This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/312282ef-e7d1-447a-8746-2d73364f5b64.roa
File:                     312282ef-e7d1-447a-8746-2d73364f5b64.roa (raw, json)
Hash identifier:          E5L1QxZ5krQkoFNvLpt8KbyqUFLxbgLYeHSONQUDMQ8=
Subject key identifier:   1A:01:D5:8A:1C:37:25:61:01:CC:7E:D2:EF:10:A6:7E:39:A7:85:26
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       41A711EFAAA633CCF13C83AE60CDDD5058073BC6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/312282ef-e7d1-447a-8746-2d73364f5b64.roa
Signing time:             Tue 25 Nov 2025 04:30:13 +0000
ROA not before:           Tue 25 Nov 2025 04:30:13 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3790::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a7:11:ef:aa:a6:33:cc:f1:3c:83:ae:60:cd:dd:50:58:07:3b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:30:13 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=2dd2e7c89decf0ec11a501ce01e0eb264425db0e3c150119967ba19f193ceef6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:c0:20:9f:5e:35:62:49:9d:f3:ca:6b:06:
                    8f:a7:16:11:ef:b0:18:3f:ec:cf:b1:af:47:15:e7:
                    d7:e1:43:83:23:f8:85:b2:ed:6f:fe:d8:98:9f:04:
                    ca:b1:9d:42:15:32:45:db:46:84:c9:73:e4:25:de:
                    26:fd:cd:3a:3b:a2:9f:14:fe:8e:2b:b8:d7:d2:b3:
                    ae:f1:46:1f:5e:a7:fe:31:ec:3c:7b:bf:55:c6:1b:
                    ac:08:6d:ca:f4:e7:68:95:05:03:4d:d6:d7:e1:fc:
                    9c:df:71:a8:37:41:cb:85:62:b6:23:ea:c9:9d:da:
                    a3:8e:12:8c:65:09:fb:18:6d:d9:7f:fa:08:44:97:
                    27:22:35:e4:ca:c2:8b:56:d6:47:e9:ef:3e:82:78:
                    82:7e:21:48:b9:ce:f0:e4:85:bf:27:53:36:ae:94:
                    df:cb:24:8c:fc:29:a8:7e:8c:f1:61:d2:c4:60:5b:
                    35:5f:2a:2f:79:44:56:6b:99:b0:f3:ec:62:96:ec:
                    8b:ec:fd:f8:68:7f:f3:bd:d1:ed:82:f4:eb:aa:2a:
                    04:ab:99:dd:5c:56:79:9a:11:e8:42:35:cf:a8:86:
                    f2:d6:37:49:54:6a:e6:de:23:64:47:18:53:0f:c9:
                    10:1f:89:d8:63:7e:2f:0a:a6:ce:40:1b:08:2b:ac:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:01:D5:8A:1C:37:25:61:01:CC:7E:D2:EF:10:A6:7E:39:A7:85:26
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/312282ef-e7d1-447a-8746-2d73364f5b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3790::/47

    Signature Algorithm: sha256WithRSAEncryption
         25:40:01:70:35:d2:ee:ce:88:40:c0:1d:42:16:2f:7b:91:26:
         3f:c4:94:d8:1e:dd:a1:40:58:e4:2b:a2:28:e0:78:2b:c9:d0:
         e0:02:ec:f7:91:ca:13:e5:fa:52:a3:85:04:34:1e:32:68:86:
         34:15:5e:7f:92:96:3e:8b:1b:4d:d2:8e:16:e1:d5:0b:51:c6:
         96:97:fb:df:ec:2c:86:d0:29:ad:a8:ad:5a:dd:2e:0b:8a:58:
         f6:e6:c7:2b:9e:e7:f7:ea:31:d1:78:13:cf:e5:78:96:c2:dd:
         18:1b:d3:ba:db:10:07:f6:e7:91:25:72:e3:b9:06:38:a4:c8:
         3f:2f:6c:f3:2a:6e:3d:bf:55:b8:2b:6f:d8:ae:ba:d5:50:e8:
         3b:84:48:e1:eb:19:40:e6:86:eb:eb:a9:e5:b0:8f:a3:07:a2:
         ec:cd:90:59:a3:c4:ba:34:eb:db:4f:d5:73:6b:fc:b3:ea:5d:
         3b:f3:90:30:33:b4:35:51:91:05:eb:a5:f3:92:a0:ea:bc:ce:
         27:ff:05:bf:4d:58:fb:2a:9a:25:c4:43:05:dc:de:08:40:c3:
         a0:2b:24:b3:f4:18:84:59:e4:54:fb:2a:c2:47:34:89:53:a8:
         06:86:cb:66:9a:e9:ba:02:68:89:c3:1c:d9:a7:c4:4a:c3:5b:
         57:93:a1:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:26 2025 by rpki-client