This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/407d77a7-5d29-4e99-b50e-369cd4b88ff4.roa
File:                     407d77a7-5d29-4e99-b50e-369cd4b88ff4.roa (raw, json)
Hash identifier:          LhvgcEx+XB11vqSjIFZ8h3Kd9X/6kb/Cy/ZWAfWTVHw=
Subject key identifier:   F4:37:6E:E2:64:69:44:E5:20:C7:7D:1B:88:23:27:FB:1D:B1:EB:95
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       28C7B5560FA81CC0DCA2474C732B2227DD7CED1B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/407d77a7-5d29-4e99-b50e-369cd4b88ff4.roa
Signing time:             Tue 25 Nov 2025 09:50:10 +0000
ROA not before:           Tue 25 Nov 2025 09:50:10 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3910::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c7:b5:56:0f:a8:1c:c0:dc:a2:47:4c:73:2b:22:27:dd:7c:ed:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 09:50:10 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=16dbaf5c930beadc3627b320323a568a064dd31b3efd1d67f63217dccd7c1dbf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:ec:b5:29:11:c7:1d:ae:69:77:b5:c5:f5:
                    a3:00:d7:d2:4a:45:14:a7:52:dc:4e:0c:f3:93:0b:
                    7f:4d:9f:1b:f7:cf:92:5c:8d:e4:57:62:01:9e:39:
                    c3:ca:04:76:42:d8:4c:00:87:a0:6c:af:00:73:f3:
                    b8:35:52:73:fc:a6:2f:a0:ba:c5:a9:3b:5e:10:09:
                    f6:38:01:01:c9:9b:d5:42:d5:8f:b7:ab:33:2e:64:
                    ce:ff:65:f4:29:97:31:89:6a:9c:3a:56:e1:b5:ba:
                    d9:33:ff:ba:72:1b:c1:fd:0d:ea:42:d4:b3:4a:6d:
                    fd:1c:9f:de:45:f8:c3:d3:ce:04:03:cd:10:7f:20:
                    2a:9b:42:7a:ea:6a:f7:fe:d4:75:c2:b0:0c:ff:60:
                    1b:16:db:86:4b:9c:3f:d0:d3:54:cf:78:aa:b9:5a:
                    81:91:99:39:81:6f:1d:de:08:59:03:4c:33:c5:e5:
                    9b:24:c2:f1:1c:34:45:6e:f1:20:7a:e2:f1:5d:42:
                    4f:67:c5:bf:41:2e:6e:2d:12:10:58:c8:7d:5c:6c:
                    35:b8:f1:54:f0:04:44:40:db:02:35:09:20:b9:e9:
                    c5:55:6a:3a:2f:42:af:cd:eb:0a:d0:8c:fb:50:5a:
                    72:2c:c6:1b:d3:d8:3c:38:c6:d0:23:77:9f:d7:2a:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:37:6E:E2:64:69:44:E5:20:C7:7D:1B:88:23:27:FB:1D:B1:EB:95
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/407d77a7-5d29-4e99-b50e-369cd4b88ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3910::/47

    Signature Algorithm: sha256WithRSAEncryption
         64:2c:ef:df:69:73:2a:73:be:3a:4e:a5:f2:59:ce:3d:df:8e:
         fc:42:85:a8:24:b8:cd:79:bc:b8:f7:11:c3:0b:49:cb:74:4e:
         a2:e6:26:29:c3:a3:c7:ff:fb:23:15:c5:6e:53:e3:fb:c4:ba:
         8a:40:b8:f2:6e:38:66:9c:70:09:d4:bd:bc:5f:5f:0f:45:96:
         50:98:52:7f:df:39:f5:a9:9d:c7:58:09:ae:fb:19:85:4e:23:
         ac:5e:b3:13:94:56:bf:5c:91:5b:da:b4:6d:eb:e9:ea:f2:59:
         f1:5e:35:4b:ec:ae:54:63:cd:7d:fb:cf:d7:af:66:1a:93:ae:
         d0:65:74:45:12:e8:5b:ac:c7:0f:dc:38:71:87:f9:00:07:38:
         8a:d2:05:98:cc:a8:cf:b7:e2:62:49:bd:0b:1b:10:09:e8:3c:
         d4:3b:51:57:e1:fe:07:a9:64:35:c9:f4:89:20:11:fc:72:21:
         d5:47:74:09:dd:a2:d4:6a:02:05:19:af:43:49:54:bd:d7:95:
         e4:56:66:4f:c0:c0:5c:97:f5:81:7c:06:5d:92:39:76:55:59:
         18:64:6f:14:df:f6:ba:44:06:d6:f0:3b:ce:2a:39:cc:39:ec:
         24:7d:24:9e:9f:87:86:59:ad:d8:d7:87:34:13:95:4e:c7:f8:
         b2:c9:4b:cc
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKMe1Vg+oHMDcokdMcysiJ9187RswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDk1MDEwWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNmRiYWY1YzkzMGJlYWRjMzYyN2IzMjAzMjNhNTY4YTA2
NGRkMzFiM2VmZDFkNjdmNjMyMTdkY2NkN2MxZGJmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCJuy1KRHHHa5pd7XF9aMA19JKRRSnUtxODPOTC39Nnxv3
z5JcjeRXYgGeOcPKBHZC2EwAh6BsrwBz87g1UnP8pi+gusWpO14QCfY4AQHJm9VC
1Y+3qzMuZM7/ZfQplzGJapw6VuG1utkz/7pyG8H9DepC1LNKbf0cn95F+MPTzgQD
zRB/ICqbQnrqavf+1HXCsAz/YBsW24ZLnD/Q01TPeKq5WoGRmTmBbx3eCFkDTDPF
5ZskwvEcNEVu8SB64vFdQk9nxb9BLm4tEhBYyH1cbDW48VTwBERA2wI1CSC56cVV
ajovQq/N6wrQjPtQWnIsxhvT2Dw4xtAjd5/XKkzTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU9Ddu4mRpROUgx30biCMn+x2x65UwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQwN2Q3N2E3LTVkMjktNGU5OS1iNTBlLTM2OWNkNGI4OGZmNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAORAwDQYJKoZIhvcNAQELBQADggEBAGQs799pcypzvjpOpfJZzj3f
jvxChagkuM15vLj3EcMLSct0TqLmJinDo8f/+yMVxW5T4/vEuopAuPJuOGaccAnU
vbxfXw9FllCYUn/fOfWpncdYCa77GYVOI6xesxOUVr9ckVvatG3r6eryWfFeNUvs
rlRjzX37z9evZhqTrtBldEUS6Fusxw/cOHGH+QAHOIrSBZjMqM+34mJJvQsbEAno
PNQ7UVfh/gepZDXJ9IkgEfxyIdVHdAndotRqAgUZr0NJVL3XleRWZk/AwFyX9YF8
Bl2SOXZVWRhkbxTf9rpEBtbwO84qOcw57CR9JJ6fh4ZZrdjXhzQTlU7H+LLJS8w=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:33 2025 by rpki-client