This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f6d2dfb-b76f-4b73-89b4-2497d005e059.roa
File:                     4f6d2dfb-b76f-4b73-89b4-2497d005e059.roa (raw, json)
Hash identifier:          nzoePxpCFDZmF+8ZXQgW5VXi1XON4RtQ0nQUEllGy4I=
Subject key identifier:   F5:08:80:11:D0:EF:8A:33:79:4F:80:5E:9D:92:DD:EC:2F:8D:A6:3F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       56AB9D77F4FD8DBD9B31043003B7AF2CC60818C1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f6d2dfb-b76f-4b73-89b4-2497d005e059.roa
Signing time:             Mon 24 Nov 2025 01:21:25 +0000
ROA not before:           Mon 24 Nov 2025 01:21:25 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2120::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ab:9d:77:f4:fd:8d:bd:9b:31:04:30:03:b7:af:2c:c6:08:18:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 01:21:25 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=157a69ba773c8914634de312f15426787398ebf4c1a7d5a649a4db2b061425df, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:44:a7:e8:80:77:30:2a:f8:20:ee:79:28:5e:
                    3a:b0:03:6f:d1:38:df:04:38:a0:83:59:58:65:72:
                    79:d0:40:ae:b2:62:a4:46:3c:39:7a:4c:d7:3b:b4:
                    20:b9:fd:a9:27:59:46:dd:35:3a:f7:d6:f4:fe:c5:
                    13:46:fe:d8:49:49:fe:59:6a:fe:b7:97:92:76:e3:
                    06:ac:6f:bc:5c:ad:fa:3e:29:8b:45:62:c8:cb:26:
                    b1:92:11:8b:84:22:21:91:4d:74:34:95:d7:0b:95:
                    fe:70:55:a4:86:12:82:83:39:96:4c:82:1c:17:95:
                    53:39:dc:16:3a:db:4a:2d:eb:0a:65:17:f3:71:55:
                    eb:70:31:82:33:e9:ef:15:ec:16:55:99:8a:04:4d:
                    bf:52:16:36:ff:d7:4c:29:20:b6:25:5d:d9:38:08:
                    92:ed:ed:f5:4f:aa:8a:19:eb:76:b4:5c:b7:e1:82:
                    bf:3e:c0:01:27:d6:ad:39:46:46:8f:7a:8a:76:9e:
                    02:da:dd:81:17:d3:8b:22:40:03:d9:3c:90:35:b4:
                    6a:1b:fd:86:25:b6:2a:e3:14:2f:4f:80:db:46:9c:
                    60:5e:af:ae:14:fc:6d:83:e7:ba:e8:f7:1c:fd:e8:
                    9b:ce:0b:c1:65:cd:07:0d:f4:28:ed:b4:ef:6c:58:
                    71:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:08:80:11:D0:EF:8A:33:79:4F:80:5E:9D:92:DD:EC:2F:8D:A6:3F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f6d2dfb-b76f-4b73-89b4-2497d005e059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2120::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:c5:f5:fc:83:4b:0d:ce:69:af:e0:24:17:6b:59:9b:d8:
         b0:f0:6d:6e:55:d6:51:dd:ca:01:e1:4f:9e:cd:f6:19:e5:5e:
         32:f3:55:f2:cb:5a:5d:72:58:6e:b3:f5:09:d6:73:4d:5e:00:
         a0:f2:96:f8:45:d0:da:76:d2:e5:39:6c:3a:ed:63:3b:2d:33:
         09:ef:dd:21:87:e5:dd:4a:ce:b8:b9:c7:d2:45:64:27:ab:50:
         c2:7c:6a:d5:66:28:d2:18:47:3f:87:f1:c5:64:98:77:b0:31:
         a5:a2:bf:11:a3:26:45:b7:22:a0:d4:43:a3:4c:d7:01:b2:9f:
         84:3e:89:30:cb:83:b9:c1:2f:ba:b9:d7:1e:2d:bd:29:73:a5:
         1a:8a:f8:c2:23:2a:de:c1:ad:69:ba:11:6f:e9:8e:5c:07:36:
         fa:6c:17:b2:98:e9:6c:bd:b1:2c:db:c5:bb:cd:82:18:b4:ba:
         22:46:fe:5f:19:88:c5:5f:51:44:92:42:1f:59:27:ee:62:b4:
         57:68:db:d3:c4:49:f5:ea:d0:69:63:e4:72:8d:da:8d:ec:7d:
         cf:68:05:b6:df:d4:38:76:5d:b6:8b:97:76:cf:72:e5:d1:b8:
         2d:24:40:de:16:6d:e1:03:cf:58:05:f8:9e:42:1f:3a:d3:0e:
         87:d2:e5:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:23 2025 by rpki-client