This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41d2e3a9-182a-4f50-aac0-385f72779ae5.roa
File:                     41d2e3a9-182a-4f50-aac0-385f72779ae5.roa (raw, json)
Hash identifier:          MMi1tqilSJbpHkjkW/pUl/9/CvCKq8nyqPTzoOvd7ZU=
Subject key identifier:   B1:34:BC:2D:9E:44:3D:A5:04:DA:CD:6E:92:61:F3:20:86:E4:81:1F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       31F949BD580A2ABF58D38C1360D3D74B1B2D509A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41d2e3a9-182a-4f50-aac0-385f72779ae5.roa
Signing time:             Tue 25 Nov 2025 16:11:32 +0000
ROA not before:           Tue 25 Nov 2025 16:11:32 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b56::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f9:49:bd:58:0a:2a:bf:58:d3:8c:13:60:d3:d7:4b:1b:2d:50:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:11:32 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=863a7e6891f17468e293c61ec556ac689742a7756602ade019b42658ebf5ee0f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:2a:cf:50:42:18:c1:63:78:ad:d7:52:7a:
                    40:b1:64:b0:79:c5:48:97:43:dc:fa:d9:c6:9b:3e:
                    b6:64:54:fb:93:14:0e:6a:4b:0f:6f:4a:97:d6:a1:
                    32:11:2b:f0:2f:52:61:a5:d7:3c:86:69:1f:e0:be:
                    bd:94:62:12:e8:cc:8f:5f:68:66:49:f5:53:00:3d:
                    9f:9d:f8:27:84:97:67:31:5e:4c:49:af:24:26:2c:
                    6f:be:76:58:f7:11:6b:0a:6e:d4:eb:b9:5c:91:0a:
                    4f:5b:a6:31:84:fc:24:79:38:08:af:7e:a5:0f:b7:
                    d5:bf:72:92:06:e0:05:b5:31:3e:b5:dd:49:e2:84:
                    7e:1a:aa:6e:3f:65:61:36:53:87:63:c3:a5:ab:32:
                    d0:14:b5:6d:4f:3d:cc:83:60:e4:33:6f:1d:9f:1d:
                    5b:0a:b7:83:46:e9:f3:a2:0f:4c:50:a0:99:f8:9b:
                    e9:ed:73:88:96:93:5f:37:51:19:29:97:8c:38:58:
                    46:40:46:40:69:6e:78:b2:21:da:5b:e7:06:c0:74:
                    31:9f:f3:35:c0:83:f8:5d:63:4e:88:6b:69:2d:59:
                    04:74:40:60:fe:aa:81:85:92:33:1d:97:48:a1:c7:
                    bd:f6:16:9a:70:28:45:88:17:49:11:d7:37:45:69:
                    75:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:34:BC:2D:9E:44:3D:A5:04:DA:CD:6E:92:61:F3:20:86:E4:81:1F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41d2e3a9-182a-4f50-aac0-385f72779ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b56::/47

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:de:11:c9:d3:de:d8:31:b1:ac:52:0f:ca:f3:cb:c4:82:
         28:e6:d3:76:2f:ce:8e:5c:88:51:b3:6b:45:02:6e:c3:20:23:
         f1:70:37:9e:8e:bc:2e:59:b1:d2:0b:a1:a5:46:5f:6b:62:d3:
         69:0c:02:e1:72:1b:3d:ae:0b:1e:55:4e:97:f6:eb:a7:f9:c8:
         e4:9e:11:98:d4:cf:d7:6f:8e:6f:4b:cb:69:3c:61:ad:32:e7:
         08:97:d7:96:41:f6:7f:40:11:f5:7e:a8:a4:34:f0:af:b7:3c:
         fb:2d:49:ed:14:f2:d7:92:dd:cf:7b:c6:b8:b7:c3:49:d9:74:
         f8:d5:81:fe:11:8b:13:15:1a:1c:9a:24:0e:7e:1d:e4:f8:10:
         cc:f3:8a:2e:96:4d:14:26:9c:af:4c:6e:21:de:85:cb:98:a9:
         2d:e3:79:b1:0c:ba:f6:5d:c3:43:93:85:88:d7:05:0d:c4:18:
         db:dc:be:da:fd:1f:6d:2d:63:45:64:52:79:dd:28:46:1a:b0:
         06:8f:8f:17:34:fd:f2:2c:8e:78:2a:9e:fc:07:b2:ba:5b:7e:
         01:15:29:0c:0e:d3:3d:f0:a8:73:b8:90:a7:61:cd:f0:90:6f:
         7b:31:8e:bb:21:49:c2:9b:4f:a4:e6:0e:ce:34:23:f3:f3:48:
         8c:7f:ed:81
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMflJvVgKKr9Y04wTYNPXSxstUJowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTYxMTMyWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NjNhN2U2ODkxZjE3NDY4ZTI5M2M2MWVjNTU2YWM2ODk3
NDJhNzc1NjYwMmFkZTAxOWI0MjY1OGViZjVlZTBmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSlCrPUEIYwWN4rddSekCxZLB5xUiXQ9z62cabPrZkVPuT
FA5qSw9vSpfWoTIRK/AvUmGl1zyGaR/gvr2UYhLozI9faGZJ9VMAPZ+d+CeEl2cx
XkxJryQmLG++dlj3EWsKbtTruVyRCk9bpjGE/CR5OAivfqUPt9W/cpIG4AW1MT61
3UnihH4aqm4/ZWE2U4djw6WrMtAUtW1PPcyDYOQzbx2fHVsKt4NG6fOiD0xQoJn4
m+ntc4iWk183URkpl4w4WEZARkBpbniyIdpb5wbAdDGf8zXAg/hdY06Ia2ktWQR0
QGD+qoGFkjMdl0ihx732FppwKEWIF0kR1zdFaXVvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUsTS8LZ5EPaUE2s1ukmHzIIbkgR8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQxZDJlM2E5LTE4MmEtNGY1MC1hYWMwLTM4NWY3Mjc3OWFlNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAO1YwDQYJKoZIhvcNAQELBQADggEBAGoM3hHJ097YMbGsUg/K88vE
gijm03Yvzo5ciFGza0UCbsMgI/FwN56OvC5ZsdILoaVGX2ti02kMAuFyGz2uCx5V
Tpf266f5yOSeEZjUz9dvjm9Ly2k8Ya0y5wiX15ZB9n9AEfV+qKQ08K+3PPstSe0U
8teS3c97xri3w0nZdPjVgf4RixMVGhyaJA5+HeT4EMzzii6WTRQmnK9MbiHehcuY
qS3jebEMuvZdw0OThYjXBQ3EGNvcvtr9H20tY0VkUnndKEYasAaPjxc0/fIsjngq
nvwHsrpbfgEVKQwO0z3wqHO4kKdhzfCQb3sxjrshScKbT6TmDs40I/PzSIx/7YE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:15:01 2025 by rpki-client