This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3df3cb03-1c2e-4d00-8f90-30d053f0c7fb.roa
File:                     3df3cb03-1c2e-4d00-8f90-30d053f0c7fb.roa (raw, json)
Hash identifier:          gBa2z34tDobeKpxk2lbYnoqAQkNFSOAUzttmbhffDDg=
Subject key identifier:   CB:F6:20:5A:AF:EA:F9:F0:88:E5:03:3B:F3:50:65:18:38:40:C3:B7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       60667F2B31A6A1C48856B622E766F4DEDB30D38D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3df3cb03-1c2e-4d00-8f90-30d053f0c7fb.roa
Signing time:             Mon 24 Nov 2025 08:00:47 +0000
ROA not before:           Mon 24 Nov 2025 08:00:47 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a7c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:66:7f:2b:31:a6:a1:c4:88:56:b6:22:e7:66:f4:de:db:30:d3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 08:00:47 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=1e0ae52242b1562d414a8607025c91a7a161feebe7c4edc7f4b13818b86c864e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:4a:7b:b7:5e:ed:39:b8:fc:5a:48:54:5e:
                    74:16:59:d0:6d:d4:d8:af:ee:97:82:fe:38:7e:18:
                    7d:2a:bb:ec:a0:02:b4:02:41:4f:a7:5b:42:ab:d2:
                    55:1c:8c:8c:df:26:c4:96:6f:da:ab:1b:c4:88:25:
                    ca:5e:05:98:81:78:cf:48:78:87:27:d6:08:e0:f4:
                    56:50:71:dc:f6:cf:fe:3c:22:f3:b3:87:69:49:db:
                    55:8b:5c:d6:17:35:f4:85:01:ab:53:ff:a3:62:9b:
                    23:6f:55:c8:58:79:fd:ef:62:f1:82:26:f5:2f:72:
                    25:b9:99:8f:23:f5:f8:69:6f:08:34:ce:8a:88:0a:
                    01:18:ac:76:7d:8a:47:c8:f8:ab:22:fe:52:8a:57:
                    17:0e:0e:79:d5:4f:e7:d5:db:e4:46:7b:4e:d1:91:
                    8d:0d:32:3d:12:08:a7:cf:94:ae:3e:a4:49:44:fa:
                    44:11:59:fb:71:15:af:50:03:7f:d7:09:c4:28:a0:
                    55:ef:a0:d5:50:fe:ff:66:02:03:76:56:c8:e5:fd:
                    69:fc:72:97:6a:7f:2b:f4:7b:45:2d:f5:d7:b7:26:
                    33:ab:ce:ef:f1:dc:ea:31:53:b6:dd:a8:a5:24:6d:
                    a3:04:ed:2a:6e:e6:41:78:0a:3c:e1:40:bd:ad:f4:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F6:20:5A:AF:EA:F9:F0:88:E5:03:3B:F3:50:65:18:38:40:C3:B7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3df3cb03-1c2e-4d00-8f90-30d053f0c7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a7c::/47

    Signature Algorithm: sha256WithRSAEncryption
         b8:ba:3c:97:de:75:93:69:b7:29:da:de:e9:ba:0b:ef:a4:88:
         95:12:ef:9a:05:8f:3f:23:40:c6:56:d3:15:51:de:a2:4a:4a:
         69:d8:86:56:6d:aa:4c:f3:1e:a4:88:cd:17:16:8f:b8:2e:3a:
         dc:85:8e:24:31:a5:30:f2:c6:89:6f:d1:03:9e:38:de:cf:62:
         f6:ef:92:b0:c2:1b:a4:4e:48:71:c5:51:8f:d7:f1:d0:9d:2d:
         22:d0:9b:80:e8:27:1d:50:d0:29:bf:d1:fe:58:e4:bf:c1:32:
         95:b2:e5:22:76:f5:24:5c:3d:a2:76:50:2d:f3:d0:c6:2f:7d:
         7a:6a:62:8d:0b:09:db:80:41:af:42:cb:a5:c6:12:b7:8c:5b:
         dd:ea:68:b0:a3:68:18:12:ce:21:f2:33:40:66:43:a9:f4:3e:
         b2:d5:32:b4:1a:ae:e6:4b:60:de:2c:a7:cc:ce:de:31:55:07:
         75:33:48:99:dc:9a:82:e7:b8:be:30:f6:b0:26:ef:51:41:be:
         90:b5:c7:b8:86:01:df:d8:4e:f2:01:3c:55:45:3e:79:c3:22:
         3c:a7:d1:57:35:07:f4:d4:25:07:30:60:f7:af:d8:7b:aa:fd:
         b6:2d:18:31:45:79:35:f2:a8:70:7b:36:69:17:27:b4:38:6e:
         bf:03:35:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:43 2025 by rpki-client