This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/51c3082d-9a1a-4d05-b151-deab32044d5c.roa
File:                     51c3082d-9a1a-4d05-b151-deab32044d5c.roa (raw, json)
Hash identifier:          43RAiXZdgF2de7DTQcQIc7o9d0c6RoMFanJXObzFeZE=
Subject key identifier:   F8:2B:E0:A5:BC:F5:5C:40:78:B0:7B:18:EA:01:2A:D4:E3:26:04:53
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5E61ACE958B31618A8A43AA6A640A8722C8100C3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/51c3082d-9a1a-4d05-b151-deab32044d5c.roa
Signing time:             Mon 24 Nov 2025 05:10:09 +0000
ROA not before:           Mon 24 Nov 2025 05:10:09 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a86::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:61:ac:e9:58:b3:16:18:a8:a4:3a:a6:a6:40:a8:72:2c:81:00:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:10:09 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=e2de22a169633ff0f4e449bb56b0632925b5a846962bcbb0aa589742b3338ccc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:42:39:8a:1c:32:28:b4:c3:98:dd:d5:ee:
                    a8:86:8d:cc:81:12:50:3e:2d:ba:e6:94:03:de:9e:
                    8a:14:38:29:03:94:59:98:0b:f1:ee:a8:e4:15:3f:
                    fd:c3:3f:16:57:72:03:25:29:6e:78:6a:a3:24:c3:
                    f7:53:3d:44:3b:4a:f8:16:a0:f9:47:bb:a8:31:80:
                    6f:81:d7:1a:c5:36:ca:ac:f6:ff:a4:c9:b9:6f:ff:
                    c7:9d:2e:d6:28:9c:13:5d:8d:ed:8a:31:f3:a9:15:
                    b8:d2:c0:73:3f:6c:43:68:e3:33:0a:ed:74:80:12:
                    40:f8:d0:a8:b7:5e:0a:85:cc:34:82:5b:b0:5a:c9:
                    4d:f8:94:d6:9a:96:d2:4c:ad:9e:8f:5d:bb:14:c5:
                    bc:df:92:2e:2d:ea:9f:30:cd:f6:4e:84:26:b2:f4:
                    5f:f1:ef:ba:af:48:64:70:2b:fc:17:2a:79:43:71:
                    d0:c0:b2:50:00:28:55:cf:68:bc:ba:ad:4c:9a:34:
                    c4:ed:a0:ad:1e:86:87:48:31:4a:dd:58:bf:6d:44:
                    a1:51:9a:db:9a:99:ac:60:1b:ab:d1:cc:f5:94:d4:
                    7d:d8:4a:d1:9a:d1:33:89:e4:92:fc:4a:4e:05:cc:
                    35:d3:3d:d2:31:75:1e:47:4e:20:23:6a:75:4c:fc:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2B:E0:A5:BC:F5:5C:40:78:B0:7B:18:EA:01:2A:D4:E3:26:04:53
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/51c3082d-9a1a-4d05-b151-deab32044d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a86::/47

    Signature Algorithm: sha256WithRSAEncryption
         33:c0:5b:71:bd:57:26:9f:82:7d:10:9f:9c:ab:c4:84:1b:80:
         68:95:94:11:54:1a:0f:4e:9a:af:5a:40:66:19:c3:94:0e:82:
         d1:41:e0:03:09:48:be:6f:b4:26:4c:3e:f4:2b:9e:d1:25:8f:
         f1:fa:d4:6f:53:e6:ca:c7:04:63:b5:41:a3:46:cf:83:f7:2f:
         f0:69:d2:bd:30:30:4d:ed:95:ed:fb:b5:72:11:8b:82:e9:7f:
         b7:e6:90:82:f4:56:29:a6:a3:57:33:39:61:af:3f:97:50:0c:
         70:6d:91:2e:89:a6:f6:93:5e:83:03:62:05:ec:f5:65:82:9a:
         fc:7e:a4:a6:df:c1:a5:a2:a8:5f:96:62:3c:2f:c2:78:dd:e4:
         7c:42:6a:6e:f7:ce:ff:02:37:ff:23:1b:a8:89:b7:58:55:9f:
         77:d1:1b:5e:6b:82:c8:77:d9:92:f7:6b:d6:c8:5e:74:0f:05:
         3f:e3:d7:ad:cd:1f:cd:c5:05:ff:91:04:ff:03:17:bc:bf:a2:
         c4:eb:11:13:a4:86:17:e3:58:de:19:d3:5b:13:fa:fe:a0:96:
         16:59:d3:5d:8c:03:24:69:97:7c:fb:13:92:52:51:db:57:f7:
         3e:c1:c0:8d:c3:02:ba:af:b2:14:06:40:fe:83:71:f0:58:26:
         f1:23:90:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:40 2025 by rpki-client