This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5874cfc8-3aae-463b-93bc-23eea30b8ca4.roa
File:                     5874cfc8-3aae-463b-93bc-23eea30b8ca4.roa (raw, json)
Hash identifier:          K+y+NBrRPmS/vEO/yOstfOUYOewTUEdsvAtvdlInjNc=
Subject key identifier:   A7:B6:F9:50:6A:EC:8E:0D:03:CE:BF:D3:A9:D3:14:5F:DC:FD:D7:B7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       366B7E58D9A7018AE615844BCB6510C107C86D8D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5874cfc8-3aae-463b-93bc-23eea30b8ca4.roa
Signing time:             Tue 25 Nov 2025 17:50:06 +0000
ROA not before:           Tue 25 Nov 2025 17:50:06 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38a0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6b:7e:58:d9:a7:01:8a:e6:15:84:4b:cb:65:10:c1:07:c8:6d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 17:50:06 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=adfa5f2590725c2472af78811e21cfa3a7257a478990d0b58ffa955cc9bf6df8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:54:df:a7:b2:32:80:45:9e:cb:18:42:9c:
                    08:80:ed:57:df:11:7e:64:fb:88:5c:65:da:7c:a8:
                    ee:00:96:07:3b:d4:7f:3f:1c:ae:41:a6:e5:2e:ff:
                    63:45:61:e2:4d:1a:6e:69:d8:19:af:71:cd:06:e0:
                    64:1b:0d:5e:97:b1:29:16:67:59:a3:05:eb:85:91:
                    a4:a0:b8:83:f4:1d:52:83:81:be:de:bc:01:1e:b3:
                    be:ee:3b:3d:2d:89:14:a7:35:7b:3a:d0:50:37:40:
                    a8:08:ed:cf:72:66:4a:3b:87:75:0d:f7:fb:c0:4c:
                    ae:ce:11:c1:d5:85:ca:65:d0:ba:c4:37:22:ea:42:
                    bc:da:05:8e:0e:d7:cc:ea:3c:a4:b8:fa:dd:99:aa:
                    14:70:35:b2:78:90:71:c9:32:db:1c:15:98:af:fc:
                    eb:e3:20:5d:54:32:aa:53:3c:09:b3:38:9d:41:59:
                    de:a8:91:ba:ac:bf:1a:80:d0:7c:ad:ec:79:e5:d8:
                    fd:f0:12:e9:1c:f3:97:73:9d:e1:4e:6a:61:0f:15:
                    c1:9e:87:e7:2d:a1:8a:a7:9e:52:16:83:26:59:cc:
                    cb:ca:7e:b5:68:45:72:0f:57:23:4e:76:c9:e5:59:
                    45:5c:de:03:ee:da:ce:ab:73:5b:5b:66:de:49:a3:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B6:F9:50:6A:EC:8E:0D:03:CE:BF:D3:A9:D3:14:5F:DC:FD:D7:B7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5874cfc8-3aae-463b-93bc-23eea30b8ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38a0::/46

    Signature Algorithm: sha256WithRSAEncryption
         14:33:5c:b6:df:06:3f:e3:46:49:13:95:7c:b0:16:08:5f:a7:
         0f:6e:e1:f4:10:49:a1:3b:13:de:75:5d:7d:3e:b8:4a:b1:d6:
         9f:59:04:b0:06:e2:e4:d8:53:96:2f:b8:55:4e:98:c6:00:d8:
         4e:9c:c7:d8:f4:35:b1:35:a9:96:16:50:b8:6f:fd:74:a4:de:
         45:6c:5c:83:a2:ca:b0:a9:19:86:c7:d2:d7:0b:5e:c8:5c:e5:
         7b:15:a8:84:21:8b:e6:53:c9:c7:77:b3:b5:80:16:87:86:d3:
         fa:bc:c9:42:07:78:32:0d:b6:ca:7c:ac:89:ed:68:8a:8d:ad:
         5a:82:19:6b:4f:c0:3e:d8:b6:7b:6b:14:8f:58:be:62:ff:ac:
         ac:7f:ba:c0:68:0b:f3:58:88:86:9a:fb:40:9d:de:86:8f:f9:
         89:a1:10:21:a1:31:61:e3:05:fa:8f:41:1e:bb:c9:80:5e:d2:
         f1:84:69:9e:7c:65:a0:41:af:df:73:09:56:7e:e5:cc:ea:78:
         c4:30:87:67:4e:d2:f9:f4:bb:24:d3:50:9e:10:00:e6:e7:18:
         2b:e2:53:e1:dc:63:a7:93:5a:d8:2f:b3:18:34:b8:d5:1d:2e:
         d4:1b:7c:de:b3:bf:ee:d8:87:8f:e4:89:39:66:70:6a:07:55:
         69:a3:6e:f2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNmt+WNmnAYrmFYRLy2UQwQfIbY0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTc1MDA2WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZGZhNWYyNTkwNzI1YzI0NzJhZjc4ODExZTIxY2ZhM2E3
MjU3YTQ3ODk5MGQwYjU4ZmZhOTU1Y2M5YmY2ZGY4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClPVTfp7IygEWeyxhCnAiA7VffEX5k+4hcZdp8qO4Algc7
1H8/HK5BpuUu/2NFYeJNGm5p2Bmvcc0G4GQbDV6XsSkWZ1mjBeuFkaSguIP0HVKD
gb7evAEes77uOz0tiRSnNXs60FA3QKgI7c9yZko7h3UN9/vATK7OEcHVhcpl0LrE
NyLqQrzaBY4O18zqPKS4+t2ZqhRwNbJ4kHHJMtscFZiv/OvjIF1UMqpTPAmzOJ1B
Wd6okbqsvxqA0Hyt7Hnl2P3wEukc85dzneFOamEPFcGeh+ctoYqnnlIWgyZZzMvK
frVoRXIPVyNOdsnlWUVc3gPu2s6rc1tbZt5Jo8pvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUp7b5UGrsjg0Dzr/TqdMUX9z917cwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU4NzRjZmM4LTNhYWUtNDYzYi05M2JjLTIzZWVhMzBiOGNhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOKAwDQYJKoZIhvcNAQELBQADggEBABQzXLbfBj/jRkkTlXywFghf
pw9u4fQQSaE7E951XX0+uEqx1p9ZBLAG4uTYU5YvuFVOmMYA2E6cx9j0NbE1qZYW
ULhv/XSk3kVsXIOiyrCpGYbH0tcLXshc5XsVqIQhi+ZTycd3s7WAFoeG0/q8yUIH
eDINtsp8rIntaIqNrVqCGWtPwD7YtntrFI9YvmL/rKx/usBoC/NYiIaa+0Cd3oaP
+YmhECGhMWHjBfqPQR67yYBe0vGEaZ58ZaBBr99zCVZ+5czqeMQwh2dO0vn0uyTT
UJ4QAObnGCviU+HcY6eTWtgvsxg0uNUdLtQbfN6zv+7Yh4/kiTlmcGoHVWmjbvI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:28 2025 by rpki-client