This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fb2ded7-838d-4fba-b64b-6645a1277f35.roa
File:                     2fb2ded7-838d-4fba-b64b-6645a1277f35.roa (raw, json)
Hash identifier:          XAPk3RJ/DvvNdtfJiq80X1uk68hlLGpXq7XuNrrepOg=
Subject key identifier:   CB:52:40:5D:7F:10:0B:7D:7A:B2:93:2B:45:34:F5:20:9C:E1:6D:F3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0BCD9F7717A4A5D173AF0E60F2646906C2BADF70
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fb2ded7-838d-4fba-b64b-6645a1277f35.roa
Signing time:             Tue 25 Nov 2025 15:50:10 +0000
ROA not before:           Tue 25 Nov 2025 15:50:10 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:18c8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cd:9f:77:17:a4:a5:d1:73:af:0e:60:f2:64:69:06:c2:ba:df:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 15:50:10 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=4504fda4386048d5d16301e9ee2e97b7c1ca68d7f5bf9407afa80d763b364d6e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:1e:37:5c:0e:91:aa:05:d5:ba:90:b1:63:
                    8d:61:54:44:63:1d:16:1e:dc:49:b7:24:34:65:3f:
                    33:16:9e:ce:53:c3:0c:91:5c:77:3d:53:fc:16:f4:
                    14:4c:93:81:7d:64:42:06:b8:ad:74:f6:41:f7:8f:
                    60:da:15:1b:de:37:e7:1c:a8:c3:f6:fc:d2:f0:b3:
                    b0:92:f5:7f:a8:70:f1:e0:38:ae:7b:35:7e:45:17:
                    13:8d:2a:16:a2:37:ef:80:5c:3a:58:a0:43:0c:b9:
                    12:59:0b:ba:ee:d9:1d:03:45:8f:d9:73:b3:76:1e:
                    05:a0:b7:22:b9:d0:9a:38:46:00:cf:21:6b:f9:04:
                    d3:60:a4:b1:2b:79:0e:c8:1c:81:e8:ba:8e:32:f1:
                    8c:55:ec:94:43:ad:53:ed:9f:b6:4e:df:dc:93:73:
                    56:47:2a:d3:6a:9e:06:5f:9c:70:ae:9a:e6:db:54:
                    8c:ad:2e:4d:dd:1c:4d:8b:9e:e2:c6:54:c4:92:81:
                    40:96:32:c1:bf:c2:bb:6e:e9:2d:13:e5:cd:20:5e:
                    56:dd:18:f0:4b:33:e2:3e:9b:77:68:df:e4:c8:06:
                    ea:5e:71:b8:e5:e2:9b:94:e7:aa:a0:1d:59:15:ba:
                    2e:7a:f3:50:b2:68:ac:f7:3d:21:41:19:83:ab:98:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:52:40:5D:7F:10:0B:7D:7A:B2:93:2B:45:34:F5:20:9C:E1:6D:F3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fb2ded7-838d-4fba-b64b-6645a1277f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:18c8::/46

    Signature Algorithm: sha256WithRSAEncryption
         2c:90:a8:eb:f6:84:98:cd:88:ee:81:b0:12:b6:5b:86:0a:da:
         11:72:ff:46:33:17:67:9c:cf:75:21:a9:0a:d0:74:30:d5:c5:
         a3:0c:ae:0f:c3:a7:8f:8d:bf:c4:b3:ae:0f:89:49:b4:1c:8c:
         dd:97:9b:64:9a:9c:13:b7:eb:2a:f0:4e:e6:55:ac:ca:77:6a:
         c6:56:a1:0d:03:a8:c4:62:a0:c7:d8:0a:84:89:45:61:3a:85:
         1e:da:82:90:71:00:da:f0:59:ec:a6:9f:07:1c:56:9b:dc:fa:
         75:19:f0:de:9b:fb:a5:21:ac:28:6b:0e:01:ca:83:16:35:b6:
         38:7e:f7:e4:c2:e3:c7:63:e5:03:f2:2b:1d:3c:2f:4b:a8:0f:
         6d:ae:94:c9:73:5d:9d:bf:ef:ea:ef:8d:ce:e4:51:38:28:db:
         50:14:0b:e0:62:78:96:4e:59:3f:b4:a1:85:02:4d:40:5e:40:
         0a:8d:c3:71:5f:b0:af:16:dc:dc:75:3b:5d:5e:fd:28:77:fd:
         55:86:74:91:31:66:50:86:82:30:ac:dd:08:c0:cd:c0:b4:1d:
         bd:74:c1:b1:69:ba:f5:b0:20:09:d6:e7:78:54:8a:92:13:e5:
         96:2d:5b:5a:a8:f1:d9:4f:22:b0:41:ba:de:7b:76:d8:55:95:
         46:8e:b9:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:33 2025 by rpki-client