This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3715298e-3fc0-4193-9802-a7e39968ef88.roa
File:                     3715298e-3fc0-4193-9802-a7e39968ef88.roa (raw, json)
Hash identifier:          35y1dzDFSCP67lkJXxu9Y1MQqMc+aodmZ3dfXLJwCtk=
Subject key identifier:   4F:E4:D7:91:10:DF:4C:2D:8E:B8:FD:5E:D3:DA:24:DE:AC:5B:FC:EB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       21BE2C51C43681C13989B492849D19492D24CE28
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3715298e-3fc0-4193-9802-a7e39968ef88.roa
Signing time:             Tue 25 Nov 2025 06:30:58 +0000
ROA not before:           Tue 25 Nov 2025 06:30:58 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ed0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:be:2c:51:c4:36:81:c1:39:89:b4:92:84:9d:19:49:2d:24:ce:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:30:58 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=2f69bf21b376b72fefd5bcb6e7dee3be5ca0bdc997e76a21f2d060a20851f706, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:52:f7:18:b3:d1:de:6c:8e:d0:77:05:18:
                    98:9b:07:59:17:0d:96:10:91:ed:f8:49:0b:fb:3c:
                    5e:bf:6a:5f:06:54:f5:37:bc:7c:1d:46:37:9d:aa:
                    cc:31:2a:d5:3f:a2:da:86:2e:22:02:9a:a7:6c:68:
                    1e:97:d6:5b:cf:73:cf:82:4d:59:6f:e8:b7:e7:da:
                    4a:58:80:00:55:95:92:e2:e1:eb:10:a8:04:8e:16:
                    d9:87:97:ef:30:fe:c9:f6:59:f6:a4:24:c1:ee:f1:
                    d3:73:5e:1f:80:d3:7e:3c:1d:6c:6c:11:5b:10:d4:
                    05:0d:76:7f:25:aa:29:57:44:dc:c8:8f:50:f2:c3:
                    47:c6:b6:ca:97:9d:77:22:14:ea:54:f8:31:2e:d9:
                    de:9c:b9:f2:86:a6:db:6f:6e:68:f8:79:b5:db:7e:
                    40:25:09:cf:d2:73:a4:2b:8d:13:b0:5b:ca:6a:b5:
                    f7:4f:f3:42:f7:d0:be:79:d8:0f:40:ab:0c:0d:fc:
                    a1:da:19:5e:92:d3:fa:4d:93:82:b0:f1:b9:7b:3b:
                    35:a7:19:16:2d:9f:8e:7a:ee:a7:a8:20:47:9d:b9:
                    d7:23:d7:af:0e:96:f6:27:4a:c8:a8:72:f5:15:a6:
                    94:eb:de:c9:51:54:c2:50:7a:62:6e:b9:aa:27:7c:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E4:D7:91:10:DF:4C:2D:8E:B8:FD:5E:D3:DA:24:DE:AC:5B:FC:EB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3715298e-3fc0-4193-9802-a7e39968ef88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:73:c2:c4:4e:72:c0:be:2b:2d:93:e6:df:d1:c8:7f:3a:b7:
         25:b8:1f:ab:95:4f:a0:d7:f7:4c:98:d1:11:cb:d7:e6:47:26:
         43:37:d8:2a:d3:5c:c2:c9:d8:2f:86:b7:69:ca:3f:6d:91:08:
         62:ba:1d:f6:fe:f9:92:12:67:82:34:c9:fb:a6:4d:19:15:0e:
         88:2c:a6:13:2b:d4:7d:e1:8f:8b:b6:71:4a:52:cf:48:fb:f0:
         a2:98:b7:8f:a3:b1:b3:7a:47:18:94:18:8c:e6:1b:ed:1e:3c:
         cc:36:d3:07:4b:d9:c7:64:fb:f1:6a:5b:34:1d:ea:57:20:ac:
         83:72:fd:50:cf:3b:cb:ee:9b:16:02:07:13:d0:c3:20:ca:88:
         f8:1b:73:8a:7e:d6:14:6c:f2:2e:28:f3:88:5b:93:eb:d9:3c:
         8b:f8:a9:76:50:aa:14:b7:5f:45:40:2c:6e:a2:5f:29:0b:a5:
         6c:64:71:cb:ce:23:04:63:2a:3b:ef:61:79:52:e9:c9:f9:a3:
         98:66:d6:37:d4:bf:76:da:19:5b:6b:5e:c7:e9:e8:03:2b:0a:
         cb:b7:9f:16:18:1b:5d:29:a5:06:c9:01:1b:be:3b:e6:d9:1a:
         57:97:f3:f5:d3:b2:9d:12:63:b4:bf:7f:99:17:8e:8a:e8:80:
         46:81:29:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:15:16 2025 by rpki-client