This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/427d3a13-d174-4ac5-bfeb-460c38bfd0cc.roa
File:                     427d3a13-d174-4ac5-bfeb-460c38bfd0cc.roa (raw, json)
Hash identifier:          QW9jxGbBxpRZ/jwqU9MOkyNsLIsxCD5e43yOVa1VMsQ=
Subject key identifier:   7A:E0:B7:FA:77:9D:8F:6C:0A:80:00:96:35:4D:C1:61:48:44:1A:82
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2D3DE8D189C7C97786CD8D0B7E9AAE7DF257A412
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/427d3a13-d174-4ac5-bfeb-460c38bfd0cc.roa
Signing time:             Tue 25 Nov 2025 09:50:09 +0000
ROA not before:           Tue 25 Nov 2025 09:50:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3248::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3d:e8:d1:89:c7:c9:77:86:cd:8d:0b:7e:9a:ae:7d:f2:57:a4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 09:50:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=bf8247d316080af7823780384e9e2766fc62da8b9d716c385103c3f8216acd14, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:b1:e2:48:de:47:83:bc:4e:e3:de:4c:72:
                    ab:29:cf:cb:9c:ba:67:36:43:a4:d6:7e:61:be:33:
                    b4:6e:e4:11:d4:63:0f:aa:2e:fc:2e:a8:4c:32:12:
                    7d:d1:b9:d8:ea:15:f6:b1:19:6a:12:04:91:52:55:
                    51:77:c1:52:00:1e:21:0a:42:c7:07:17:5f:40:81:
                    2e:24:f7:94:1e:9e:0a:c4:86:3c:fa:83:8b:80:d3:
                    5c:1f:38:b6:a0:8c:29:ad:96:37:38:4d:80:9a:46:
                    73:50:be:4e:ae:64:95:74:c6:90:1a:e0:4b:76:1d:
                    c4:89:6b:01:ed:23:b2:96:91:77:c6:24:49:31:96:
                    16:a7:72:6b:39:d8:61:00:68:1a:ba:01:3b:73:76:
                    97:52:7b:cb:3e:91:9b:f3:af:8e:30:6c:5c:c4:e0:
                    81:54:d7:eb:70:0f:a9:ff:7a:9e:77:f4:9c:b2:e9:
                    38:de:f3:ea:5e:02:5c:59:12:84:47:12:d8:17:e0:
                    68:e2:88:6c:9d:06:0c:07:27:72:dd:db:8f:59:da:
                    38:68:15:64:94:19:9e:3f:8a:b2:e1:70:59:cd:25:
                    c2:a8:5a:5f:76:43:dd:32:56:25:92:fc:1e:2c:af:
                    51:44:60:ff:c9:52:34:25:9c:df:2a:df:1e:af:1c:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:B7:FA:77:9D:8F:6C:0A:80:00:96:35:4D:C1:61:48:44:1A:82
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/427d3a13-d174-4ac5-bfeb-460c38bfd0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3248::/45

    Signature Algorithm: sha256WithRSAEncryption
         44:77:20:08:7d:00:32:a6:e6:f7:21:4b:91:e7:88:08:a8:56:
         df:1d:60:0c:db:80:23:a9:89:c1:5b:c5:82:61:42:ae:5c:29:
         aa:b4:46:38:9d:4a:ef:ca:1a:b9:88:94:a6:a7:2d:29:d6:38:
         64:3f:a3:c0:7a:ac:92:1d:d0:12:15:4e:02:59:04:d5:81:35:
         77:4b:f3:61:b2:ff:8a:84:9b:8e:65:a6:b8:38:46:b5:3d:da:
         7c:b5:bb:c5:f7:53:18:df:7f:a0:1b:f1:8f:a3:a1:f9:2e:05:
         27:57:3e:bc:2e:10:a9:cb:e5:08:2b:91:35:ca:6b:98:b4:09:
         25:43:aa:7e:0a:93:61:d4:02:1b:e4:01:f2:2c:0b:3a:61:56:
         07:a5:99:fb:ca:53:71:e4:c7:89:0d:d3:c2:33:4d:0f:08:99:
         91:74:f8:48:29:6b:d5:91:1f:8c:f9:88:dc:5e:6b:82:aa:c0:
         2d:52:01:0f:d0:6c:ee:6b:cf:9e:0b:0e:fc:4d:bc:5e:69:21:
         09:8b:db:61:ea:74:0f:3a:4d:f2:78:ea:79:45:ad:75:0c:24:
         d1:73:00:04:20:0a:22:5d:b7:ea:22:14:49:fc:41:58:83:bb:
         29:4b:ca:3c:d8:33:61:bd:01:cb:fc:66:5e:1b:14:1e:e4:a3:
         af:17:e7:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:17:08 2025 by rpki-client