This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4263fc22-5057-4141-aa2a-5c145dcb0948.roa
File:                     4263fc22-5057-4141-aa2a-5c145dcb0948.roa (raw, json)
Hash identifier:          GbuPLdwdc1vCgLTqojRsBYfTrwSzrYvP3/FeXpbkiaI=
Subject key identifier:   3F:34:53:D0:52:94:FF:92:C0:04:30:30:84:00:4B:8C:E4:EE:47:BC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       542AD33F7975F2AA6E6AB367BEB4D9ED674D61
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4263fc22-5057-4141-aa2a-5c145dcb0948.roa
Signing time:             Tue 25 Nov 2025 08:42:18 +0000
ROA not before:           Tue 25 Nov 2025 08:42:18 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c2a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2a:d3:3f:79:75:f2:aa:6e:6a:b3:67:be:b4:d9:ed:67:4d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:42:18 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=62491099a980fa88ad5aadb010212e324085ab83798ecd643d9fa2a01fa3bfbe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:1e:ec:f5:75:97:a9:7a:89:cb:c7:3f:ec:
                    d2:98:20:22:30:bb:cf:33:d5:f7:0e:dc:36:4a:29:
                    01:03:74:6e:30:9d:e4:0e:5d:0c:65:14:31:83:36:
                    12:0d:65:c8:54:22:02:4b:06:07:33:c1:ab:cf:b9:
                    0d:81:36:15:40:60:9c:29:9b:89:5a:30:b2:96:b0:
                    31:41:5e:45:ef:f0:d8:07:a5:2a:e0:fb:69:1f:e5:
                    03:aa:19:ee:98:39:84:2f:df:b0:09:32:42:e4:cd:
                    12:11:e3:c4:94:64:82:a3:87:cc:ec:4a:7b:27:a0:
                    a0:01:b2:9c:bb:b2:27:59:b0:ab:33:c9:10:88:97:
                    bd:46:35:da:6e:6a:23:5b:20:22:1e:46:96:be:73:
                    9e:e7:71:7e:ac:3b:ad:35:62:08:31:22:ce:e2:ec:
                    69:96:2f:93:fe:bb:5a:1e:00:86:dd:f4:65:88:52:
                    de:99:d6:46:6d:8c:42:fe:b7:ac:50:ad:08:5e:6f:
                    47:52:9e:bb:42:01:5d:37:4e:58:8e:39:3c:ea:d3:
                    d2:9d:6d:81:d7:6a:89:57:4b:e3:7a:0c:13:1f:51:
                    29:3b:77:bd:37:c4:52:ad:ce:0b:2d:b9:5e:9a:43:
                    00:a4:40:1b:73:e2:a4:84:88:f8:2d:5e:31:87:ee:
                    d2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:34:53:D0:52:94:FF:92:C0:04:30:30:84:00:4B:8C:E4:EE:47:BC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4263fc22-5057-4141-aa2a-5c145dcb0948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c2a::/47

    Signature Algorithm: sha256WithRSAEncryption
         b0:fe:84:56:59:40:da:b4:29:c6:bf:ec:a3:d8:f7:7d:8b:d8:
         a6:b6:8e:03:c1:d4:71:ec:41:61:de:0b:8f:8b:dd:cb:71:f5:
         33:3b:12:aa:c2:14:8f:e4:ee:e5:cf:4b:cf:44:9a:a4:a6:73:
         6a:7d:4c:8f:2b:e5:6d:6d:89:2d:ca:06:a9:85:0c:c3:00:3f:
         88:88:a7:1c:ca:67:8b:7a:5c:34:4a:2e:72:3d:23:40:5e:b1:
         dd:ec:d2:ff:32:20:2d:74:31:e6:23:26:f5:4a:f3:ba:f4:11:
         41:1c:21:5f:85:d7:fd:b7:8c:07:cd:7e:57:be:09:36:bd:46:
         da:eb:b9:12:c5:08:cf:16:88:1c:81:15:be:bf:7d:6e:d8:0a:
         50:9f:89:f9:ae:87:58:aa:cd:f8:07:f7:87:f4:a0:d1:2d:d5:
         67:18:79:53:7f:a1:eb:7c:05:8d:77:89:5a:f1:27:1d:d7:a0:
         ac:a6:4c:5d:94:eb:4c:1a:5f:3d:4e:73:75:2c:2b:5b:1e:2e:
         48:ba:23:8b:27:f2:9f:5e:4a:06:2c:b5:31:0e:87:f5:92:fc:
         d4:43:7c:25:e9:30:8d:16:5c:86:1e:6e:ba:53:bb:3a:94:28:
         a9:70:c1:40:5b:ed:fc:c9:32:a1:ff:03:d1:9e:6f:f7:ef:a6:
         80:3d:7e:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:49 2025 by rpki-client