This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/420f5cb6-8d8d-427a-805d-27dc584174ff.roa
File:                     420f5cb6-8d8d-427a-805d-27dc584174ff.roa (raw, json)
Hash identifier:          XkRqIS+WRYGjjpApSC4eiKr35SCaBnNHNz+Pkuzdw5k=
Subject key identifier:   6B:31:17:FA:6B:D0:B7:CE:F7:CE:7C:CE:2A:7F:1E:F2:E3:5A:BF:E6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       073BD7B6D7E4D9385C99D80C5A680F6F6C79B3DD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/420f5cb6-8d8d-427a-805d-27dc584174ff.roa
Signing time:             Tue 25 Nov 2025 18:31:04 +0000
ROA not before:           Tue 25 Nov 2025 18:31:04 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cde::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3b:d7:b6:d7:e4:d9:38:5c:99:d8:0c:5a:68:0f:6f:6c:79:b3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 18:31:04 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=9636a8e07aa6c6fe7bcb3d1e5bfaade79fc02d4cebcfe506af1c95778f7f604d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:11:6f:24:ad:f4:ce:20:67:5d:b8:a4:60:
                    47:ab:e9:55:ea:9e:2c:bb:e0:06:a3:11:cf:2a:ca:
                    cd:59:b7:2c:1b:40:a5:db:92:20:9f:f1:50:9e:4f:
                    d6:26:a1:a8:24:31:b9:bb:2f:68:b8:2b:f0:fc:3b:
                    6c:65:40:a6:51:72:af:bd:27:a3:57:1b:b4:df:aa:
                    f9:36:0f:b1:35:25:ce:17:79:0c:14:44:39:02:d6:
                    aa:66:d3:bf:e0:cf:45:7c:9f:d7:3e:a3:76:20:99:
                    8f:eb:09:f8:9c:ad:cb:ee:8e:77:b3:ba:f6:d7:84:
                    ae:ac:5a:f2:5c:6a:6a:e1:54:6b:bf:e5:f6:c9:de:
                    fd:3f:15:8d:a5:ba:46:74:e7:30:fb:f0:58:cd:b5:
                    bd:a6:db:75:f3:00:39:fa:8d:4d:bb:83:75:9b:71:
                    20:62:8b:bd:7c:35:3b:32:fe:94:9c:1b:4e:46:45:
                    97:90:0f:23:5d:0b:fe:7d:fa:92:a9:a9:4f:a4:be:
                    00:ea:1e:f5:1b:2d:7d:de:e3:c0:fa:3f:51:e7:88:
                    e9:91:97:88:53:7b:c1:b6:38:b1:53:38:5e:91:ab:
                    a5:0d:5c:a9:5a:f6:0d:ef:de:98:6a:f7:bd:2f:09:
                    37:1d:e8:d9:57:19:ff:87:eb:60:8a:57:cb:d2:dd:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:31:17:FA:6B:D0:B7:CE:F7:CE:7C:CE:2A:7F:1E:F2:E3:5A:BF:E6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/420f5cb6-8d8d-427a-805d-27dc584174ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cde::/47

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:d2:50:43:65:79:e7:cb:ab:4e:45:10:aa:35:90:50:87:
         23:b9:06:08:ce:3f:3d:59:88:0b:2d:82:b4:5d:d5:3c:dd:7a:
         4d:88:82:8e:6c:54:f6:68:43:db:53:a8:a2:99:13:25:9b:30:
         9a:34:27:d9:9a:b4:56:90:34:3c:df:c6:97:ef:c9:9d:b1:df:
         5d:24:66:71:35:78:fa:dc:d0:d5:67:74:41:ec:be:fd:37:27:
         3a:82:3b:e1:f7:c4:9f:d9:44:ee:f5:8c:aa:b0:13:3f:11:d0:
         b3:d5:9b:59:5e:58:74:44:01:32:a2:97:7d:59:6b:a0:ad:3a:
         aa:44:01:ad:7d:b4:33:ce:da:59:c8:fc:43:c7:fc:f4:4b:f3:
         7e:ac:cb:6c:46:c4:2f:5b:d7:0c:ec:7d:b8:94:1b:2f:1f:14:
         84:21:18:5e:b9:5a:3f:d4:d6:64:5b:ee:f9:d1:6e:78:a4:01:
         61:10:23:27:b4:27:2b:d4:92:c9:3a:0a:7a:04:11:92:c4:d7:
         13:a6:53:00:a3:84:87:65:4d:90:c6:67:10:51:5e:d3:da:9e:
         1a:bb:14:1d:63:9b:46:2f:88:ff:95:f1:08:4d:ce:20:76:05:
         99:16:e1:58:71:0b:c2:47:5b:8e:c6:03:51:0f:58:59:81:85:
         11:c5:ea:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:36 2025 by rpki-client