This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4364d14d-774f-4364-aa79-61ea3700357c.roa
File:                     4364d14d-774f-4364-aa79-61ea3700357c.roa (raw, json)
Hash identifier:          r9WlQUUiOTIqSFjrsT388fQE0mpVnfeEPibICoN1PeM=
Subject key identifier:   BF:58:B0:1F:CF:5D:6A:F0:72:06:B3:CF:96:6B:D1:82:84:DB:02:12
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       64B7A90EFE7A8B49C37F25F4F2E79DA713596F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4364d14d-774f-4364-aa79-61ea3700357c.roa
Signing time:             Tue 25 Nov 2025 07:12:01 +0000
ROA not before:           Tue 25 Nov 2025 07:12:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39f4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b7:a9:0e:fe:7a:8b:49:c3:7f:25:f4:f2:e7:9d:a7:13:59:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 07:12:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=29c9972948cb9a9111a5be90935546f031f699a38397964265df265c53127669, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:87:03:8e:db:a2:ab:a5:19:53:72:6d:fd:
                    26:77:4c:0f:4a:34:1c:25:90:59:b6:9e:79:6a:7e:
                    8b:1d:14:52:44:be:bd:36:d2:2b:62:84:99:fc:63:
                    ad:0f:da:06:ca:f4:73:69:a9:3b:b9:b5:24:68:b7:
                    d0:82:8a:01:94:ad:c1:34:c3:21:d0:84:cf:cd:18:
                    3a:5e:e8:ef:89:6e:4d:b7:a6:56:81:dc:90:b5:88:
                    78:a4:50:00:b1:0a:91:35:2d:c6:f4:ed:53:6c:af:
                    18:ec:3d:ef:41:60:13:6c:3c:ab:92:68:f6:46:d0:
                    ac:de:02:7a:40:1c:5a:80:a8:57:2c:60:44:db:34:
                    9d:b1:c1:85:7e:dc:17:12:61:3e:98:f3:28:8f:d4:
                    ab:b9:a4:71:74:a9:b6:31:af:bf:4c:fe:2a:07:3f:
                    7b:b8:01:79:c2:23:38:87:f1:28:eb:10:22:d3:93:
                    a2:45:5b:fa:cf:06:39:11:60:f3:9f:11:fe:9b:d2:
                    1a:72:2d:a8:1e:d7:08:e1:6e:ad:c2:f4:b4:3a:0f:
                    db:4d:3e:86:9b:7e:42:c5:7e:51:26:59:a0:a5:9d:
                    c4:55:97:30:4f:f9:20:27:b9:e0:b9:b6:6e:6d:af:
                    ae:ba:c9:43:ad:da:60:17:58:04:ab:83:3c:8f:d8:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:58:B0:1F:CF:5D:6A:F0:72:06:B3:CF:96:6B:D1:82:84:DB:02:12
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4364d14d-774f-4364-aa79-61ea3700357c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39f4::/46

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:9f:85:8d:b6:fa:70:b7:1e:61:e8:17:25:7a:96:c4:c9:
         5b:e5:8e:02:8d:77:2c:e9:81:c3:ee:5d:6a:3f:97:96:bf:22:
         12:a0:81:03:c9:4c:78:1a:35:37:4b:91:8a:87:55:31:18:57:
         75:04:72:19:e4:69:98:22:1b:8c:80:83:c8:ea:8e:d9:3a:49:
         bb:bf:00:61:6f:fc:e5:e6:2a:97:08:4e:5e:e1:82:06:97:f1:
         23:8b:13:bc:b0:3a:d2:f2:e8:5f:4d:4a:ee:d2:62:70:57:8e:
         db:aa:98:cc:be:e8:81:e9:c5:04:9e:e9:c8:6e:20:a5:9f:0b:
         42:9d:dc:21:ed:f9:ff:03:d1:a0:28:7f:1a:07:35:dd:2f:31:
         5c:af:0a:7d:87:db:22:01:67:40:c4:fa:30:52:02:05:2f:ef:
         ac:f2:ba:26:37:d9:5a:9a:1c:8e:0e:9b:0c:a4:68:c0:d5:28:
         f7:9e:7a:99:d7:21:d8:40:92:44:f8:8e:ec:13:6f:f4:64:cf:
         89:2b:4e:29:6c:66:ea:63:8a:09:18:ca:42:74:28:1f:b6:78:
         b6:20:6f:05:b9:ce:5d:6f:c9:0d:b4:c0:9f:9f:70:02:9f:be:
         02:c2:0e:27:3e:fd:de:4b:d2:d8:39:32:65:18:88:84:df:5e:
         83:8d:d1:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:36 2025 by rpki-client