This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/335c7852-5983-4436-81bb-12ee144d3551.roa
File:                     335c7852-5983-4436-81bb-12ee144d3551.roa (raw, json)
Hash identifier:          33Fse1utVbkLujGIBsq0YM3fOFDjvFyYWKCw1bCFkiE=
Subject key identifier:   50:4D:FC:67:8F:2A:8F:E0:C5:32:2A:53:BB:73:D0:BD:FE:E8:48:C1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       47AC9EC3181DE6D13704B406FFA7783AB4DE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/335c7852-5983-4436-81bb-12ee144d3551.roa
Signing time:             Tue 25 Nov 2025 16:40:54 +0000
ROA not before:           Tue 25 Nov 2025 16:40:54 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1590::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ac:9e:c3:18:1d:e6:d1:37:04:b4:06:ff:a7:78:3a:b4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:40:54 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=45020024025e0a8ee86ab20c118211f3046c1980f3e98263a745f348278bf415, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:24:f0:2b:6c:c0:61:6b:32:ee:d7:e0:42:
                    1a:74:3f:a1:88:82:2a:ab:74:6a:60:a7:b3:74:d3:
                    fe:f5:7e:b3:55:93:64:d7:2a:c1:a7:e9:67:40:6a:
                    a6:e4:92:dd:8e:2c:a6:9c:a1:3c:cc:dc:d4:ef:11:
                    2d:d4:4c:d0:93:50:30:b7:15:ad:4e:3a:19:e3:54:
                    5f:81:cf:78:26:84:28:d0:75:09:51:f9:6b:b3:df:
                    13:45:dd:af:1c:54:d9:22:e1:89:53:b0:21:78:6d:
                    5d:ec:1f:8f:08:9b:bd:fb:71:05:65:60:4d:26:8c:
                    88:73:d8:0b:80:05:90:ac:9a:17:0f:34:1f:2e:94:
                    fb:88:dd:66:bd:90:62:49:0c:f2:80:29:11:ed:b9:
                    a1:5c:0f:bf:fe:81:1e:3b:fa:34:45:77:9f:bd:77:
                    8b:53:63:17:79:bd:80:a0:d3:46:75:1a:7a:58:c5:
                    a6:93:3e:47:91:1c:4d:df:33:73:40:02:d4:07:7d:
                    d2:eb:24:c4:c5:63:cb:1f:85:d4:e0:e9:03:99:71:
                    13:a8:a8:5d:86:83:62:00:59:b7:e6:1b:73:78:ee:
                    c8:cf:25:91:36:18:23:81:1b:7c:3a:31:f4:02:a5:
                    24:df:f4:c8:59:5f:a0:0b:a5:af:fe:d5:69:d8:8a:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4D:FC:67:8F:2A:8F:E0:C5:32:2A:53:BB:73:D0:BD:FE:E8:48:C1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/335c7852-5983-4436-81bb-12ee144d3551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1590::/46

    Signature Algorithm: sha256WithRSAEncryption
         37:59:63:07:81:d6:db:00:cb:4f:d9:0d:70:94:7f:ff:53:c9:
         2a:10:d9:d6:7f:90:58:d9:c3:04:de:f2:ea:bb:b1:1b:27:cd:
         e7:15:6f:3a:26:f4:d9:c2:5c:00:d0:23:da:95:b2:05:85:5c:
         f2:e2:98:e3:ed:af:2a:a1:8e:fd:21:93:34:48:7e:dc:11:9e:
         a6:8d:72:81:e9:47:22:57:bb:47:07:c7:07:ae:cf:1e:23:d1:
         c0:94:94:87:9d:a9:9d:a3:2b:51:1c:10:2d:c5:c8:cc:fb:52:
         29:83:8d:b3:fe:ca:a7:fa:74:0b:ad:da:cf:52:19:49:dc:57:
         94:84:28:59:64:48:d1:c5:9f:b3:b5:a4:2d:3d:44:53:0a:3b:
         33:c8:78:f2:8b:a9:73:2a:a7:11:71:e5:1b:3a:95:7c:94:f8:
         03:a2:4a:e6:79:b2:03:20:31:16:aa:c8:ac:7f:5d:16:41:51:
         03:ed:d3:d4:00:7c:d9:3e:5d:ee:f0:ed:1b:0a:a1:5d:2d:76:
         4c:b0:3d:ec:86:24:9c:2f:e8:07:c5:e5:d0:b0:a9:e6:a7:ea:
         8e:e9:59:e9:3a:77:d6:fa:b0:d2:c6:7a:47:07:87:3e:8b:1a:
         92:3a:cd:47:d5:37:62:d6:c6:31:f5:8e:48:45:2b:5a:dd:95:
         4c:2e:7c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:20:00 2025 by rpki-client