This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fa696ac-219d-481d-bd03-8d5b6a153093.roa
File:                     2fa696ac-219d-481d-bd03-8d5b6a153093.roa (raw, json)
Hash identifier:          gpKZEL3myzmBR64rWrr8hzRlzHF+VYhg4aXudlXceu8=
Subject key identifier:   68:72:B2:BF:F5:BE:D1:53:91:91:EA:8A:5E:83:22:8E:07:E9:91:7D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       382F5C5091F7B778DAB6466B9B5CC64A25455F19
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fa696ac-219d-481d-bd03-8d5b6a153093.roa
Signing time:             Mon 24 Nov 2025 04:02:07 +0000
ROA not before:           Mon 24 Nov 2025 04:02:07 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fb2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2f:5c:50:91:f7:b7:78:da:b6:46:6b:9b:5c:c6:4a:25:45:5f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:02:07 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=8a56d0e7b613ca0ab6085d8ae051a65111559bae0536b9af16a5e6a84d0ad6da, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d6:f5:2d:2b:19:56:9d:d9:7e:84:e5:bc:2e:
                    e9:cb:8d:69:19:24:4b:e5:1d:21:8e:10:6a:50:b5:
                    4d:82:bb:c5:11:33:6a:6f:06:9d:94:55:87:62:99:
                    44:46:7c:75:d3:e0:40:1f:2c:6c:6c:f2:13:2a:77:
                    90:2b:71:ce:f9:bc:b5:24:f8:fa:04:fa:4e:68:c6:
                    a1:ae:12:4f:fc:0d:ce:f6:23:da:e0:7e:ed:15:ca:
                    d0:87:d3:c5:ca:1b:b8:dd:95:d9:52:08:51:b8:29:
                    26:f5:0b:8d:55:13:45:0a:d2:d5:6a:98:ec:33:c8:
                    77:44:cf:14:0a:cf:ef:4b:8f:ce:2c:2a:fb:67:0a:
                    05:43:7e:6b:77:47:16:40:9d:f0:40:54:63:d2:4e:
                    a5:90:51:bf:32:a6:a6:46:e9:61:0d:18:d1:63:7a:
                    ef:93:37:29:a6:eb:c2:ee:08:dd:69:cc:75:38:c2:
                    14:e0:14:1d:92:58:c2:81:c5:61:66:d1:fb:71:bc:
                    ab:38:ba:18:83:67:17:bf:ed:df:ae:bc:73:f1:e8:
                    28:98:4a:7a:5c:28:19:0f:e9:4d:3b:b5:30:d0:ff:
                    8e:98:ff:c9:3b:8a:75:d4:33:ad:73:64:02:f9:cc:
                    f5:a3:99:ed:cd:53:4a:03:ca:e8:c9:80:40:28:5b:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:72:B2:BF:F5:BE:D1:53:91:91:EA:8A:5E:83:22:8E:07:E9:91:7D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fa696ac-219d-481d-bd03-8d5b6a153093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fb2::/47

    Signature Algorithm: sha256WithRSAEncryption
         2c:b2:c3:92:af:5b:ad:27:22:07:f5:90:1e:5f:36:1d:06:cd:
         62:4c:6d:c6:96:ef:6c:11:99:0b:45:09:54:45:d4:00:28:7a:
         f3:28:ad:55:24:b0:ba:31:1b:49:c5:58:14:a6:f4:3e:55:6b:
         58:1f:d0:84:a7:61:da:8d:31:88:65:10:ad:2d:53:d3:2b:81:
         4b:c8:a3:e4:a1:4d:66:a4:2b:c6:88:ab:9d:07:05:50:54:39:
         ec:53:b2:aa:56:8d:34:35:90:c6:b3:7f:17:67:50:08:2e:25:
         4f:70:6e:e5:b2:63:12:84:b5:a3:74:83:ef:ae:86:bb:5f:53:
         15:2a:a0:c2:77:96:3b:34:57:f6:2f:72:a8:19:30:72:d9:8f:
         10:47:21:06:1c:36:e7:49:16:d3:66:cd:af:a9:be:c1:dd:2e:
         9d:86:bb:1c:e5:e2:66:44:26:4f:a2:d3:ae:92:00:2e:5b:d5:
         a6:ed:76:5c:18:8b:60:36:a5:04:c1:c9:93:d5:1c:5e:dd:cc:
         51:b7:cd:32:1e:d8:8c:33:a1:96:09:7e:59:e3:fb:e2:e3:36:
         79:5c:8d:b1:c6:20:43:ad:8a:d2:fc:6b:e9:66:f5:5f:2a:18:
         50:16:a5:c2:31:93:a1:32:48:0a:59:99:30:b7:89:7a:1f:00:
         15:68:e1:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:02:16 2025 by rpki-client