This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47569c50-e0f3-4518-aea9-28d3a98e6459.roa
File:                     47569c50-e0f3-4518-aea9-28d3a98e6459.roa (raw, json)
Hash identifier:          Rn6Dx4E6kQXQopqLgaVuA+v4zM7Rbh5gYXqIb4cRYqQ=
Subject key identifier:   58:46:7C:CD:F7:DC:72:4C:81:B0:9D:50:21:9E:0E:42:7B:7A:20:E8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E1EF628586A7047F4BE1991FE44E26DB5DAB0B2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47569c50-e0f3-4518-aea9-28d3a98e6459.roa
Signing time:             Mon 24 Nov 2025 02:31:28 +0000
ROA not before:           Mon 24 Nov 2025 02:31:28 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ace::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1e:f6:28:58:6a:70:47:f4:be:19:91:fe:44:e2:6d:b5:da:b0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:31:28 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=acb3ea06745d0d5dc35b6bb2184ad74f8a431286306b1b018690b2838161c0c9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:fe:ca:04:e5:de:1f:e6:ea:ac:8d:85:5b:
                    19:54:20:a0:fe:fc:3d:5f:4a:8d:17:75:3a:5b:83:
                    48:5b:90:8c:68:b8:f3:86:8b:30:b2:39:1d:51:5e:
                    9f:89:23:28:ae:e1:67:68:8b:0d:8b:f7:7d:ad:95:
                    80:7b:6b:b6:cf:d2:a5:da:da:66:c6:f1:26:83:b0:
                    7e:c1:4d:d5:3c:9a:1a:77:58:c1:94:88:98:b3:2d:
                    f9:7b:fd:28:7b:58:ea:5e:88:21:48:6e:4f:a3:ee:
                    2a:a6:1b:1f:9b:ec:ef:96:53:73:b3:36:13:3a:87:
                    3a:df:1f:fb:fe:64:a5:d9:60:2f:01:e2:65:dc:b5:
                    5b:55:0a:88:ad:32:fd:49:c2:06:5c:af:50:8c:d7:
                    72:33:56:4e:cd:f9:c9:8a:9b:59:20:d4:0c:2b:2c:
                    52:2f:ad:5d:80:7a:e7:92:0d:51:4d:2c:59:f9:20:
                    5e:d2:92:a9:93:87:42:1b:9b:ae:00:63:46:c2:5f:
                    57:7f:53:8a:36:71:4e:8a:a8:bc:6e:60:de:13:a6:
                    41:d7:05:2c:7f:55:f7:61:42:4b:5b:94:6f:8e:9f:
                    9f:ec:75:86:f2:8f:ff:e7:cc:23:2a:ec:bb:5a:d1:
                    8e:8e:a5:39:08:af:c0:c4:18:e2:c8:4c:6f:be:70:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:46:7C:CD:F7:DC:72:4C:81:B0:9D:50:21:9E:0E:42:7B:7A:20:E8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47569c50-e0f3-4518-aea9-28d3a98e6459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ace::/47

    Signature Algorithm: sha256WithRSAEncryption
         72:7c:2d:54:70:4d:97:78:2b:62:48:d2:52:42:10:34:cc:5c:
         d8:43:b1:99:dd:ef:5b:2b:97:cd:01:6b:1e:9b:0b:82:7c:ac:
         87:61:53:1e:c7:b8:9d:25:c1:c2:bd:58:3a:a3:6f:f6:9e:f4:
         d9:5b:9a:bc:e7:09:db:40:3d:88:ee:56:c0:37:bc:95:69:44:
         42:5d:d9:75:87:c2:d5:6f:25:c5:43:a8:e8:a9:b5:a1:9f:94:
         69:81:42:dd:bd:88:4e:4b:a2:af:3a:f9:36:2b:7a:93:78:e5:
         37:2a:df:3c:50:3c:ad:60:43:74:eb:73:b6:a1:4c:72:b5:e8:
         8d:d7:c8:7c:e8:28:79:6b:32:e3:d1:38:79:81:30:2b:4d:36:
         96:e5:0c:4f:05:9f:a6:6a:b5:aa:82:46:6c:4c:6e:ca:79:ab:
         64:9a:18:9f:c3:3b:71:d9:e9:01:2c:df:a7:f0:d1:4a:0e:6f:
         f9:34:16:f8:b0:ab:93:6a:08:e9:30:d6:20:7c:c1:75:b8:55:
         8d:ac:ff:11:c8:c9:14:e3:7f:25:3a:be:62:f1:03:92:2e:e7:
         9b:85:81:41:6a:39:b9:43:e3:d9:63:06:21:57:1a:98:29:68:
         96:75:1d:10:a2:9b:03:2f:92:a8:b8:56:6b:2d:e8:ed:f6:20:
         b1:cc:e7:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:16 2025 by rpki-client