This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/586733f0-2a46-45b1-a8bd-df354a99c397.roa
File:                     586733f0-2a46-45b1-a8bd-df354a99c397.roa (raw, json)
Hash identifier:          2hqlDeZ1z4WMT8M1RgHdGY3Ve6znQoEIVFtmABZkOiI=
Subject key identifier:   ED:BF:22:F1:9B:A5:DA:7D:8E:8F:31:50:CD:FF:15:4D:4F:C9:89:5F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A7BA6B3F38B265ACBA6B4278A1DD6832D809B4C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/586733f0-2a46-45b1-a8bd-df354a99c397.roa
Signing time:             Tue 25 Nov 2025 14:52:15 +0000
ROA not before:           Tue 25 Nov 2025 14:52:15 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3814::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7b:a6:b3:f3:8b:26:5a:cb:a6:b4:27:8a:1d:d6:83:2d:80:9b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:52:15 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=0b1b836e2c1f0cf96824381320916a56e8868268c256a5e59b2ed7cd4e28a6a0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:97:87:bc:79:33:b5:9a:4f:6b:1e:91:d4:
                    cd:37:49:d4:31:c5:ce:cc:28:b2:6e:c5:4e:9f:ba:
                    63:8e:25:d1:09:30:b0:93:ab:71:94:d0:7b:a7:61:
                    78:d8:11:04:fb:75:8c:f1:ef:9c:61:bb:bc:9f:1a:
                    21:b5:a2:bd:37:54:67:35:a4:e7:07:f0:32:f5:31:
                    f5:f5:3d:83:e8:7b:b2:39:17:a3:7d:90:e4:29:4b:
                    c0:ba:52:9c:9e:1c:23:80:53:4f:f4:6f:d1:77:af:
                    e4:74:ee:44:2a:f6:97:a4:2a:46:cd:48:54:1d:06:
                    33:c3:50:d4:8b:40:94:aa:98:07:38:a3:5e:58:c0:
                    47:30:99:a2:e8:5a:bd:7d:54:5e:74:40:da:28:c3:
                    5c:d6:82:77:ba:c0:3d:94:b9:4d:e0:54:49:8d:8e:
                    1b:e0:c4:a7:72:c0:eb:ff:4b:95:07:09:69:53:1d:
                    37:b5:39:19:0c:c3:70:21:5d:68:20:14:61:91:ad:
                    33:1f:4f:b9:a8:d4:9e:71:53:55:bd:f6:e1:7e:d4:
                    20:fa:7c:24:bc:c1:4e:b0:f7:9c:12:6d:19:14:0f:
                    88:2b:f1:57:4b:ca:02:19:e1:29:44:20:99:0a:3d:
                    93:f2:75:67:e1:fe:7e:69:11:93:61:61:e0:91:e4:
                    5a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BF:22:F1:9B:A5:DA:7D:8E:8F:31:50:CD:FF:15:4D:4F:C9:89:5F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/586733f0-2a46-45b1-a8bd-df354a99c397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3814::/47

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:28:90:db:f5:7f:a4:26:c1:41:9f:85:c9:d6:61:8e:ab:
         ad:d0:50:20:50:36:c3:83:13:d1:dc:2c:c2:59:58:2d:01:ae:
         18:37:86:fe:e8:38:f2:25:47:d7:45:34:06:25:5a:d2:38:8b:
         a2:b1:e4:d9:4f:65:97:71:f4:07:66:66:31:13:7d:78:db:25:
         fd:eb:09:ae:0c:86:48:f5:3f:ab:0b:d2:a0:19:34:f0:66:52:
         4e:cf:51:78:2a:23:e6:b9:f2:48:98:4a:36:db:b0:85:b2:88:
         74:46:d3:ae:39:50:52:f8:f3:a1:fb:8d:5f:57:e0:e5:51:3d:
         f8:9a:6d:1d:be:aa:f2:0a:b0:30:de:06:3a:f0:a7:0f:be:48:
         e2:3f:d8:28:f1:ed:89:f8:06:5c:82:05:cd:63:a2:87:bd:4a:
         13:73:34:17:07:ed:ed:e1:f2:86:02:02:04:fa:d1:30:4d:79:
         06:e6:c3:bc:08:0c:d5:93:c9:b7:e7:18:ff:97:eb:4e:e5:3b:
         03:54:65:09:b9:62:a9:e5:67:18:53:99:70:4d:09:4f:68:7f:
         8a:5d:80:21:9d:a7:db:fc:8f:e8:69:f6:e2:cb:e6:50:bf:9f:
         18:d2:5b:eb:1c:13:bc:04:0f:52:0d:ee:0f:6e:59:61:aa:9c:
         f9:4f:40:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:58 2025 by rpki-client