This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4bc0909e-b520-493a-adb6-bcd583e6a92c.roa
File:                     4bc0909e-b520-493a-adb6-bcd583e6a92c.roa (raw, json)
Hash identifier:          VjyCbHu3uWKbkFzXtLGuTOUEpin5GJ0JL23V90rAVcI=
Subject key identifier:   EF:52:89:1F:7F:71:95:F7:72:D7:BE:69:7C:E3:1E:1F:99:6E:13:D8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2FD1BC4210AB23B7162E4D8E690492F07E902481
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4bc0909e-b520-493a-adb6-bcd583e6a92c.roa
Signing time:             Tue 25 Nov 2025 16:30:50 +0000
ROA not before:           Tue 25 Nov 2025 16:30:50 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:389c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d1:bc:42:10:ab:23:b7:16:2e:4d:8e:69:04:92:f0:7e:90:24:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:30:50 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=bd3333528493f30a153e27d0321bb3ec9fadafefed864e92c8149349ac84e17c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:56:e7:ef:d2:33:fb:ca:95:c2:d6:61:b2:
                    ac:b3:22:11:d4:d1:f9:2d:e8:de:24:95:74:b2:5b:
                    af:7f:72:de:db:92:03:28:1b:08:5a:f4:2b:6b:00:
                    81:ed:94:4b:78:a9:f4:4d:8f:c8:dc:51:11:8e:bf:
                    d2:7d:a1:0e:b5:32:5b:8f:33:35:e7:d8:c7:e9:46:
                    00:d6:4c:9e:ec:ee:7c:f5:9a:a9:98:7c:a5:68:0c:
                    e2:d5:dc:26:66:15:28:6f:72:9e:82:76:35:82:ff:
                    34:05:98:a2:5c:00:7b:0f:3e:c8:a1:db:b2:b0:16:
                    29:23:4f:da:6b:a0:9e:ac:74:22:b4:05:5f:69:a4:
                    7f:0a:3d:c7:71:2e:f5:a4:a0:4e:eb:03:a7:1a:d9:
                    43:67:9f:45:da:00:b4:16:39:c3:7e:2d:e8:a7:7a:
                    6b:fa:fd:9d:3b:b4:c8:3a:58:2c:cf:f3:96:cd:4b:
                    e7:db:01:67:55:cb:e4:1f:82:23:4a:4e:d5:db:58:
                    53:3e:55:49:10:01:93:0c:c0:be:51:04:2e:1d:86:
                    b3:7f:d8:e9:4b:f7:31:10:e6:fa:04:b2:15:66:87:
                    9a:5c:e0:b5:29:20:e7:83:19:c6:5e:6a:f7:5b:7b:
                    9a:8b:e4:7e:85:ba:bb:2d:c8:3b:64:c2:b2:9d:67:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:52:89:1F:7F:71:95:F7:72:D7:BE:69:7C:E3:1E:1F:99:6E:13:D8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4bc0909e-b520-493a-adb6-bcd583e6a92c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:389c::/46

    Signature Algorithm: sha256WithRSAEncryption
         b4:67:8e:4f:a6:84:2b:04:eb:45:49:a1:ce:29:29:09:6a:e2:
         76:f5:aa:38:3b:25:b4:35:f9:7c:28:8b:e8:b1:f2:79:80:79:
         63:4c:80:a1:68:a9:b7:24:15:c9:56:ec:c1:e6:84:a1:58:40:
         7f:48:de:f0:42:b1:6e:48:c2:c8:9a:a4:79:f7:c8:af:ec:a4:
         06:0a:f7:3e:5d:33:24:2a:1a:b7:2c:7c:77:f4:a9:6f:be:77:
         bb:d8:4b:35:3c:79:e6:fc:c5:23:74:a3:c2:9d:91:20:23:d8:
         e7:df:3c:d7:ac:43:f2:3a:75:32:14:7d:78:20:fa:73:24:9c:
         89:7e:fa:07:bf:79:f1:05:22:d1:c9:fd:f2:8d:18:27:1d:3a:
         2b:01:49:7b:2c:16:b3:14:5e:af:19:00:80:89:0d:78:f7:3b:
         ac:06:dc:89:20:17:57:f1:4d:0d:16:fe:3c:20:f5:f7:9c:ce:
         dc:b5:8e:83:2e:62:ef:77:70:d9:42:42:52:4c:81:eb:09:cb:
         89:1a:a5:80:33:c6:00:c7:0a:6d:44:b4:97:c2:2d:ea:c9:0e:
         38:c4:00:57:dd:55:15:7c:bc:c1:81:af:20:9c:cc:35:2d:88:
         1c:d0:6e:3b:5d:b5:63:cd:5f:51:4a:7a:d7:d6:61:c7:77:b0:
         dd:f3:5d:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:16 2025 by rpki-client