This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36a4ed05-e68c-4a92-aae9-f51b24728b36.roa
File:                     36a4ed05-e68c-4a92-aae9-f51b24728b36.roa (raw, json)
Hash identifier:          f/5USb0n1ESuVvzxz7rzTmB5It2fPMu/39oHyMoxZDU=
Subject key identifier:   6A:E3:E4:99:3B:EE:AB:BB:90:3B:35:B3:33:83:5C:9A:BB:21:29:51
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       574AB83069BAE229874A70E3CBAE074FA1C20334
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36a4ed05-e68c-4a92-aae9-f51b24728b36.roa
Signing time:             Tue 25 Nov 2025 06:01:03 +0000
ROA not before:           Tue 25 Nov 2025 06:01:03 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1cb0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4a:b8:30:69:ba:e2:29:87:4a:70:e3:cb:ae:07:4f:a1:c2:03:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:01:03 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=9753f1f150c7cee0add80b478adcb489ae36987a068dcbbae5a93cfb18bd3537, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:68:7d:30:28:ee:27:83:d9:5d:c7:c8:99:
                    7d:79:80:f6:63:47:18:ca:f1:e3:dc:f3:0b:3e:38:
                    e7:f7:f1:0a:ed:14:ac:4c:06:20:dd:e4:9d:5a:83:
                    a6:5a:40:ad:98:1d:f4:da:f0:be:db:d0:9a:05:a0:
                    8b:9e:cc:bd:7a:e7:a1:93:b3:22:7f:18:29:d3:71:
                    7d:cf:25:11:51:62:49:96:92:96:0f:c3:48:a4:59:
                    c2:d6:1d:14:76:25:8a:c8:fc:ce:cf:41:ff:1e:77:
                    22:46:dd:e3:58:fb:73:84:80:21:85:4c:de:db:8e:
                    27:ef:6e:40:63:1a:c3:40:ba:4f:90:2d:9f:28:86:
                    0e:a6:10:15:3d:ff:71:8d:85:c9:b7:fc:26:8d:f7:
                    c6:1c:1b:d9:02:3b:9f:1f:90:53:09:2a:49:67:00:
                    98:16:bf:60:9c:7d:8b:db:34:f6:72:ba:1e:3e:bf:
                    c4:60:27:42:51:07:58:86:3a:c3:43:31:df:4f:bc:
                    99:f3:81:23:7c:85:8b:53:bb:b5:65:c4:3e:9e:e9:
                    b1:db:50:ec:44:08:7a:67:64:15:a3:b7:a0:be:78:
                    50:88:1e:c9:5a:2a:41:86:be:26:e9:93:7e:fc:a5:
                    18:43:5a:d3:cc:82:dc:c3:b8:88:06:07:e6:56:8d:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:E4:99:3B:EE:AB:BB:90:3B:35:B3:33:83:5C:9A:BB:21:29:51
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36a4ed05-e68c-4a92-aae9-f51b24728b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1cb0::/46

    Signature Algorithm: sha256WithRSAEncryption
         6b:82:1d:82:73:9f:e6:63:1c:31:99:a9:6c:37:48:71:38:d8:
         43:7b:c3:d3:52:c1:4e:23:af:09:47:ca:d0:5b:fa:8a:75:e9:
         e0:68:95:c5:c3:4a:23:75:11:61:24:9e:9a:8f:a4:47:86:0d:
         e5:fc:39:31:79:bb:7c:ba:a8:8f:e3:6b:ea:2b:46:8c:fb:09:
         06:15:f3:16:1d:a9:1f:1e:e0:46:9c:ca:24:4f:75:10:cc:35:
         62:d6:8a:a0:42:94:f1:31:b8:9d:43:2b:6c:e5:9f:f0:77:12:
         9c:82:3b:cf:af:52:f5:58:0b:be:ac:b2:e0:48:20:dd:db:1a:
         ad:03:23:b3:50:10:5f:61:52:52:ad:0a:e5:b7:d7:d6:b6:86:
         73:06:96:d8:04:42:06:56:36:55:51:1b:c7:33:5c:4d:61:28:
         38:ef:b8:52:47:ad:c0:59:b5:ff:3a:c5:cf:8e:dc:ec:af:98:
         76:50:17:9d:bc:19:58:a0:66:02:82:b4:00:83:80:a2:6b:22:
         20:3f:3f:b9:88:fc:10:ea:bb:89:d4:9f:60:c4:38:af:73:98:
         b0:e7:8e:4c:bd:f1:fa:3b:04:75:07:af:bc:97:ce:b1:bc:e1:
         7b:35:24:a2:da:ad:65:cb:5f:ba:9f:8b:b0:e0:45:3e:aa:db:
         67:75:85:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:45 2025 by rpki-client