This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3127d818-63bf-4cbe-87dd-115fbd6b36a8.roa
File:                     3127d818-63bf-4cbe-87dd-115fbd6b36a8.roa (raw, json)
Hash identifier:          Mizx+fNEVO/78hKxhygxspCevOfBJ7z3dgNpMvB94ac=
Subject key identifier:   17:1E:87:62:F3:C3:13:B2:6D:E8:0B:E6:6B:28:5E:4F:DB:D3:09:57
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       11ACA75EE98C66C6B92F9FCD22ACFBB560A7C917
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3127d818-63bf-4cbe-87dd-115fbd6b36a8.roa
Signing time:             Tue 25 Nov 2025 16:30:54 +0000
ROA not before:           Tue 25 Nov 2025 16:30:54 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cca::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ac:a7:5e:e9:8c:66:c6:b9:2f:9f:cd:22:ac:fb:b5:60:a7:c9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:30:54 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c123d632e89bb42910fc6b19cd69b9586915594fdc4526054f0f4a4f96e4ed44, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:de:5b:26:2a:8d:b9:cc:ab:0a:f9:e5:2a:
                    b4:e4:8d:ec:58:81:e5:1d:ad:e3:95:3e:76:4c:bd:
                    e5:cd:db:ad:2f:e1:d5:9d:df:35:81:6e:98:74:6d:
                    e1:c3:bd:5c:c8:1a:83:fc:4c:69:a8:55:73:9c:f6:
                    96:82:54:c3:84:ca:ed:b6:ed:90:65:38:7f:93:b2:
                    ef:c8:03:c6:b1:54:35:c9:f3:9c:8e:db:1a:62:94:
                    62:6e:89:c9:dd:74:92:3e:a5:ff:a2:1f:18:c8:7d:
                    28:d5:f6:17:c9:17:bf:4a:24:9f:f5:00:05:c2:4a:
                    94:b5:02:ba:f5:84:a3:68:64:90:4a:18:10:0a:55:
                    7d:d5:e8:2d:b9:64:44:36:27:af:0e:3a:73:58:14:
                    6f:e0:f1:f0:98:7c:45:03:f5:49:8c:45:05:77:0a:
                    b9:33:52:73:f7:fb:40:10:a1:6d:1f:e3:83:25:87:
                    d7:51:81:18:01:b4:76:4a:1e:be:f7:e8:29:b4:2c:
                    f3:0b:89:2d:9f:d6:d4:b8:a6:02:bc:6d:36:00:e3:
                    a4:6c:06:dd:d6:c4:2c:65:dd:b0:f3:58:f5:ab:c5:
                    e7:ea:79:03:2e:81:06:67:c8:d4:67:90:ce:88:a0:
                    70:e3:31:66:4b:92:c9:81:c2:a3:1c:19:73:2f:94:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1E:87:62:F3:C3:13:B2:6D:E8:0B:E6:6B:28:5E:4F:DB:D3:09:57
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3127d818-63bf-4cbe-87dd-115fbd6b36a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cca::/47

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:1e:8c:94:83:3e:2b:81:ef:c8:bb:ed:f0:95:38:49:e5:
         3e:ca:29:2f:a1:29:a0:fc:d8:08:94:a7:aa:e3:74:c3:9f:bd:
         6a:ad:b8:50:f6:a9:75:d0:0c:47:5d:d9:fe:a5:0f:d7:c1:c9:
         72:6d:6d:22:a4:8b:6d:12:47:06:c1:98:a0:9a:6d:93:55:12:
         ef:bd:76:ba:d5:a7:b6:0f:27:19:ea:c1:25:4a:ee:03:b8:98:
         8d:1b:e0:90:f0:d2:63:24:31:61:18:05:67:6c:54:7d:c5:9f:
         5c:08:66:18:4d:2a:32:3f:53:ac:6e:27:77:cd:9b:94:12:0e:
         18:c0:59:7d:33:cb:2f:e4:c8:4a:72:5b:82:7d:52:6e:4b:c7:
         e6:9d:de:0f:58:5c:cd:3f:b4:bf:4e:7d:cb:48:27:0f:47:2a:
         eb:07:1d:b4:b7:27:f9:10:cd:60:6b:f5:28:4b:58:3d:12:7f:
         d7:16:e9:c9:0c:df:c8:76:25:b3:e3:db:67:c8:e6:7c:cf:28:
         c6:4a:8b:ce:0d:03:0c:3b:14:0d:06:88:ef:01:9c:a8:29:4f:
         07:d2:41:d7:da:47:8a:61:df:60:ca:21:5e:3a:8b:cc:84:9b:
         ba:dc:9d:c6:67:57:dc:c9:99:f0:3e:72:c3:af:a3:a9:aa:d9:
         38:d1:5b:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:02:18 2025 by rpki-client