This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5912774f-7ba8-4a53-b66c-f8d8c63b37e2.roa
File:                     5912774f-7ba8-4a53-b66c-f8d8c63b37e2.roa (raw, json)
Hash identifier:          +UZg2/Sgo6u8gZMSlHytv+gHWnmKOYU62hVU4d9SQ+Q=
Subject key identifier:   DA:B7:7B:03:24:80:7F:46:6C:D3:06:3E:7D:FE:1A:C3:E0:B6:AC:63
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5A0A96A8CA36F3638EF20B2614BECA0D8DE06739
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5912774f-7ba8-4a53-b66c-f8d8c63b37e2.roa
Signing time:             Tue 25 Nov 2025 04:41:40 +0000
ROA not before:           Tue 25 Nov 2025 04:41:40 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33ec::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0a:96:a8:ca:36:f3:63:8e:f2:0b:26:14:be:ca:0d:8d:e0:67:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:41:40 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=74225bcf292b0522f99e728bf6e8483a3c218a600c30dc9b2cfd1d96a3bbe009, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:81:d4:f6:f6:7b:fe:3f:d0:48:f6:9f:03:
                    12:1e:2b:f6:e6:10:e8:00:9f:65:e6:98:43:14:d5:
                    7a:c6:ed:c1:53:8d:ca:56:fe:57:6e:8c:41:52:66:
                    be:a3:28:56:5e:0b:37:e8:e7:0b:47:ad:88:d1:e2:
                    dd:78:a6:e1:02:f5:48:95:6a:3e:a1:b1:2e:4c:e5:
                    db:c6:4d:01:33:42:7f:2d:30:18:67:bc:05:0a:d8:
                    fd:bc:ef:96:52:4c:21:b7:8c:65:7e:16:1c:31:36:
                    08:47:08:6c:e6:12:37:bf:76:54:b9:2e:77:02:1e:
                    b7:45:f9:03:70:c0:40:7e:cd:b7:b4:5c:94:2d:b2:
                    a4:fe:cf:88:fc:f9:75:01:cb:f9:1b:ff:e2:7e:e6:
                    9d:7d:2a:c9:d6:51:4d:6e:93:99:3c:65:fb:c3:c5:
                    60:99:76:60:b5:ef:cc:de:37:8d:9b:6c:e8:57:71:
                    9c:f3:44:ec:b5:97:5a:12:75:da:62:61:e8:21:8a:
                    09:87:4d:d5:8e:13:40:cd:ec:f2:03:30:ef:14:03:
                    30:7d:f5:93:a0:30:ad:01:58:b8:b0:76:2f:4e:2b:
                    75:8e:91:3e:c0:46:17:18:4e:e9:a3:52:71:69:b2:
                    c4:b9:58:19:0c:88:8b:4d:15:f4:22:d8:9e:36:ff:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B7:7B:03:24:80:7F:46:6C:D3:06:3E:7D:FE:1A:C3:E0:B6:AC:63
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5912774f-7ba8-4a53-b66c-f8d8c63b37e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33ec::/46

    Signature Algorithm: sha256WithRSAEncryption
         74:67:a9:bb:58:98:3e:cf:f0:27:1c:07:7a:fc:2a:dc:73:07:
         6e:41:99:63:d7:b4:94:ce:96:59:ef:16:ca:04:0f:9e:58:b7:
         92:93:e4:13:12:d9:6e:1c:fa:6a:0e:65:af:32:a0:d2:2f:f3:
         e4:6a:78:6c:ab:5b:a6:ec:64:6f:f2:cf:26:7d:5f:a9:4d:54:
         aa:5f:f7:2f:33:93:99:36:8b:e5:f3:11:ba:b5:77:08:b1:aa:
         2e:e5:e0:4f:12:ab:56:e2:cf:2f:62:0a:97:95:b9:cd:1e:a7:
         1f:88:8f:34:9a:62:b9:1d:c1:45:54:ab:06:05:34:ff:12:ec:
         b9:a7:b4:1e:5e:ed:e0:d5:9a:ce:de:74:7f:44:33:85:b8:08:
         bb:4c:cc:22:83:74:a4:10:da:3d:36:25:55:03:85:dd:b9:f4:
         99:b3:e1:b9:ac:68:f0:54:89:bc:77:fa:b9:3f:61:61:46:05:
         f3:d3:4a:0f:0d:42:f3:f4:b4:b6:66:34:93:d4:e5:c9:32:8d:
         94:7d:80:f9:28:8b:87:4e:a5:1f:da:2b:48:1e:22:fb:82:1a:
         13:08:f5:55:a9:ab:b5:e3:a7:35:a3:59:52:88:f1:d8:62:21:
         19:5b:93:95:db:cb:aa:e7:ee:13:5c:dd:90:e0:a6:03:09:bc:
         2d:b6:94:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:52:20 2025 by rpki-client