This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42d4d4ee-48f4-4d48-8b52-9f2a89334724.roa
File:                     42d4d4ee-48f4-4d48-8b52-9f2a89334724.roa (raw, json)
Hash identifier:          XIdfTicK1yWJsPrBVwSoHcZKp/ZhOfltCkCZmeP/P64=
Subject key identifier:   C9:3C:9F:6D:EE:A4:46:E1:10:93:E1:CC:21:C9:36:67:3B:0F:36:63
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       58A65C07D84EF9FE71594AB2E736CAC9DD4C4854
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42d4d4ee-48f4-4d48-8b52-9f2a89334724.roa
Signing time:             Mon 24 Nov 2025 03:50:12 +0000
ROA not before:           Mon 24 Nov 2025 03:50:12 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:321e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a6:5c:07:d8:4e:f9:fe:71:59:4a:b2:e7:36:ca:c9:dd:4c:48:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:50:12 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=d111b099494543f9d12e5053311c3f5c8806431d6ff92a9a693f38fd6f4db43a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:aa:86:93:8f:66:9b:1b:31:0f:9c:c3:d0:
                    e8:fd:85:ee:e4:a6:a0:c4:35:ba:cc:74:54:ca:c7:
                    20:9a:36:60:a6:21:39:2d:c4:87:eb:00:40:07:ca:
                    99:1d:04:89:8a:60:aa:44:46:cb:bd:00:d5:21:0a:
                    85:b7:6d:d3:6d:97:a1:27:8f:b8:92:ae:4c:46:67:
                    31:93:a2:7a:99:4a:02:c0:33:be:65:f2:27:09:12:
                    96:5a:07:4f:3e:35:04:6b:80:0b:22:90:f2:1d:d7:
                    9d:92:cd:9e:fb:50:14:f6:16:79:a8:e5:ec:52:4b:
                    4a:2a:56:ef:16:50:57:57:5e:f2:6c:2c:79:62:b6:
                    50:22:3a:8e:2b:ca:e2:5f:07:30:ab:2d:c6:d4:35:
                    d9:5d:72:a6:1a:e8:0e:c5:9f:00:13:d9:05:d0:5b:
                    f8:45:80:82:6d:49:fc:ac:91:a2:59:94:3d:41:dd:
                    16:c3:6d:d0:be:74:ce:a0:3b:08:0e:c5:6b:a9:3d:
                    8b:c2:e9:83:36:0f:5d:e1:ba:cf:81:40:2c:f4:1f:
                    0b:a9:0b:c4:2e:a0:cb:26:ba:b2:7d:67:c7:c3:51:
                    aa:ee:dc:e2:ed:6f:c3:39:78:7c:65:6b:52:f3:07:
                    05:e9:10:dd:5f:41:79:49:78:7e:50:14:a9:d0:a7:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3C:9F:6D:EE:A4:46:E1:10:93:E1:CC:21:C9:36:67:3B:0F:36:63
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42d4d4ee-48f4-4d48-8b52-9f2a89334724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:321e::/47

    Signature Algorithm: sha256WithRSAEncryption
         bc:ab:ae:b5:66:5d:98:c8:35:c2:07:3f:3b:23:c8:8e:bb:0d:
         da:3b:f7:c3:24:b2:a0:8c:cd:85:c4:1a:1e:88:7c:82:ce:5c:
         8b:d8:a9:a6:ee:ff:a2:e0:ab:7c:ac:2c:24:29:37:52:52:38:
         60:18:a0:73:ef:bf:04:0e:d8:ed:12:d0:b1:eb:88:5a:8e:a9:
         0b:9b:20:41:fb:59:cc:b0:16:91:4d:03:72:a2:5f:82:7a:db:
         90:67:20:1c:b9:26:f9:f2:6a:81:aa:84:87:88:9c:72:67:ec:
         ba:7e:e1:23:83:b4:07:0c:3c:a1:c3:56:58:b9:5f:2a:08:70:
         ea:b0:8c:67:e1:c2:f7:50:33:3c:32:4f:4c:40:7c:8a:f8:2f:
         d7:a2:b3:4f:ef:d8:a9:5e:a7:eb:dc:ff:ec:60:f1:fa:f2:12:
         5b:27:d4:d0:d5:68:38:50:cb:36:72:3d:02:4d:4e:2d:16:60:
         cc:94:86:1d:a9:7b:f8:52:82:68:e8:fc:b6:f2:07:67:48:95:
         75:95:46:f0:76:47:8a:f4:da:2f:99:c4:76:39:6e:7f:02:d9:
         ad:25:94:e6:df:53:56:57:b3:91:ad:ef:be:ff:3f:9a:72:52:
         8a:71:93:df:1c:62:f4:33:b3:27:77:4c:4d:ad:8c:44:80:69:
         96:63:bd:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:28 2025 by rpki-client