This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e63190b-dd83-4a46-ba21-d1b428cbeec4.roa
File:                     3e63190b-dd83-4a46-ba21-d1b428cbeec4.roa (raw, json)
Hash identifier:          vozRbAJ1qvWdoN+kZDGCyrmVnA8uR2oLgrn2PoMqkg4=
Subject key identifier:   32:84:71:5C:66:3F:B2:18:60:55:ED:CA:BC:7D:95:12:99:FC:46:2B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       48E988662D92B9B7340437904931E24DA6E7AE17
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e63190b-dd83-4a46-ba21-d1b428cbeec4.roa
Signing time:             Mon 24 Nov 2025 04:50:59 +0000
ROA not before:           Mon 24 Nov 2025 04:50:59 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fd0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e9:88:66:2d:92:b9:b7:34:04:37:90:49:31:e2:4d:a6:e7:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:50:59 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=1a507043ebd936ed2033ea71df43e9c9f6de53ebbb62fc8d93171f01d72ecd80, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:eb:f6:3d:6e:cf:c6:d5:e3:29:a2:25:15:14:
                    1f:07:9f:23:3b:10:5a:82:dc:cb:8b:ac:bc:0d:92:
                    79:85:ae:98:ca:06:83:63:c7:3b:7f:45:86:d0:df:
                    d2:ae:cb:cd:58:78:12:86:26:30:7a:2a:81:8f:84:
                    4d:39:8d:4d:e9:f7:44:15:48:83:65:f9:41:ce:84:
                    30:33:fc:a3:6e:83:8b:10:f9:30:6d:96:b2:6d:f1:
                    50:6c:88:77:5d:9f:0a:f3:ae:85:87:0f:b9:35:38:
                    db:65:f9:06:68:f4:15:16:4f:c9:0d:95:bc:5a:a9:
                    de:ce:6a:de:cc:11:18:bb:c2:d3:e1:41:c0:c5:3d:
                    6d:51:b1:f1:78:d3:1a:f6:95:b7:7a:1e:24:04:ec:
                    7a:30:52:25:9a:b7:39:5a:fe:9e:54:ba:02:27:15:
                    e5:8e:cd:cc:73:f8:74:20:cb:8f:7f:69:b4:02:3c:
                    f1:c4:ea:8f:20:df:e3:aa:66:74:77:6f:70:94:71:
                    eb:7a:90:66:9b:51:3d:66:08:62:1e:83:f7:4e:db:
                    c6:59:e1:1e:2f:a4:db:67:a3:9e:09:82:1f:64:3b:
                    4c:55:a3:3f:e7:3f:59:ba:90:a4:a9:58:13:28:1d:
                    93:ba:14:20:f5:59:5c:9b:a0:a1:39:0e:5e:99:5f:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:84:71:5C:66:3F:B2:18:60:55:ED:CA:BC:7D:95:12:99:FC:46:2B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e63190b-dd83-4a46-ba21-d1b428cbeec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fd0::/47

    Signature Algorithm: sha256WithRSAEncryption
         2f:01:e3:d8:8e:c2:29:99:22:17:5b:e8:5f:21:75:2a:eb:bd:
         e3:e5:1f:a5:5b:ed:a9:10:a2:1d:4b:ad:7c:7b:7c:6d:9c:5c:
         3e:15:cc:b7:70:97:8e:57:0f:55:fb:80:84:9d:91:54:0a:09:
         f7:e4:da:c3:4e:28:65:7a:6e:8c:5f:18:30:26:c9:67:7a:3e:
         0f:eb:2f:6e:d8:13:e3:a1:ee:4e:aa:5e:29:0b:7a:1e:9f:b3:
         da:35:d1:6e:55:13:2d:59:3e:d9:ec:06:dc:2d:6a:ea:88:32:
         05:92:c1:df:a4:90:e4:0d:68:0f:b0:38:0e:7b:5a:1d:84:97:
         de:36:ee:75:60:31:d2:34:b9:b9:9a:aa:a7:c4:5b:33:2d:41:
         2b:9b:b1:be:a0:f6:7b:cb:0c:08:b9:d1:25:1e:0b:04:e6:77:
         01:4b:95:c1:84:bc:49:e5:ed:4b:7c:79:ce:19:84:47:a8:65:
         4b:d3:88:4e:4c:6e:72:99:84:24:99:3e:c2:11:70:0c:86:77:
         f4:a7:04:ff:73:e6:77:9a:c5:9b:7b:b5:ca:fe:ab:88:d5:74:
         9c:11:f8:60:21:b3:8a:82:c9:69:bc:fe:50:30:91:b4:d2:91:
         43:63:db:97:95:e2:11:ef:49:a8:2b:88:b5:86:00:52:29:ca:
         56:97:d3:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:12:45 2025 by rpki-client