This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4cdf4b67-d575-45e9-9cd0-1e96a6bb8ae0.roa
File:                     4cdf4b67-d575-45e9-9cd0-1e96a6bb8ae0.roa (raw, json)
Hash identifier:          n6i3/tdEqHTvZM49HPQBEB++yoiau8ECa3JJRLo2sZg=
Subject key identifier:   95:25:FF:CB:E7:8B:39:BE:A5:98:60:B2:50:89:32:AE:AA:5B:62:A4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       37F7C487ACDD1379737A8F2DF0050337272176CC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4cdf4b67-d575-45e9-9cd0-1e96a6bb8ae0.roa
Signing time:             Tue 25 Nov 2025 05:40:09 +0000
ROA not before:           Tue 25 Nov 2025 05:40:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a24::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f7:c4:87:ac:dd:13:79:73:7a:8f:2d:f0:05:03:37:27:21:76:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:40:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=401d56e6293e603c4332cb646f1085785f28ef11b5f7c54de82b2f16af215c5e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:c0:06:de:7c:09:fd:43:03:ba:ba:70:5f:
                    99:d9:31:67:12:dc:a3:53:e2:48:fe:6e:cd:d4:80:
                    42:90:02:e2:52:69:ef:a0:29:ac:5e:f9:02:45:dd:
                    2c:2c:97:76:34:d8:b2:e6:46:d1:e6:42:fd:47:c6:
                    fb:51:99:a5:ec:30:7a:05:c8:c6:a1:ab:fb:7c:31:
                    69:c4:99:4d:27:e6:18:ab:a2:17:04:05:17:95:96:
                    ed:1e:f3:8c:7d:2e:db:e4:c1:de:61:68:6a:72:54:
                    e6:bb:3d:7b:8e:80:61:05:69:ce:1b:f2:d4:ab:76:
                    34:19:8d:b8:cb:c2:06:b2:ea:26:d5:cd:34:bd:3c:
                    aa:18:57:24:61:3d:ff:06:14:60:a3:60:27:21:bf:
                    81:50:b3:f7:de:1e:1c:9e:83:ed:b8:92:42:f3:53:
                    db:ae:60:82:d9:eb:d7:4f:fa:32:78:bc:56:ed:3b:
                    76:48:05:b1:0a:7f:c5:b6:61:30:02:f4:5b:2a:71:
                    a5:8b:bf:2b:f3:16:4c:d8:40:8b:ce:bf:ec:fe:8a:
                    cf:04:0f:41:ed:b7:e9:aa:99:a5:c6:89:d4:1d:9b:
                    6d:3e:dd:16:5f:49:cd:2c:bb:40:f3:28:23:2a:46:
                    29:a3:eb:c5:28:8d:f7:5b:b2:cb:b9:a2:72:be:b8:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:25:FF:CB:E7:8B:39:BE:A5:98:60:B2:50:89:32:AE:AA:5B:62:A4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4cdf4b67-d575-45e9-9cd0-1e96a6bb8ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a24::/46

    Signature Algorithm: sha256WithRSAEncryption
         67:af:d8:96:89:4e:1c:0c:39:e2:16:e5:7e:f8:fa:68:fd:14:
         13:68:af:4b:48:d2:d3:79:33:63:56:42:fa:8e:d7:01:33:c2:
         17:16:bc:7b:d9:e9:a2:c6:58:f3:f6:a3:20:72:ac:44:4d:6f:
         0c:d1:1b:ab:8e:f4:01:b6:23:85:91:74:51:18:21:a7:91:12:
         75:b5:31:52:de:75:3b:d1:e0:bd:e2:48:f2:0c:26:4b:68:48:
         6d:7a:95:dc:b8:b8:f2:39:bc:58:56:5e:66:3f:f8:08:bd:95:
         10:40:da:3e:b8:2f:1a:bd:df:c6:bc:e7:c3:b1:ca:9b:60:fa:
         9e:88:39:48:62:cf:3f:0a:a5:8c:49:29:13:be:27:4c:6d:65:
         1a:9b:d0:07:01:27:86:1f:2c:30:9b:9c:d6:d4:76:31:f6:75:
         e8:2c:30:26:51:77:2f:41:4a:0b:6e:6d:30:d2:59:3b:03:08:
         d9:43:b3:d7:e9:c0:6c:96:bb:08:00:91:9d:69:90:53:f1:31:
         4b:5a:46:d2:30:ed:55:8d:dc:07:d9:25:8d:2a:e4:74:12:11:
         df:a6:ca:41:61:f7:85:f9:be:29:dc:64:06:4c:16:5f:ba:b4:
         84:85:34:71:c1:2b:92:02:65:50:df:f8:6a:15:5a:c8:ad:3b:
         d5:f5:df:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:26 2025 by rpki-client