This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/353df89b-d7f7-4f7c-a3c7-1a5edfd13a94.roa
File:                     353df89b-d7f7-4f7c-a3c7-1a5edfd13a94.roa (raw, json)
Hash identifier:          4Tafuiw5dnJ7lXjSXDyXgKxifnQnH8YV8+A3dvNgsLQ=
Subject key identifier:   6C:CD:34:4A:38:A9:2A:D6:51:D7:A3:93:92:28:BA:77:D2:21:B7:A8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       050B2A4FCF13E27C6914C84F79CF360C626CEC57
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/353df89b-d7f7-4f7c-a3c7-1a5edfd13a94.roa
Signing time:             Tue 25 Nov 2025 12:51:24 +0000
ROA not before:           Tue 25 Nov 2025 12:51:24 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31cc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0b:2a:4f:cf:13:e2:7c:69:14:c8:4f:79:cf:36:0c:62:6c:ec:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 12:51:24 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=06974371b9499edae91f207c2a0cc0f2c2d1500ea63919e8ceb6941651b91e3c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:cb:31:d2:84:c4:e2:52:80:6b:ac:5a:22:
                    10:c2:8b:df:b4:b3:ef:db:a9:70:12:23:80:8a:cf:
                    b6:51:ab:d4:a6:a3:05:75:e5:84:91:ae:82:53:5e:
                    e4:bf:55:d9:ca:6f:84:67:62:c2:f7:06:e0:fb:2e:
                    5f:a0:82:3d:ee:cd:43:e2:cc:a3:b0:af:d4:32:63:
                    b0:ee:f6:68:1d:c0:e8:bc:49:20:32:42:85:59:8c:
                    7d:e8:ff:a8:74:35:f2:73:f8:53:7d:e1:51:45:ad:
                    14:6c:b3:95:98:89:1e:22:40:71:cf:91:83:7e:a2:
                    7a:91:04:9b:11:b4:e9:06:9d:ba:e5:07:e6:af:09:
                    0e:7a:91:e6:63:b2:36:09:6b:a2:00:48:d7:b2:01:
                    f1:88:96:61:84:2c:f5:66:d4:dc:45:c4:8f:2e:d0:
                    13:cb:ce:43:7f:60:57:58:20:5b:48:22:54:d2:2c:
                    d3:66:87:e6:09:28:fd:1a:99:82:77:72:26:60:37:
                    3b:10:ca:13:1f:40:ab:70:f5:53:5d:54:dc:a5:b5:
                    7c:b0:51:77:84:d1:2a:5a:e1:2f:76:22:58:e5:65:
                    43:1d:92:9d:15:44:cf:d9:f6:f5:6e:7c:ba:9a:11:
                    07:39:be:5d:a7:7b:db:c8:4d:63:4f:8e:d0:5d:81:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CD:34:4A:38:A9:2A:D6:51:D7:A3:93:92:28:BA:77:D2:21:B7:A8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/353df89b-d7f7-4f7c-a3c7-1a5edfd13a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31cc::/46

    Signature Algorithm: sha256WithRSAEncryption
         37:b2:76:2d:d5:15:c1:67:3f:01:0c:bd:b8:49:1d:13:4e:36:
         a8:31:71:ad:c1:d1:7c:1e:d4:46:30:43:f6:f1:0a:19:66:5d:
         0f:52:64:61:70:70:fb:c5:07:2c:81:d6:70:2f:a9:a5:0f:ac:
         27:c8:d5:d8:2c:1e:18:7a:4e:d2:3d:8e:44:c0:cb:96:51:80:
         22:61:98:45:cc:30:56:21:04:6d:a4:27:6b:30:fc:ac:fc:9d:
         db:09:01:41:87:8e:6f:f6:dc:3b:cb:4d:f4:dd:02:38:21:ce:
         98:67:9b:3f:39:69:1a:1f:27:15:47:87:83:45:64:0d:1e:55:
         ca:21:d6:34:65:38:77:e7:e1:d6:0b:a2:39:8a:26:3b:67:fc:
         1d:7e:a3:d4:4a:c3:f8:8e:7d:4b:21:11:49:07:e4:b6:b6:9b:
         2e:28:de:64:9e:22:3c:31:78:d8:65:96:58:53:f5:bb:0c:5b:
         48:34:0c:ec:2a:cf:cb:56:47:44:69:74:7f:76:97:71:1e:a1:
         7b:66:5d:6f:c2:85:21:9b:d2:5a:25:a9:bf:4a:ca:81:43:04:
         50:39:2b:8d:0e:56:23:ce:ec:44:5a:7e:7a:ad:11:ce:c4:9c:
         81:49:5f:bc:27:14:96:fc:a9:a3:bb:ac:81:e8:28:21:b1:82:
         9c:85:50:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:51:25 2025 by rpki-client