This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/567dabcd-465c-464c-8c55-d18654a91d34.roa
File:                     567dabcd-465c-464c-8c55-d18654a91d34.roa (raw, json)
Hash identifier:          RnoORy+N7XSxg4OTgKCim2TJ5ajKHD7UIBHt1F0jNDQ=
Subject key identifier:   E3:CC:3B:FF:D5:01:F8:54:C3:79:80:B2:2A:0A:4E:2E:76:3F:C0:C1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       631F04E9C22EF3E92D8B31AF56D913BE0D8B0A65
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/567dabcd-465c-464c-8c55-d18654a91d34.roa
Signing time:             Tue 25 Nov 2025 14:21:36 +0000
ROA not before:           Tue 25 Nov 2025 14:21:36 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3300::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1f:04:e9:c2:2e:f3:e9:2d:8b:31:af:56:d9:13:be:0d:8b:0a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:21:36 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b4b44319fdc54e461989c2c40b8775bb44db3a19e8f4e054cc0ea60a03549850, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:bd:40:50:13:40:82:58:41:64:5a:f8:90:
                    1b:c2:51:df:35:27:b2:78:48:0c:70:30:df:b8:53:
                    0d:3d:ca:5a:05:e0:2a:05:17:91:7e:c8:5d:30:60:
                    47:60:f6:a3:7d:db:d2:bb:48:bb:12:bf:40:bb:20:
                    de:be:39:44:3d:7a:e6:2d:c4:bb:d4:2b:14:b9:1d:
                    db:ae:f7:cd:d3:f5:e3:43:64:fb:9c:54:24:4a:7a:
                    f8:47:b3:48:07:5a:e1:f3:de:0b:4e:3f:66:b5:de:
                    97:6f:7f:8b:93:71:42:04:64:b7:01:aa:86:60:9c:
                    4d:72:a8:34:e5:27:28:2a:65:ab:69:6d:45:22:8e:
                    0e:36:bf:51:a5:a7:ae:e5:23:48:c8:c3:02:a0:da:
                    71:a3:c6:04:18:47:96:be:b9:72:fe:13:71:eb:52:
                    42:55:c7:a9:57:67:ca:26:0c:fc:05:4e:e1:9e:a6:
                    8c:82:e1:28:80:23:d6:4c:11:c2:2c:01:65:c1:c8:
                    8d:df:08:8a:9e:d8:5d:a4:4e:7e:05:0e:22:b2:8c:
                    ef:e0:73:c1:18:f9:8d:ab:db:bc:c4:58:3e:db:25:
                    6f:09:d1:3e:6a:db:f6:97:f5:e7:38:c3:65:ba:fc:
                    8f:dc:bf:c7:6b:1b:ae:21:ae:d0:db:92:8a:a6:4c:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CC:3B:FF:D5:01:F8:54:C3:79:80:B2:2A:0A:4E:2E:76:3F:C0:C1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/567dabcd-465c-464c-8c55-d18654a91d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3300::/45

    Signature Algorithm: sha256WithRSAEncryption
         96:d7:3b:78:2c:ee:dd:0e:21:b2:22:3f:bc:97:b1:b1:1c:c1:
         24:e3:2d:89:e6:bf:9b:e4:1a:f9:53:89:6c:9e:94:12:b3:6c:
         a5:ed:fb:3b:4f:ad:2f:e5:dd:73:8d:e2:f9:51:f8:cb:ec:8f:
         f5:8d:cb:4f:f7:8c:7b:f0:68:cd:f6:7f:ea:ae:62:14:99:88:
         de:37:21:9f:d7:8c:24:58:75:59:3d:a0:a1:d7:3c:4a:d0:bb:
         79:0d:81:ab:6c:35:f5:37:21:23:7b:c3:e2:c8:39:ac:68:58:
         6d:d1:9d:a4:af:51:87:23:1f:9e:b9:d9:cc:e9:f4:09:4e:32:
         da:e7:e0:50:02:ce:95:a6:e8:dd:f8:6f:33:a4:67:49:ed:6b:
         fc:b3:c3:3e:ee:2e:df:5f:41:28:60:04:43:f1:2b:e5:ab:b5:
         ca:c7:3e:87:b5:81:c0:a7:71:1c:af:6f:95:00:5a:a4:c3:10:
         7d:03:f2:15:45:98:d0:68:b2:4d:ff:85:69:24:e1:9b:54:ef:
         e6:a7:fe:e9:70:e9:71:ba:0d:21:ff:ef:43:61:4d:bc:9b:9f:
         ec:9c:b5:73:d9:55:85:44:b1:20:e3:48:2b:86:20:24:ae:66:
         ee:83:00:76:eb:f3:7f:75:90:3f:6e:53:d2:58:05:81:58:f0:
         b0:b8:8c:be
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYx8E6cIu8+ktizGvVtkTvg2LCmUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTQyMTM2WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNGI0NDMxOWZkYzU0ZTQ2MTk4OWMyYzQwYjg3NzViYjQ0
ZGIzYTE5ZThmNGUwNTRjYzBlYTYwYTAzNTQ5ODUwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGzL1AUBNAglhBZFr4kBvCUd81J7J4SAxwMN+4Uw09yloF
4CoFF5F+yF0wYEdg9qN929K7SLsSv0C7IN6+OUQ9euYtxLvUKxS5Hduu983T9eND
ZPucVCRKevhHs0gHWuHz3gtOP2a13pdvf4uTcUIEZLcBqoZgnE1yqDTlJygqZatp
bUUijg42v1Glp67lI0jIwwKg2nGjxgQYR5a+uXL+E3HrUkJVx6lXZ8omDPwFTuGe
poyC4SiAI9ZMEcIsAWXByI3fCIqe2F2kTn4FDiKyjO/gc8EY+Y2r27zEWD7bJW8J
0T5q2/aX9ec4w2W6/I/cv8drG64hrtDbkoqmTI27AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU48w7/9UB+FTDeYCyKgpOLnY/wMEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU2N2RhYmNkLTQ2NWMtNDY0Yy04YzU1LWQxODY1NGE5MWQzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAMwAwDQYJKoZIhvcNAQELBQADggEBAJbXO3gs7t0OIbIiP7yXsbEc
wSTjLYnmv5vkGvlTiWyelBKzbKXt+ztPrS/l3XON4vlR+Mvsj/WNy0/3jHvwaM32
f+quYhSZiN43IZ/XjCRYdVk9oKHXPErQu3kNgatsNfU3ISN7w+LIOaxoWG3RnaSv
UYcjH5652czp9AlOMtrn4FACzpWm6N34bzOkZ0nta/yzwz7uLt9fQShgBEPxK+Wr
tcrHPoe1gcCncRyvb5UAWqTDEH0D8hVFmNBosk3/hWkk4ZtU7+an/ulw6XG6DSH/
70NhTbybn+yctXPZVYVEsSDjSCuGICSuZu6DAHbr8391kD9uU9JYBYFY8LC4jL4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:48 2025 by rpki-client