This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb5d909-fca2-48f4-b161-c131c9ef4dcf.roa
File:                     2cb5d909-fca2-48f4-b161-c131c9ef4dcf.roa (raw, json)
Hash identifier:          5TIqkT+QzOn91+AmM+nVnQq8yK9cCgGs7Y8plUo9y+A=
Subject key identifier:   77:D1:B7:D0:C6:FD:4F:5F:37:60:D4:B9:27:46:3D:41:58:80:5F:42
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3725EF481EE8B9C07FD9644F9AA58EB3397DFE3D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb5d909-fca2-48f4-b161-c131c9ef4dcf.roa
Signing time:             Tue 25 Nov 2025 01:50:11 +0000
ROA not before:           Tue 25 Nov 2025 01:50:11 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a60::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:25:ef:48:1e:e8:b9:c0:7f:d9:64:4f:9a:a5:8e:b3:39:7d:fe:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 01:50:11 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=d3592605fbef46f4ff6eac042b85a0bbeeb3abf9952d5343bff1e3ba6926db80, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:3d:40:b6:d5:36:18:5e:b5:13:3f:93:f2:
                    df:b1:c6:74:01:35:c1:36:23:7d:f1:25:98:f9:07:
                    4a:27:a5:10:a0:f3:33:c9:b5:8d:c5:e1:2e:19:a5:
                    06:26:30:a0:60:3a:8d:5c:aa:0c:5b:40:3e:4c:15:
                    a6:52:68:a3:a6:76:28:cb:53:ee:25:ab:1e:96:ab:
                    b9:b0:7d:07:55:3a:cf:7b:67:85:60:3c:9b:6d:be:
                    55:57:0c:39:8e:6e:65:cc:95:7b:c1:f3:73:13:62:
                    60:85:8f:1f:12:89:69:99:1f:3c:87:38:f9:91:db:
                    57:3e:08:68:2c:3a:2f:da:ff:73:67:ed:e6:1c:0c:
                    44:8b:31:dc:2c:76:05:4e:d6:66:e4:b6:db:d5:17:
                    b0:c4:42:53:c7:20:7f:40:92:0d:a5:92:06:28:08:
                    64:12:a8:a5:f1:79:bf:49:87:71:0a:73:b9:b7:3b:
                    cf:e9:07:c9:2b:8c:25:3e:1f:ce:9b:1d:c8:49:a7:
                    1d:6a:30:52:c7:df:1a:ef:d7:a1:04:a9:8a:5d:b9:
                    9f:95:3b:22:7d:50:fa:de:f5:42:79:54:9c:26:fa:
                    35:a2:b2:b2:bb:ae:c1:d9:78:d3:21:0c:7a:49:e5:
                    46:28:ad:a7:95:9d:33:c3:ef:47:07:5a:4f:75:f0:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D1:B7:D0:C6:FD:4F:5F:37:60:D4:B9:27:46:3D:41:58:80:5F:42
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb5d909-fca2-48f4-b161-c131c9ef4dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a60::/43

    Signature Algorithm: sha256WithRSAEncryption
         b0:bc:39:00:67:e2:0d:81:56:04:d5:c7:dd:0b:b5:83:36:70:
         96:ca:41:35:e8:7a:f1:50:88:cb:11:9d:c4:a0:e5:cb:8e:8e:
         16:14:40:25:8f:58:67:6d:d0:e2:82:79:cf:c7:0f:5c:9f:d6:
         aa:56:d4:2f:10:fc:6f:2c:42:94:dd:30:2c:2b:68:b4:61:a6:
         86:01:89:d0:6a:6b:8d:27:72:a9:78:56:11:48:28:2b:01:3c:
         25:a8:80:2e:bf:56:16:a6:96:a6:5e:3a:b8:b5:d7:e0:35:4d:
         95:6d:68:97:70:5c:bd:78:54:7b:33:9d:e3:3f:30:b6:57:7f:
         f4:4c:12:bf:de:70:6a:be:42:c3:28:30:04:e4:f2:07:fc:f4:
         2e:fe:62:b3:06:dc:bc:cb:15:2e:58:da:68:85:72:61:e2:31:
         a9:cf:c5:c3:b7:2a:7c:c4:a9:13:e0:5a:d5:7d:e2:06:fb:f4:
         1f:76:f3:84:c3:f8:d4:9e:4c:0e:8a:05:5f:ab:9f:e8:70:77:
         f5:f5:f6:00:aa:c4:65:cc:49:a9:8e:c1:ea:f9:92:f5:47:bf:
         e8:29:c1:da:4d:a6:91:84:6a:28:fd:b6:78:68:13:0f:1f:d5:
         54:00:18:86:c4:f5:ab:0d:1b:30:aa:6a:82:4a:55:2b:1a:f2:
         c2:f6:a1:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:01 2025 by rpki-client