This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b5ed0af-e28b-4af7-8df7-a1acff7660e7.roa
File:                     4b5ed0af-e28b-4af7-8df7-a1acff7660e7.roa (raw, json)
Hash identifier:          sVuy7aDwfxxlMxi7bCfsc/hQkrJRvMg7xpmZT8x9AMw=
Subject key identifier:   2B:6C:B6:DA:F9:55:10:FC:2B:F7:36:33:03:AD:98:20:00:7F:43:1C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1DC28CFBB37704B9ADB8BC723C3EEF1CB39F49A5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b5ed0af-e28b-4af7-8df7-a1acff7660e7.roa
Signing time:             Mon 24 Nov 2025 04:41:18 +0000
ROA not before:           Mon 24 Nov 2025 04:41:18 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2dde::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c2:8c:fb:b3:77:04:b9:ad:b8:bc:72:3c:3e:ef:1c:b3:9f:49:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:41:18 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=7f753adc70ab1e9927b8248899f30d96efaf5ce48cf1d8773d09069997d864c6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:ec:6f:7c:ff:c7:d4:27:ae:b5:b6:42:ad:
                    98:61:f9:bc:33:2f:bb:bd:e3:b1:95:28:dd:02:7d:
                    bb:83:9f:60:bb:db:5b:2e:a4:82:0f:59:e3:b6:3e:
                    ce:06:94:0b:28:e3:3c:e6:7b:2a:80:08:1e:df:f5:
                    dc:ed:5f:cd:0f:11:3c:37:5c:6c:3c:6b:a3:f6:c8:
                    6e:55:fe:0d:c8:98:0d:b4:80:46:54:61:6d:78:ac:
                    c8:a0:f0:2a:82:80:a6:1d:2e:9b:e0:01:7e:20:52:
                    09:9f:6a:25:8d:bd:3f:56:74:5c:80:28:fe:36:ed:
                    0c:ec:be:37:44:81:d8:37:66:36:93:ac:43:b7:b6:
                    ed:5a:50:81:3f:ba:02:c7:c3:39:d9:f8:a5:b0:69:
                    25:9d:66:c7:97:37:71:fc:5a:06:77:6b:ba:7c:0e:
                    95:aa:f8:b7:d2:2e:ac:d8:7f:e3:5a:85:47:e6:21:
                    d6:ef:f0:7e:c0:ce:f4:61:d8:dc:a1:f9:d7:db:fa:
                    60:43:bc:c5:2d:28:f9:50:cc:af:6c:07:90:19:b4:
                    82:e4:5a:39:1a:99:74:85:74:90:69:87:5a:3a:e6:
                    84:6f:38:dc:57:c3:df:56:e5:a8:4f:ba:c2:3a:ba:
                    05:a9:f2:fb:36:6b:7e:79:ae:76:01:bf:39:c1:8f:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:B6:DA:F9:55:10:FC:2B:F7:36:33:03:AD:98:20:00:7F:43:1C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b5ed0af-e28b-4af7-8df7-a1acff7660e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2dde::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:8d:19:62:59:64:00:d0:4b:4b:a0:27:c3:d8:96:9c:f0:c8:
         fe:82:42:2e:98:fa:f7:af:d5:dd:57:47:d9:2d:0b:43:f1:48:
         cf:4d:57:17:44:f7:27:19:91:48:dd:c4:72:5a:ad:b9:28:2a:
         8d:e0:0e:7b:f6:13:6f:1f:0b:2a:36:1e:98:1f:d6:60:16:df:
         93:a6:89:8c:6c:07:a3:29:95:ea:8b:d4:66:35:be:22:3c:e2:
         a1:dc:de:ee:8b:d2:35:10:e6:2f:d4:95:8c:5e:f8:6a:db:92:
         1b:ed:7b:54:fc:9d:f8:42:4f:e1:4e:8e:7b:e0:d3:27:49:de:
         1f:04:65:83:10:04:d5:cf:76:86:6a:89:4c:a9:e7:bb:7b:f0:
         76:be:72:93:9d:3a:45:fd:11:d2:2c:c5:dd:ec:05:38:a6:80:
         a8:6e:7c:b8:19:39:98:bd:f2:77:4f:21:5e:75:af:08:f0:9f:
         89:e4:8c:72:16:50:85:ba:3c:bd:ef:24:29:e1:1c:2e:1c:b3:
         78:7d:d8:32:bf:e2:b4:52:e4:07:80:46:29:8a:2d:46:28:37:
         b5:5e:01:8c:3b:24:e6:46:3f:18:a6:9a:b7:fa:74:c7:09:3d:
         d0:8a:08:05:27:eb:46:94:de:d3:a3:9c:f1:75:61:7c:ca:ce:
         81:5e:db:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:51:02 2025 by rpki-client