This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a1cd6dd-66d3-4d9a-97bb-3f79e699ecdc.roa
File:                     3a1cd6dd-66d3-4d9a-97bb-3f79e699ecdc.roa (raw, json)
Hash identifier:          jvJdQQpeV6chU3pk5bboujtyhq9L3ww3PMW7Besh9MQ=
Subject key identifier:   6A:FC:02:AA:F9:30:F0:E6:99:F5:DB:F2:B2:30:EF:45:82:A9:A7:E0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       72681C824450CE657D1D6E5CA98FD8B97528402E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a1cd6dd-66d3-4d9a-97bb-3f79e699ecdc.roa
Signing time:             Tue 25 Nov 2025 03:50:43 +0000
ROA not before:           Tue 25 Nov 2025 03:50:43 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1fdc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:68:1c:82:44:50:ce:65:7d:1d:6e:5c:a9:8f:d8:b9:75:28:40:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 03:50:43 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=93853fbe0b605893195b6c450cd4cba6855ce1c506882cedf326297f529d5b35, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:e2:e2:86:d3:e7:34:c3:fd:c7:36:8c:08:
                    59:55:60:f7:fe:3b:bf:c6:80:de:d8:2b:dd:0f:a3:
                    19:69:36:25:35:69:84:c1:27:2d:a9:0f:67:a0:b9:
                    67:35:96:0d:f7:e1:6c:61:ce:f6:24:cf:31:bb:d7:
                    2f:0b:1c:93:89:94:d6:15:75:be:49:23:16:03:4f:
                    49:62:04:3d:4a:c0:25:0b:87:b8:f5:e9:06:2e:f7:
                    95:fc:c8:93:27:2e:85:e4:ec:14:06:fb:e9:23:f9:
                    55:ec:a4:7c:54:bc:f4:3a:c7:f7:49:58:ab:df:ad:
                    3e:64:67:3a:82:db:17:27:9c:f9:f2:5f:28:d5:f4:
                    f7:0e:0c:63:65:64:ad:66:4f:36:4a:39:4c:75:8f:
                    d2:63:0f:4f:62:2f:2d:1d:cc:3b:b7:c3:15:64:ec:
                    f3:4a:14:a9:d2:22:aa:9f:24:22:ce:15:36:b3:6a:
                    d9:47:a9:2c:05:13:b2:7f:22:eb:59:c9:ee:2a:b1:
                    d2:f7:64:fd:d9:d4:4b:0e:1a:1e:c6:fb:bb:d4:40:
                    a3:c1:07:78:b2:95:0d:c0:93:e5:bc:d9:10:47:eb:
                    fc:4a:10:3d:50:77:d9:ff:33:34:95:e0:1a:cf:d5:
                    c2:56:9a:9d:b9:31:ec:00:a7:17:78:76:6a:8f:e2:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FC:02:AA:F9:30:F0:E6:99:F5:DB:F2:B2:30:EF:45:82:A9:A7:E0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a1cd6dd-66d3-4d9a-97bb-3f79e699ecdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1fdc::/46

    Signature Algorithm: sha256WithRSAEncryption
         8e:e9:23:a5:67:00:d5:80:fa:f0:f0:3d:d4:bc:d9:de:02:1b:
         e8:4f:6a:d8:81:0e:e2:81:6d:01:b8:4c:61:eb:71:a6:cf:5e:
         41:c6:7a:38:4c:a2:c2:a9:21:5c:a8:00:24:72:2a:7f:a5:d3:
         64:75:12:46:af:5e:70:c1:bd:fe:25:1f:7c:31:9c:de:1e:5d:
         ee:d9:61:cb:61:b6:15:58:db:84:e4:18:6f:8a:18:32:a1:a2:
         3c:82:a4:1a:0e:18:b1:cf:14:38:2e:67:23:75:b4:8d:35:a7:
         04:37:1c:2c:a2:d7:26:fc:b4:12:59:c1:f9:9b:98:74:49:45:
         f2:62:3e:94:52:09:f5:e1:c9:40:78:47:37:b9:0f:5d:a5:a4:
         f4:07:aa:02:44:b3:b8:fa:25:76:33:27:b5:57:92:db:40:14:
         d7:17:1c:67:f3:89:e0:37:92:ba:05:4b:1e:7d:bc:c3:a9:14:
         3e:ed:9c:09:4d:34:b8:7f:85:4d:3d:16:99:82:9f:11:d1:8d:
         e3:9a:71:87:29:fb:7f:bf:40:a6:2f:41:25:f4:76:b3:25:80:
         8e:0d:33:f6:b4:a0:7e:8c:95:ad:17:d9:56:82:e7:48:05:fd:
         77:42:4a:40:97:e8:4f:62:a0:33:b0:d1:37:42:d0:1b:94:a0:
         f3:af:a5:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:13:03 2025 by rpki-client