This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fbb3f05-4345-416d-80b9-c5b54f157fdc.roa
File:                     2fbb3f05-4345-416d-80b9-c5b54f157fdc.roa (raw, json)
Hash identifier:          jIn5QXIlew2x62GOczWfDiKO2/TdMQ81EltDfFyKBDI=
Subject key identifier:   35:23:8C:AF:C4:56:E1:A1:9B:76:42:80:7E:56:B6:5F:E0:F4:5A:EB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       108CCB0456393D48F2C60811E3DE9D662F0AA18D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fbb3f05-4345-416d-80b9-c5b54f157fdc.roa
Signing time:             Tue 25 Nov 2025 13:01:40 +0000
ROA not before:           Tue 25 Nov 2025 13:01:40 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ee4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8c:cb:04:56:39:3d:48:f2:c6:08:11:e3:de:9d:66:2f:0a:a1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 13:01:40 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=6764f370ac85ddc38a0c6e96c6304cc82a31fcc0221d39ed20915e84c8f21206, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:3b:23:ca:69:c4:be:15:4a:e7:7d:7b:dd:
                    71:30:cd:0f:4b:fe:4a:3a:99:6c:2c:bf:4d:a4:ab:
                    60:e1:b7:48:98:da:68:83:81:3f:96:18:76:4c:b7:
                    f7:2d:26:21:cc:ec:10:30:1e:83:18:62:21:f1:d6:
                    d9:f4:a5:d4:6c:ae:ae:bf:30:61:2d:b7:1a:b8:ba:
                    46:80:f0:d2:6f:b6:7a:b6:e1:21:49:90:5b:74:59:
                    d3:4d:d1:e7:3f:e8:f3:55:90:36:8e:ff:15:14:f3:
                    b7:d0:b4:fd:ad:2a:41:6a:d9:cf:3a:19:dd:25:9d:
                    5a:0e:d3:df:05:b2:41:ad:10:25:dc:e0:89:e4:69:
                    d9:a5:19:ae:24:7f:1a:6f:aa:ae:2f:f1:a7:c8:5d:
                    de:d9:9f:b9:81:b6:d5:db:62:08:ec:83:37:86:68:
                    ec:5b:0e:25:f8:ce:d1:d8:f4:7a:2d:d3:e7:4b:b5:
                    c5:c5:1b:51:2c:c7:bb:06:5d:74:4f:d0:eb:14:40:
                    fd:a8:5d:60:40:da:f3:ed:7f:6e:9a:53:52:e0:c7:
                    46:22:c8:d0:47:9c:93:d5:8e:00:0c:bd:bc:e7:d3:
                    43:51:42:50:34:eb:d2:0d:4f:2f:bd:55:d7:07:a5:
                    bf:0e:22:9e:74:4e:35:b6:84:3d:24:6d:2a:54:c7:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:8C:AF:C4:56:E1:A1:9B:76:42:80:7E:56:B6:5F:E0:F4:5A:EB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fbb3f05-4345-416d-80b9-c5b54f157fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ee4::/46

    Signature Algorithm: sha256WithRSAEncryption
         8f:d4:92:5f:dc:16:a8:58:aa:94:d2:ed:e5:8e:b8:4f:e6:c5:
         86:de:46:17:c8:b5:c4:ec:90:f1:2c:83:36:a5:0a:68:fa:28:
         1b:34:96:85:08:94:8a:10:28:d7:5c:0d:ba:2c:ba:4c:52:e6:
         d6:9c:9d:53:84:f1:32:e3:da:d5:42:9d:89:db:91:cf:39:9b:
         4a:d9:fe:71:1d:c4:40:1d:61:ed:03:94:9e:b9:28:76:6d:fd:
         e9:f0:74:d0:9c:fe:76:77:59:fc:c0:60:21:b0:83:bf:ff:b7:
         3f:c8:bf:75:34:21:20:4b:31:6e:d4:25:0e:66:13:e4:82:85:
         9c:94:37:62:47:37:52:9c:8b:cf:4a:b1:96:af:bb:d1:dc:0a:
         b6:e8:2f:5d:28:4f:6a:23:7c:4e:1f:7e:1f:9c:46:46:11:8b:
         47:0a:93:c0:e0:27:06:ac:67:3b:de:ba:3e:0b:bc:3d:27:3d:
         2c:34:23:bc:c8:f5:0f:83:c3:12:b0:99:2b:0c:ab:c8:4c:23:
         ab:e9:84:38:5e:aa:22:b5:0c:88:86:9d:86:10:65:31:20:e1:
         36:f2:a2:be:96:8a:55:ec:22:d7:d0:7e:b8:e7:9b:97:8e:ec:
         7f:56:8a:62:2b:90:83:4b:76:ba:c6:b1:ae:b0:f4:f9:aa:6e:
         82:81:6e:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:36 2025 by rpki-client