This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/499fe6ba-7e2f-472d-b5c9-c347db7468b2.roa
File:                     499fe6ba-7e2f-472d-b5c9-c347db7468b2.roa (raw, json)
Hash identifier:          vCQA91pF24VBPwcLZiA/CC1ycOGb/K4jUoY7+JpuHJo=
Subject key identifier:   BE:11:50:32:9F:0E:53:C2:D0:B9:BB:64:D2:21:F4:94:FA:96:98:B5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3CE8573C9C80174A56B9E8A440E9D3650B5C8B53
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/499fe6ba-7e2f-472d-b5c9-c347db7468b2.roa
Signing time:             Mon 24 Nov 2025 04:21:36 +0000
ROA not before:           Mon 24 Nov 2025 04:21:36 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1348::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e8:57:3c:9c:80:17:4a:56:b9:e8:a4:40:e9:d3:65:0b:5c:8b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:21:36 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=600f7d3bf0634915b2daba094b8637bda0c12c68fae7a8910b791aaaf4f8d57c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:2b:e7:00:65:1b:c2:00:da:5d:2e:a1:f5:
                    4e:19:f6:0c:f4:16:69:af:2a:a2:26:b9:cb:e5:46:
                    e8:ed:5b:c7:53:fe:c9:15:2c:8f:a7:b8:0a:6a:11:
                    9a:8b:b7:9c:47:91:f3:37:45:cf:30:0c:01:1f:4a:
                    c5:9d:53:c9:bd:ec:ca:66:03:2a:81:f9:07:1a:a8:
                    27:37:59:fc:3e:f5:8d:f6:70:b8:ca:7d:fb:27:8c:
                    91:ae:3e:1d:77:f7:dd:d7:a9:d1:c1:e7:a3:17:92:
                    60:e8:2f:29:ff:3c:c6:22:8c:3b:a2:37:e0:53:a6:
                    3e:65:fc:53:ac:c1:fa:fe:80:76:1a:16:e6:32:99:
                    cf:9a:78:8c:09:3c:5a:17:b8:f5:f6:9f:4d:31:8c:
                    d2:42:d8:78:ad:3b:e5:b3:8e:28:43:71:cf:f9:88:
                    29:96:44:c2:6f:34:19:49:2a:b9:51:cb:bb:83:5a:
                    35:3a:6f:48:fa:c3:69:39:01:8f:36:38:d8:85:71:
                    77:9e:d6:9c:c8:78:6d:6d:3a:0e:da:11:4c:c0:75:
                    37:77:05:ab:29:d2:56:b6:89:47:cd:d5:a7:31:68:
                    d1:02:d9:6b:87:af:0f:dd:0d:c6:fb:6d:21:e4:96:
                    12:88:a2:83:57:85:24:5b:dd:93:e2:5b:49:b7:1b:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:11:50:32:9F:0E:53:C2:D0:B9:BB:64:D2:21:F4:94:FA:96:98:B5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/499fe6ba-7e2f-472d-b5c9-c347db7468b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1348::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:df:f6:e6:fb:9b:77:f9:2b:35:81:1c:c0:9b:99:4d:67:57:
         a4:24:0e:e3:e0:ef:e2:47:9d:94:5f:cd:9e:80:7a:db:07:09:
         ab:a3:95:eb:df:c6:d8:a1:7c:85:78:74:46:f5:6e:34:c1:8c:
         e1:86:62:90:3c:e6:2b:d1:9d:79:e3:ee:c1:2c:48:1a:b3:75:
         d2:2b:83:f1:c3:22:65:1d:41:87:31:ad:2d:1b:e3:01:20:6b:
         4a:01:0a:be:a6:a0:07:76:10:8e:9b:15:ac:5c:8e:59:d0:ab:
         5e:38:8c:30:0e:cf:2f:95:45:cc:d8:c1:df:d7:cf:eb:d5:df:
         d8:22:69:32:1b:5a:ce:3a:e2:65:d8:03:19:51:ed:43:80:43:
         af:be:b4:7b:15:a5:b2:17:a7:c5:a3:9a:92:8b:3d:62:9e:18:
         f2:ef:ce:b3:7e:51:66:57:c7:7d:98:9b:25:41:d3:51:e7:48:
         bf:60:e8:a7:08:33:67:83:08:b4:87:1f:9b:8c:57:b1:26:37:
         45:d9:c7:24:fa:d5:84:6d:41:df:30:9d:58:04:4b:83:90:d7:
         d4:dc:96:5a:6e:d5:07:19:5a:a2:cd:56:92:fb:3c:4d:8f:71:
         2b:5c:44:f2:4b:7e:86:51:b2:8e:4b:cc:85:7b:0c:f4:7a:5e:
         ef:c7:f8:23
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPOhXPJyAF0pWueikQOnTZQtci1MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDQyMTM2WhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MDBmN2QzYmYwNjM0OTE1YjJkYWJhMDk0Yjg2MzdiZGEw
YzEyYzY4ZmFlN2E4OTEwYjc5MWFhYWY0ZjhkNTdjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCs6ivnAGUbwgDaXS6h9U4Z9gz0FmmvKqImucvlRujtW8dT
/skVLI+nuApqEZqLt5xHkfM3Rc8wDAEfSsWdU8m97MpmAyqB+QcaqCc3Wfw+9Y32
cLjKffsnjJGuPh13993XqdHB56MXkmDoLyn/PMYijDuiN+BTpj5l/FOswfr+gHYa
FuYymc+aeIwJPFoXuPX2n00xjNJC2HitO+WzjihDcc/5iCmWRMJvNBlJKrlRy7uD
WjU6b0j6w2k5AY82ONiFcXee1pzIeG1tOg7aEUzAdTd3Basp0la2iUfN1acxaNEC
2WuHrw/dDcb7bSHklhKIooNXhSRb3ZPiW0m3G8MDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUvhFQMp8OU8LQubtk0iH0lPqWmLUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQ5OWZlNmJhLTdlMmYtNDcyZC1iNWM5LWMzNDdkYjc0NjhiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAE0gwDQYJKoZIhvcNAQELBQADggEBAEHf9ub7m3f5KzWBHMCbmU1n
V6QkDuPg7+JHnZRfzZ6AetsHCaujlevfxtihfIV4dEb1bjTBjOGGYpA85ivRnXnj
7sEsSBqzddIrg/HDImUdQYcxrS0b4wEga0oBCr6moAd2EI6bFaxcjlnQq144jDAO
zy+VRczYwd/Xz+vV39giaTIbWs464mXYAxlR7UOAQ6++tHsVpbIXp8WjmpKLPWKe
GPLvzrN+UWZXx32YmyVB01HnSL9g6KcIM2eDCLSHH5uMV7EmN0XZxyT61YRtQd8w
nVgES4OQ19Tcllpu1QcZWqLNVpL7PE2PcStcRPJLfoZRso5LzIV7DPR6Xu/H+CM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:44:24 2025 by rpki-client