This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f4899d4-5628-4484-b5e9-e14a4f21bd4f.roa
File:                     4f4899d4-5628-4484-b5e9-e14a4f21bd4f.roa (raw, json)
Hash identifier:          zM9ZJXJ/tkRLq1mnXSfhMmTmphb++pwSbRHMNZNtlDk=
Subject key identifier:   66:C7:C1:5E:09:5F:BC:14:75:F2:6F:75:AD:89:CA:5C:D7:60:C0:78
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A0F83994674C7901D27DE7EB5194520A0BA598A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f4899d4-5628-4484-b5e9-e14a4f21bd4f.roa
Signing time:             Mon 24 Nov 2025 06:52:00 +0000
ROA not before:           Mon 24 Nov 2025 06:52:00 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2676::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0f:83:99:46:74:c7:90:1d:27:de:7e:b5:19:45:20:a0:ba:59:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 06:52:00 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=7393d931ac4b7fde4799114d6b612c96150d3d8edf1c43221d85c3d546c75e15, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:03:63:9a:0f:ea:66:1d:45:0b:73:31:d3:
                    e2:a2:85:1e:8d:e9:e2:4d:1d:d4:fd:bc:96:fc:64:
                    79:84:23:23:b3:46:17:20:be:d3:5d:f2:e5:86:05:
                    58:96:aa:a1:d9:45:4c:d2:c0:2e:ad:fa:36:e3:23:
                    72:d7:05:8b:bf:e7:01:21:3b:53:79:bf:0d:bb:38:
                    7a:b5:75:84:8f:a8:25:19:43:96:00:2c:62:17:b4:
                    42:63:80:79:9f:1e:11:83:1d:b2:55:30:23:84:ad:
                    46:36:e3:f2:9a:81:ce:77:f1:81:47:3a:43:9c:6b:
                    14:7e:97:f9:c4:51:73:c5:81:9b:04:65:d4:7a:d4:
                    43:1d:f9:92:98:57:6f:c6:ee:51:3c:68:50:71:40:
                    56:85:56:7b:bc:d6:a5:00:ea:26:40:f6:ab:81:d4:
                    d4:5a:df:e9:95:9d:6e:b8:de:51:af:f6:c5:2d:d1:
                    df:1b:2a:0e:65:5c:fb:a2:66:26:5a:62:79:0b:04:
                    40:e8:8e:ce:99:c4:80:4a:5c:94:a5:81:55:0a:79:
                    17:6a:4a:45:a1:cc:27:f0:a0:58:bd:78:87:79:ed:
                    f1:99:e3:9c:82:06:08:22:25:92:84:fb:f2:05:9a:
                    09:d2:3f:0c:51:7b:f8:e8:0c:5a:15:1a:1a:dc:40:
                    ac:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C7:C1:5E:09:5F:BC:14:75:F2:6F:75:AD:89:CA:5C:D7:60:C0:78
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f4899d4-5628-4484-b5e9-e14a4f21bd4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2676::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:c5:b2:d0:8e:05:27:22:2e:5b:33:47:15:cc:fb:51:2a:93:
         66:7e:9a:ac:11:be:d6:a5:a0:d8:8e:c4:e7:b7:f3:1d:ee:8d:
         b6:ec:d3:46:29:d4:0e:00:c9:9e:35:1c:63:6d:78:b8:74:03:
         25:37:7c:9c:2f:16:e6:26:51:43:fe:b8:db:9d:79:f9:38:76:
         7c:96:f8:1b:01:26:67:05:a0:b9:c7:01:22:20:6d:6d:aa:03:
         46:60:e1:49:d1:3f:05:85:27:0b:24:a4:d1:96:7f:14:5f:2e:
         6a:e6:a9:36:bd:d6:15:de:da:48:ef:c5:ba:e8:94:06:5c:32:
         14:2e:78:44:c9:85:ec:94:65:eb:e6:03:26:f3:40:ae:8f:e6:
         b6:39:63:ea:22:9a:60:0f:fd:34:29:d5:18:8b:9b:5d:a1:86:
         6d:9f:5c:4d:1a:fc:33:71:95:b9:9f:2c:6c:57:bc:02:8a:00:
         7c:c9:95:c9:0e:06:7c:b1:a3:17:93:1c:96:75:b5:be:e3:23:
         30:64:dc:fa:9b:5b:42:12:31:06:25:42:ae:12:93:de:99:85:
         a4:d3:f6:63:30:14:30:ed:57:dc:39:24:95:cd:a2:84:c1:0e:
         d0:cc:c7:25:19:cf:c4:e4:0a:ee:5a:78:4b:f4:aa:de:50:17:
         25:c0:70:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:12:49 2025 by rpki-client