f5:d5:f2:22:64:28:42:b1:45:50:b9:51:
         88:b1:86:85:f1:f3:14:52:20:b3:5e:b3:65:65:b7:75:9d:ce:
         0b:a8:a7:d7:cb:7d:b0:71:93:f1:c5:7f:73:7e:14:dd:24:9e:
         2f:e8:ed:75:9e:45:0b:15:ee:44:6b:f8:d4:16:1c:e4:90:c1:
         39:6a:41:58:88:6d:4d:e6:a8:b0:01:be:12:6e:2d:08:fb:87:
         a2:ed:90:fd:43:a8:06:22:5b:8a:a3:1f:19:00:e5:f7:e3:ba:
         89:4f:26:c6:3c:04:59:63:53:55:02:aa:c7:2e:cb:10:78:10:
         89:dd:4c:a3:e6:8f:b3:af:82:07:b7:c8:56:d1:8c:4c:7f:d9:
         e7:dd:dd:75:bc:5a:97:b3:c6:1d:cc:a1:b3:4e:ec:18:02:ae:
         04:9a:d5:b6:f0:5f:67:c3:e7:02:f2:45:43:24:5a:32:41:2e:
         ed:65:b8:10:72:ac:4d:24:d6:7e:c0:3f:0f:08:92:55:f1:59:
         e7:5e:96:89:7d:6a:ce:53:78:6a:e1:81:c4:57:42:c3:f0:d4:
         60:a3:b3:b9:0c:21:cd:01:94:d2:ce:9e:19:6a:cf:5f:3b:a7:
         1b:12:2e:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:51:56 2025 by rpki-client