This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46960a3e-81ff-4962-9e3d-7c59196b0650.roa
File:                     46960a3e-81ff-4962-9e3d-7c59196b0650.roa (raw, json)
Hash identifier:          Bkaz94VeGqvB/8l+6mh5gTYbG1zjesE32lDchzye+Wc=
Subject key identifier:   ED:98:90:0C:83:6C:AA:73:BB:2B:19:6F:4C:06:B9:21:04:61:C8:A2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55D30739BB683D5208810524135FBF7BAFA2FCDB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46960a3e-81ff-4962-9e3d-7c59196b0650.roa
Signing time:             Mon 24 Nov 2025 03:20:08 +0000
ROA not before:           Mon 24 Nov 2025 03:20:08 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f4e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d3:07:39:bb:68:3d:52:08:81:05:24:13:5f:bf:7b:af:a2:fc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:20:08 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=48dbc5f15d6294cc9dc88cd6fe7759514ade8877c757e65ed0ca559d56798b31, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:ef:22:ed:b6:dc:da:e1:4b:23:e0:7e:b7:
                    20:35:92:ec:aa:70:c5:ae:02:9e:d1:49:b5:f8:5f:
                    8a:45:4d:9a:8a:10:0f:bd:ec:16:1c:1c:62:fd:06:
                    8e:11:12:7d:5b:b1:9d:85:f7:7d:3d:3e:13:9a:52:
                    1b:98:56:a4:e6:10:03:16:ad:e5:f4:16:79:56:01:
                    8d:c7:40:33:17:ca:d3:6c:bf:ea:6b:de:ff:2b:2c:
                    e5:c3:e4:7d:8a:d1:19:e5:51:f5:a3:11:18:17:94:
                    5e:76:d6:5f:28:a2:f9:39:fb:dd:4c:5c:ac:81:76:
                    9f:2c:c9:16:c6:e1:95:c5:bd:ca:f6:02:73:cc:ea:
                    12:d7:d7:d2:de:62:00:a3:f3:4f:62:86:cd:b0:bc:
                    f7:6f:85:32:f3:01:eb:90:f1:a1:50:e4:a4:84:b8:
                    0b:0c:33:67:40:97:15:94:03:f1:17:78:5d:72:45:
                    26:0a:4e:4a:1c:0f:47:fa:e1:2a:ff:2a:04:49:a7:
                    2c:fe:18:61:f1:54:f2:00:de:5f:42:51:dc:f0:f0:
                    11:be:a7:b9:8f:97:44:8c:20:2d:70:c5:40:95:a6:
                    c4:93:8d:24:d1:16:d2:de:19:b4:c8:21:5c:28:aa:
                    bf:16:1d:6d:22:8b:ad:b3:d6:51:6f:39:8e:e4:e7:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:98:90:0C:83:6C:AA:73:BB:2B:19:6F:4C:06:B9:21:04:61:C8:A2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46960a3e-81ff-4962-9e3d-7c59196b0650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f4e::/47

    Signature Algorithm: sha256WithRSAEncryption
         27:fa:bc:e9:05:08:bf:1e:4b:07:2f:b9:60:93:4b:5b:90:40:
         0e:8e:7f:a7:21:67:15:3a:6b:de:83:46:c4:6a:7e:34:4c:3a:
         2d:7d:a4:35:b7:36:b0:d7:ce:13:97:83:5c:f1:57:64:ba:ce:
         a0:2a:b0:2c:87:3e:e5:f9:bd:2c:eb:04:2a:04:a6:9f:1e:98:
         d0:3d:40:71:3a:a2:5d:2d:96:68:7f:16:fb:42:0f:f9:bf:c4:
         2f:fd:57:eb:f2:1c:d5:a7:49:88:73:e8:5c:e7:72:73:61:5f:
         45:5c:bc:a8:cd:3a:1a:14:13:6a:ce:8e:de:5e:53:02:c7:50:
         1e:76:c4:8f:9c:4d:46:e1:c3:05:ed:e2:a7:4d:f2:da:2a:cb:
         67:8d:a3:44:ac:a7:f0:66:a4:e1:ae:a8:1f:04:2a:ce:b9:e3:
         97:43:99:c5:ba:7f:bb:08:1e:af:14:96:40:9f:ec:8a:88:ef:
         ac:62:35:e7:5e:60:2a:be:cf:aa:4b:0c:cf:f3:63:15:b2:fd:
         43:b7:8c:d4:56:93:a2:13:79:f9:af:26:7e:43:4e:64:73:ee:
         dd:ea:48:6f:48:38:e6:04:36:ec:dc:93:da:f9:0a:73:1b:c7:
         75:46:fd:55:3e:48:54:05:23:87:e8:3f:a9:16:99:ea:08:81:
         66:4b:b0:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:55:12 2025 by rpki-client