This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57e71929-6e96-46a6-bf22-4c27a458c093.roa
File:                     57e71929-6e96-46a6-bf22-4c27a458c093.roa (raw, json)
Hash identifier:          gkeAnK8hlqvPV/HDXWRFORN6FK18wyOowGE5EHwATBQ=
Subject key identifier:   6B:CE:6D:3C:DC:64:AA:78:02:C5:EC:11:62:74:CD:43:C3:DA:86:D9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0A3549ABD41208268ED5DFBB4F72ECC04358DA77
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57e71929-6e96-46a6-bf22-4c27a458c093.roa
Signing time:             Tue 25 Nov 2025 01:32:06 +0000
ROA not before:           Tue 25 Nov 2025 01:32:06 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2aec::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:49:ab:d4:12:08:26:8e:d5:df:bb:4f:72:ec:c0:43:58:da:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 01:32:06 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=67989c054f0de5dfde462c649dd44b6a42ce02e79c10c8764fcbfc19b49a4407, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:9b:3e:14:9c:f2:15:c6:77:f2:f9:e0:e7:
                    70:3d:95:5b:ff:2f:48:92:38:26:24:11:6a:b8:2d:
                    9e:56:cb:db:01:ad:eb:f6:a8:5d:06:f8:49:ae:e9:
                    82:e0:7b:e9:e1:97:ab:0a:ab:3a:00:12:16:18:3a:
                    db:49:35:02:17:cb:be:5f:fa:5a:9f:29:48:84:9e:
                    96:3b:9c:c3:5c:69:a3:95:15:59:35:a1:d0:5d:62:
                    d2:15:39:d2:9f:8f:34:6c:60:01:89:af:4d:98:eb:
                    81:1e:ae:c2:fa:59:2d:18:9f:25:6a:10:1b:1e:e5:
                    4f:dd:81:e0:df:e6:6e:ef:6d:7e:e6:69:45:3d:35:
                    6f:9c:92:9e:47:78:fc:e7:06:21:00:49:8c:53:72:
                    7c:5b:d2:a7:5c:a1:9d:5d:55:44:1d:ed:0c:34:65:
                    18:09:90:10:2c:55:30:d0:c0:a6:29:c8:07:8f:68:
                    16:1c:e4:a7:d8:89:5f:1b:db:91:e7:48:85:f2:8b:
                    53:09:3b:e9:95:58:6a:ae:f3:9f:29:d9:99:16:74:
                    45:55:4e:20:be:5b:bb:7c:77:5e:cd:82:39:18:f8:
                    f5:e3:3a:2e:e4:a2:e9:a4:30:44:8f:ff:2a:10:fa:
                    5e:0b:51:04:58:d7:cd:35:dc:8c:72:c1:90:37:8a:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CE:6D:3C:DC:64:AA:78:02:C5:EC:11:62:74:CD:43:C3:DA:86:D9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57e71929-6e96-46a6-bf22-4c27a458c093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2aec::/46

    Signature Algorithm: sha256WithRSAEncryption
         9d:6e:46:89:2c:e5:9e:19:96:04:a2:63:1c:31:72:31:63:b2:
         7b:44:bd:c0:8d:6a:e6:0a:5c:db:58:d0:6e:1b:77:ff:08:7c:
         a6:4a:1d:88:bd:16:f7:e8:72:db:b4:49:21:7a:42:8a:9f:92:
         cb:1f:ae:0a:35:d3:33:28:ea:c0:5c:ad:bf:ba:0d:c5:29:87:
         c4:00:1b:ba:97:26:e9:9a:23:51:38:0f:fa:a2:25:5c:aa:39:
         4b:37:e0:a0:dd:53:5c:1d:e6:7a:89:da:82:ee:d5:d1:0e:4b:
         f7:34:0b:0b:9b:27:03:ac:69:5e:26:4e:c4:13:f1:57:3c:a8:
         85:ce:74:33:4f:7c:5a:e3:ec:ec:04:1d:ef:4d:ab:09:7a:8b:
         3d:0f:7b:40:43:f6:40:be:5c:2a:22:e0:42:7c:9d:bc:07:25:
         e4:64:b2:5c:a6:b0:0f:17:8a:0a:ce:f3:35:ca:f5:1f:2b:1a:
         6c:ff:05:04:49:2f:a5:44:6b:00:9f:76:82:eb:e6:18:aa:98:
         c6:0a:d9:c2:f3:fd:45:63:5b:b7:09:ea:50:9d:6b:63:aa:2d:
         47:f4:f8:f4:1f:fe:98:4c:cb:00:be:cc:22:44:9c:fd:e5:46:
         ab:25:ca:f0:05:ab:01:f0:8f:9a:cd:69:0d:21:83:3b:89:0a:
         17:c9:3a:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:29 2025 by rpki-client