This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/50adb0e9-2471-4aa2-8527-f031c531b878.roa
File:                     50adb0e9-2471-4aa2-8527-f031c531b878.roa (raw, json)
Hash identifier:          gdh5jcDsIoUkTxMNd9YRb5pLKjlf8aOSkiqhjoOhdDY=
Subject key identifier:   5B:54:F4:D0:83:FD:81:E5:46:0B:46:80:84:7D:CE:6A:C4:98:72:A5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5B8FDDC2B97D9CD4192B103AD9608D1C48EBCC15
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/50adb0e9-2471-4aa2-8527-f031c531b878.roa
Signing time:             Mon 24 Nov 2025 07:50:50 +0000
ROA not before:           Mon 24 Nov 2025 07:50:50 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2984::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8f:dd:c2:b9:7d:9c:d4:19:2b:10:3a:d9:60:8d:1c:48:eb:cc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 07:50:50 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=b92bb4a0e31b146974556f58f253c2330b8b513b75359192d4353ac12a6132dc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:6e:de:61:c7:83:5a:94:b9:bb:37:a2:02:
                    cd:07:b0:5a:48:b1:5a:2f:50:5b:00:d7:19:db:42:
                    e7:67:3e:8d:19:ac:9a:be:07:f5:54:8f:bf:52:6c:
                    d1:01:39:cb:49:36:f4:0b:70:55:b8:22:01:c3:56:
                    4f:e6:83:d3:c9:22:0c:f7:b0:3a:f0:d5:6c:b5:05:
                    aa:b1:d3:9b:f5:6e:1a:82:5c:55:99:9e:f8:b6:2e:
                    fb:14:20:b4:71:1f:56:a8:c3:16:df:e0:71:39:c1:
                    7b:a7:6c:f1:39:8f:39:ad:57:65:f7:dd:02:91:d0:
                    bc:b0:14:f0:de:d5:66:5d:63:1c:82:be:17:0c:03:
                    f2:07:53:77:19:43:c6:eb:ed:e4:c8:7e:8b:2a:d3:
                    1c:8b:dc:67:0e:ed:b2:96:5c:63:8d:da:57:04:1e:
                    05:80:0a:b8:76:82:5a:3d:eb:29:57:9a:04:8c:f8:
                    75:36:81:f5:11:66:a5:6e:65:a1:ff:e1:77:1e:2f:
                    e1:97:f9:aa:c6:bb:0f:7f:01:5b:da:60:e0:0b:d8:
                    c7:77:d8:37:86:b9:3f:0c:ae:be:63:2a:29:dc:71:
                    94:82:bf:74:6e:e0:63:0e:62:af:9d:71:9e:05:fd:
                    33:84:ad:63:3b:d6:78:a0:5c:2a:51:1f:2e:42:e9:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:54:F4:D0:83:FD:81:E5:46:0B:46:80:84:7D:CE:6A:C4:98:72:A5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/50adb0e9-2471-4aa2-8527-f031c531b878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2984::/47

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:e8:a7:65:f4:46:f8:f0:05:10:ab:df:97:1f:40:b8:2b:
         08:00:74:63:97:6a:7a:ef:97:98:80:35:08:a4:7d:b8:51:63:
         a8:76:ed:5c:18:29:bd:f1:b3:fc:60:10:7c:e2:c4:5c:9c:c0:
         30:30:62:f1:d3:25:f8:5c:18:b0:36:43:e2:e6:ac:de:9d:5e:
         e6:c1:33:ce:a4:4b:6d:a6:60:b9:18:15:99:f4:97:e5:59:68:
         86:16:9d:06:a7:6e:be:e3:f3:f9:1d:ac:66:cb:45:3a:87:27:
         d1:eb:f2:25:af:e5:e8:a9:96:a6:c4:3f:02:b0:3e:f6:69:fd:
         04:da:50:74:7a:a3:d7:c1:45:af:ac:4f:62:ab:0f:d4:f0:4a:
         ee:a7:67:09:63:c3:c7:0b:4d:4e:2d:f3:ad:05:3a:86:8a:3c:
         f0:30:78:8d:b0:9c:ec:f7:c0:2b:ce:70:4a:df:6a:48:0c:8a:
         09:62:43:20:6b:2c:24:40:1f:31:af:1c:6b:df:93:ab:23:1e:
         25:6f:a0:0b:6e:e4:3e:07:20:ed:c6:19:0c:b2:88:f5:0e:d3:
         29:95:cf:71:fa:9a:c8:8b:1d:82:c5:12:13:6a:a0:5d:04:78:
         de:73:5e:23:5f:85:9b:57:c2:80:6a:b8:62:7b:b3:83:72:82:
         c0:93:da:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:12:52 2025 by rpki-client