This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4982e2af-a053-43f1-bbf1-2784effb873c.roa
File:                     4982e2af-a053-43f1-bbf1-2784effb873c.roa (raw, json)
Hash identifier:          tELWfjyZLCiolk8mWHsVA6vr+Qf0qB+q/U3HJolxoxo=
Subject key identifier:   B4:9F:12:9D:1B:7C:1F:D9:E1:40:C7:B8:0B:81:35:12:93:88:61:6E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2AC97CF9025ED8B511DF2263BF31364D939B9164
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4982e2af-a053-43f1-bbf1-2784effb873c.roa
Signing time:             Tue 25 Nov 2025 05:00:08 +0000
ROA not before:           Tue 25 Nov 2025 05:00:08 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e68::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c9:7c:f9:02:5e:d8:b5:11:df:22:63:bf:31:36:4d:93:9b:91:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:00:08 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=41986d746b5bf5669aca989ae5052792bce5a7f730ee0f0816cc0af1c61fab19, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:e7:a6:d6:7a:ba:b2:c0:8b:32:30:3f:fe:
                    70:ae:65:be:15:38:08:59:da:3e:5d:73:a4:0c:92:
                    47:3b:f5:4b:42:20:20:19:df:61:7a:e8:19:a6:14:
                    81:ad:b8:09:1a:c6:01:ac:f4:8c:43:9f:e7:f9:e5:
                    2c:9d:40:48:41:71:4c:d3:f6:fc:23:8f:e1:6a:2f:
                    c5:30:91:33:c1:9d:13:aa:a9:72:25:77:d7:0f:99:
                    a6:dd:76:93:7c:87:8a:e1:de:5e:82:fc:80:48:7c:
                    54:bd:99:e2:4d:37:73:18:0a:3a:02:2b:d8:50:9a:
                    ef:6e:04:97:0b:fb:b4:7c:f9:66:35:1d:04:52:bc:
                    20:1a:79:49:c6:e5:b2:3b:43:1e:9b:97:a1:db:46:
                    3e:a2:9f:90:37:24:4c:20:de:77:1e:a4:d8:51:8a:
                    56:af:a0:e9:20:c6:c8:51:47:29:2d:87:03:30:fb:
                    26:72:3c:72:de:32:9a:e2:2e:4e:ee:eb:09:1f:db:
                    1d:40:c2:45:35:11:97:f0:b8:c2:31:2d:21:59:00:
                    33:dc:fa:6d:67:8a:0c:9a:bf:7b:38:9e:a7:8e:cd:
                    67:03:31:df:ef:f2:c6:a2:97:7e:a5:5d:1e:3a:c4:
                    6a:4f:5b:be:b5:ab:d9:05:60:4e:7d:3b:44:15:85:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9F:12:9D:1B:7C:1F:D9:E1:40:C7:B8:0B:81:35:12:93:88:61:6E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4982e2af-a053-43f1-bbf1-2784effb873c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e68::/46

    Signature Algorithm: sha256WithRSAEncryption
         85:03:cb:34:83:e6:5a:ec:10:10:a4:d1:31:f8:62:dd:69:bf:
         53:3c:71:cb:7d:ff:53:57:02:e2:c0:7e:33:42:13:e2:8a:84:
         66:a4:05:89:7f:3f:b8:f1:bd:af:e5:b6:1d:93:b8:1d:48:42:
         0b:a5:14:9e:f8:34:fa:61:b3:39:92:c3:a6:5f:ed:97:82:6e:
         25:ea:f0:27:92:3b:38:6b:49:c6:cf:97:d1:47:c0:b2:db:7c:
         36:21:bc:81:e5:a7:13:66:02:06:f2:f3:56:d3:ad:4e:b0:50:
         6e:4d:39:0f:fc:10:a3:6b:ab:16:71:38:1d:ea:4f:cb:04:52:
         e4:39:08:50:7f:26:ae:3a:bf:74:c8:69:00:94:5e:6c:c0:b2:
         9f:4f:23:96:26:a0:d0:f3:85:18:27:c4:e0:fb:7e:f7:23:e1:
         11:79:24:3d:c6:45:39:8a:5b:cb:d1:8b:c7:ce:91:d9:a9:1b:
         b5:97:d5:cd:f9:18:0f:48:58:7c:ca:e9:03:3e:0f:fc:b2:6b:
         af:29:46:d2:dd:76:b5:1f:1f:da:f3:66:3b:2d:e2:c8:73:f4:
         df:05:00:c4:c0:8e:3b:b1:64:aa:64:4d:37:7a:48:1a:8c:eb:
         37:52:01:fb:23:e3:91:09:d6:fe:a1:29:70:b7:df:c9:e8:78:
         5f:2e:11:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:19 2025 by rpki-client