This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3112c4ba-35c6-4680-a255-6cb08f899efa.roa
File:                     3112c4ba-35c6-4680-a255-6cb08f899efa.roa (raw, json)
Hash identifier:          xXMNNqferdtgEgVKirF94gAeeG4yMagreetx/5okEog=
Subject key identifier:   10:8A:61:7A:3B:E9:36:13:5E:16:C8:31:39:54:7C:19:51:4E:66:48
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       492CA09DC6522F746E6E20BC5F4CA92D3C77F0B0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3112c4ba-35c6-4680-a255-6cb08f899efa.roa
Signing time:             Mon 24 Nov 2025 00:42:05 +0000
ROA not before:           Mon 24 Nov 2025 00:42:05 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1cf8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2c:a0:9d:c6:52:2f:74:6e:6e:20:bc:5f:4c:a9:2d:3c:77:f0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:42:05 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=a8ec73eed9872ccffdef7d6e7dabbb58accab73049645a3c1415aea9acbc3a54, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:f9:32:13:e3:34:bf:01:10:1d:65:af:70:
                    bb:81:51:9a:d8:f5:fb:ac:64:8d:ae:1b:7f:41:de:
                    6f:13:d6:7e:41:93:d5:89:29:30:61:c4:38:88:39:
                    e1:3c:16:b4:a0:34:b7:d6:fc:61:8d:99:e2:79:1d:
                    0f:fa:32:c7:53:53:94:b9:aa:88:9f:c3:8a:d0:69:
                    b6:a2:90:3c:11:b5:f3:4e:2c:32:c9:c3:94:90:4b:
                    b9:00:be:36:87:0c:36:8a:de:c8:38:b4:c6:17:9e:
                    d0:e0:ec:03:35:54:95:6d:f6:ec:fc:fe:43:cf:e3:
                    6b:15:78:8e:65:a9:57:b6:ca:97:7c:9d:16:be:46:
                    83:8b:3e:dc:f1:23:de:ba:d8:5e:ea:55:2c:d9:08:
                    78:98:0e:8c:bf:0a:45:ca:4d:d0:16:3d:bc:c5:c0:
                    61:70:74:de:de:6c:9f:e0:fb:ec:d8:8c:f6:95:9b:
                    68:d5:68:0f:1f:5a:e6:84:14:f4:f6:73:51:50:e6:
                    3e:6c:85:e1:71:50:f2:b8:c2:23:d3:f9:7c:77:8b:
                    87:7c:af:08:5d:d6:2e:a4:e8:c5:65:4c:18:1f:6e:
                    91:c3:2d:37:90:4d:df:33:db:aa:dc:94:9e:e5:c3:
                    dc:f1:0a:59:c7:6b:66:ff:2e:48:57:98:11:78:cf:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8A:61:7A:3B:E9:36:13:5E:16:C8:31:39:54:7C:19:51:4E:66:48
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3112c4ba-35c6-4680-a255-6cb08f899efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1cf8::/47

    Signature Algorithm: sha256WithRSAEncryption
         80:c0:d7:8b:86:03:91:e0:8e:0f:ed:58:7c:80:67:eb:c6:fe:
         95:45:88:bf:cd:37:99:e9:f0:a9:f2:94:69:6c:50:98:a1:1a:
         0b:ce:e6:91:87:14:8c:4d:0e:e4:03:59:22:ba:8e:00:6f:66:
         9e:81:8a:8b:23:5d:df:77:6d:d1:a4:50:8b:98:ac:e0:71:88:
         6e:0d:ec:c5:26:25:f3:23:27:dc:77:40:a0:9a:a3:1c:e0:87:
         52:e6:87:ee:92:9b:21:35:cd:66:18:78:7b:11:04:4e:08:a3:
         40:b9:79:ce:e4:4e:99:32:75:9e:66:cc:87:84:a5:e6:c0:fb:
         26:ef:a8:f2:47:81:30:e4:5b:70:15:3d:43:e5:d8:c3:2a:15:
         81:55:0c:b0:2a:8d:3c:7f:78:31:a5:53:d0:13:e6:1f:f9:0d:
         18:25:fc:36:dd:a7:5b:63:ae:0f:5a:ef:84:2d:94:50:8d:94:
         75:d6:69:26:9b:e2:54:6b:81:b7:2f:6a:f5:a1:53:2c:0d:e6:
         88:38:67:0d:30:4e:99:b5:92:a8:49:cc:7c:a0:9c:84:53:60:
         29:a0:7a:5c:13:4b:4f:ae:a8:8e:cf:31:70:08:eb:b1:a9:8a:
         6d:b4:f1:5a:de:a6:8e:d4:c0:57:54:dd:fb:85:2b:ef:13:1a:
         cb:97:3d:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:51:52 2025 by rpki-client