This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/562b7aa0-e345-4ce8-b3aa-eb31e0bc2bce.roa
File:                     562b7aa0-e345-4ce8-b3aa-eb31e0bc2bce.roa (raw, json)
Hash identifier:          CjKvtzSoBgrk2+YhjAjU1gUIo+WsS1jXk6uA5HMEHXc=
Subject key identifier:   B6:03:F9:11:CC:30:38:F8:E6:9A:CF:FF:39:3B:56:01:47:F7:BE:00
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0AF9927586D4E9DEC0BD945131EE31134A03DCE5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/562b7aa0-e345-4ce8-b3aa-eb31e0bc2bce.roa
Signing time:             Mon 24 Nov 2025 05:01:00 +0000
ROA not before:           Mon 24 Nov 2025 05:01:00 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f42::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f9:92:75:86:d4:e9:de:c0:bd:94:51:31:ee:31:13:4a:03:dc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:01:00 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=8d1bc156a3e589fcd8d6ea1165fb16360e29b5ba9d0596f8441d68e4e5d77078, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:06:6f:31:4e:c9:e9:c1:0a:06:1a:ae:8c:
                    18:dd:59:4f:4b:84:c1:95:04:b2:b8:f8:d2:f1:c3:
                    41:54:c3:80:ee:6f:b8:b2:92:5a:1c:3b:b7:66:76:
                    87:ea:36:0b:ca:4c:7a:45:3e:88:b6:05:d3:07:d3:
                    85:5d:13:58:ac:3b:6e:ba:64:60:be:1c:1d:a7:2b:
                    fc:04:62:9f:1f:91:37:ae:1b:e4:00:7c:49:12:50:
                    f4:45:71:a1:5f:c1:b6:c7:4f:ff:23:df:5e:6e:fa:
                    bc:61:47:d5:ba:96:3c:81:05:52:f6:c3:1e:51:4d:
                    1e:c1:92:26:c9:4e:5d:c4:1e:b2:57:eb:db:17:83:
                    eb:5b:a3:f0:d4:e7:ec:5b:f1:88:93:d8:12:d7:e4:
                    78:1f:87:0c:b5:37:8e:66:a8:b6:f4:16:42:0f:cd:
                    f2:8b:b3:f8:25:c1:74:05:02:d5:07:ac:7a:61:5c:
                    e0:71:d8:54:68:f0:71:66:d5:0f:a3:ca:02:42:5e:
                    02:c1:37:54:ef:89:0e:67:8f:e3:7b:08:fe:8c:1b:
                    77:60:f4:7b:f0:b8:12:ab:87:95:24:dd:07:6d:86:
                    97:e0:f3:a7:b1:65:3f:42:1a:0a:20:85:e4:ff:4b:
                    22:aa:06:72:1e:db:b9:f2:66:b0:7a:0a:6b:af:1b:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:03:F9:11:CC:30:38:F8:E6:9A:CF:FF:39:3B:56:01:47:F7:BE:00
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/562b7aa0-e345-4ce8-b3aa-eb31e0bc2bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f42::/47

    Signature Algorithm: sha256WithRSAEncryption
         3e:67:8c:40:44:45:53:94:82:70:34:71:ff:fd:a4:63:72:85:
         ce:7d:cd:24:40:31:41:64:a5:d5:10:92:58:de:ee:ee:b4:f1:
         82:25:92:bf:9f:8c:2d:83:26:0b:1e:90:0f:be:d1:7b:1a:dd:
         0a:1c:63:b8:10:e3:d9:cc:6e:7f:74:5c:da:ee:27:d4:e4:f4:
         ac:dc:69:76:23:64:5e:81:c8:fb:0b:ef:d8:19:dc:82:5e:14:
         9a:21:e9:39:c5:ff:5e:aa:88:d8:a9:94:de:ed:e3:8e:43:a8:
         44:ac:5b:f3:01:a5:00:29:08:ee:f8:a1:bb:79:9c:f1:9f:c4:
         33:34:28:3f:38:8c:46:f7:33:69:33:fc:bc:66:48:0b:7e:48:
         5d:c2:45:30:97:77:16:af:79:00:cb:4d:2b:cb:34:c9:39:ea:
         2d:2a:2a:b5:b7:51:e6:5e:7f:1b:20:22:82:91:a9:ea:e7:26:
         0c:25:c7:0d:15:cd:a5:42:76:d0:37:5d:46:e1:a6:e1:4b:2f:
         67:dc:47:4b:6f:c6:96:40:8c:95:e4:1b:01:ad:5c:2e:e0:f1:
         19:83:f1:f1:20:40:62:e9:0c:2c:0c:aa:02:64:c8:8f:02:8f:
         13:24:55:1f:c8:d7:16:1d:16:90:b3:74:f8:50:15:50:b9:eb:
         6d:c7:de:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:50 2025 by rpki-client