This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59117553-3a7e-4edb-aa2a-c592b206364d.roa
File:                     59117553-3a7e-4edb-aa2a-c592b206364d.roa (raw, json)
Hash identifier:          /b05/W2wajFbPOCZwXuC1oY6vnbbiAAjEAE0fCCzaww=
Subject key identifier:   60:6D:86:9F:26:B3:58:B4:41:41:B3:65:96:CF:15:56:06:03:63:DA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       537308D161C3910EB85A62C804361764F4C1776E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59117553-3a7e-4edb-aa2a-c592b206364d.roa
Signing time:             Mon 24 Nov 2025 03:50:09 +0000
ROA not before:           Mon 24 Nov 2025 03:50:09 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1bda::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:73:08:d1:61:c3:91:0e:b8:5a:62:c8:04:36:17:64:f4:c1:77:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:50:09 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=9346256b485f312797fd66c18dbba74cca64444ffdbcedfd7426b7514d404c36, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:76:9b:35:81:9f:f2:f5:95:dd:86:5d:5b:
                    ac:f7:91:da:48:81:41:42:a4:8a:d9:17:30:72:9d:
                    14:c7:a8:9e:6d:a7:7d:27:75:44:23:fd:bd:a0:7f:
                    bd:ab:9e:c9:fe:89:70:c1:75:ab:71:fa:1f:57:9a:
                    b2:3e:65:a5:9c:76:d2:fd:24:3c:81:a2:41:f4:16:
                    49:76:70:15:4f:31:10:58:64:a3:80:6f:a5:d7:4c:
                    5a:38:d8:19:d8:52:29:af:c5:3e:9d:fb:36:dd:ee:
                    7c:5c:5f:28:3b:3d:f4:96:a9:2d:50:aa:db:f7:26:
                    dd:47:b4:f3:7b:d0:f3:b6:44:d4:7c:69:38:82:ac:
                    0e:00:fd:43:ba:cd:ba:b7:8e:a7:64:62:f4:a1:f6:
                    c7:f3:19:0c:cd:f6:a2:28:ae:fe:ec:e8:9e:1c:4e:
                    79:1a:60:31:89:1c:99:c2:83:29:67:3b:b6:b2:c7:
                    9b:47:87:c2:24:76:65:2b:4b:29:5d:7d:6c:63:c9:
                    e3:9f:97:0e:57:0c:a8:a2:b6:11:2d:1b:1e:2f:fb:
                    18:44:90:af:3a:3c:e3:b4:1c:32:ff:03:67:8e:99:
                    39:7d:bb:ac:03:26:47:4b:7a:b0:45:42:99:8b:e4:
                    58:61:60:0e:24:0e:e2:62:95:c2:87:f2:e4:85:9c:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6D:86:9F:26:B3:58:B4:41:41:B3:65:96:CF:15:56:06:03:63:DA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59117553-3a7e-4edb-aa2a-c592b206364d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1bda::/47

    Signature Algorithm: sha256WithRSAEncryption
         c2:4b:ee:5e:00:18:a2:76:ef:eb:4d:f6:e7:51:81:18:16:45:
         4d:86:f1:0a:2a:dc:1b:b6:83:7f:44:51:c6:ca:21:d1:db:7a:
         22:3a:04:c4:04:ea:00:af:ee:29:ec:f4:42:fe:79:80:6f:ea:
         e7:d2:10:24:f0:37:e8:3f:29:53:50:7b:2b:7a:ee:16:35:6e:
         05:d6:5c:2a:c2:13:e1:81:c0:1a:52:0f:60:1f:4b:79:51:1a:
         1c:55:c9:fc:a5:15:e7:c2:90:7f:8b:43:33:7e:76:eb:28:aa:
         ef:bd:5e:c4:09:7c:b5:e7:6b:c2:c9:ea:90:c4:b7:b3:59:17:
         b2:f2:b2:10:c1:01:8d:74:58:87:96:84:3f:df:68:6d:b1:67:
         5d:a8:9d:93:0b:a8:d5:54:34:a2:7f:38:94:92:3b:78:c1:18:
         0f:d0:39:8a:b6:a0:4b:2b:b5:a1:d1:3b:06:28:23:75:c8:12:
         b5:01:f5:39:b9:11:a0:53:61:7b:2d:5d:5a:5f:30:f0:67:21:
         1c:7e:df:56:53:72:a4:99:57:b0:79:ca:af:b9:22:30:67:af:
         0c:5c:ae:c2:dd:05:36:52:06:8b:3a:54:df:de:92:55:64:69:
         a4:c9:e7:fd:e8:02:fe:a5:78:3a:41:32:13:c4:12:dd:ee:6f:
         05:54:0d:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:31 2025 by rpki-client