This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/593de047-8cb7-4766-930c-6971361f5e40.roa
File:                     593de047-8cb7-4766-930c-6971361f5e40.roa (raw, json)
Hash identifier:          Pt6YMXKQoHNwRGbpsbhatTg9Qv1cfr5nJmal9pVRdt4=
Subject key identifier:   F9:2D:EF:EF:3C:70:3D:4E:04:C1:04:1C:F8:FA:FE:37:D9:F5:3E:ED
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       11CD9AEFE7C6049E10A477087F9A426BEC77AA40
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/593de047-8cb7-4766-930c-6971361f5e40.roa
Signing time:             Tue 25 Nov 2025 03:32:13 +0000
ROA not before:           Tue 25 Nov 2025 03:32:13 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3348::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cd:9a:ef:e7:c6:04:9e:10:a4:77:08:7f:9a:42:6b:ec:77:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 03:32:13 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=0d04254e2ba1c460fbb0605bad2aec372ad804d55401b733a76575132d954486, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:37:8e:be:9e:07:b3:df:5b:c3:82:f3:4c:
                    5f:d9:9f:43:cf:83:09:55:4d:9f:e6:ff:83:ec:cd:
                    4a:7c:c0:f7:8a:a2:91:e2:6a:e2:18:77:56:d3:01:
                    a0:49:75:bf:ab:d4:06:69:55:18:37:50:ee:d3:39:
                    a6:85:5a:8e:db:44:09:03:86:b0:bd:86:bb:00:b0:
                    95:78:60:69:37:db:70:da:32:4f:f8:86:db:fa:2a:
                    24:5e:a2:f2:bd:39:52:83:d8:b5:94:54:e9:08:67:
                    65:3c:5b:e8:c3:b4:ed:72:09:2b:4a:55:04:ec:96:
                    1d:d8:bc:2d:db:00:83:98:97:a3:9c:34:0f:e9:3b:
                    82:78:ef:e3:5a:24:2a:bc:be:23:55:66:eb:38:33:
                    aa:03:05:08:57:ed:36:28:8e:4f:c7:05:28:40:12:
                    57:9a:b0:05:1c:53:9e:3f:22:83:90:2e:b2:5b:bd:
                    3e:b0:d8:a3:a6:aa:68:c3:fc:3f:0d:75:3c:16:68:
                    a0:48:60:f3:7d:d0:29:02:14:67:e3:92:84:13:85:
                    0b:21:af:98:75:eb:02:b0:71:64:64:eb:ed:d7:30:
                    dd:74:60:46:b0:d6:bd:ac:93:23:47:d5:62:0b:1a:
                    7a:a1:8f:15:a3:8c:7a:c4:a7:7e:ac:18:fb:f5:b0:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2D:EF:EF:3C:70:3D:4E:04:C1:04:1C:F8:FA:FE:37:D9:F5:3E:ED
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/593de047-8cb7-4766-930c-6971361f5e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3348::/45

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:ad:2e:e6:41:b6:2e:ae:60:2b:47:f0:ce:b3:08:42:eb:
         13:f7:80:59:12:3f:34:98:b6:cc:74:92:43:08:f5:0d:1c:39:
         3e:49:3a:0f:39:4b:dc:cb:5c:b7:46:7b:79:f0:26:c1:e0:3c:
         f5:a1:3c:26:e5:2e:b7:59:7e:18:97:72:aa:34:60:d3:61:b3:
         a0:b4:f7:3b:5e:62:84:d7:dd:5b:c6:55:11:a9:89:6b:08:9e:
         4f:55:da:02:ae:22:f4:39:6a:77:a5:d9:f8:83:6a:d2:05:57:
         94:7f:a7:9d:84:e7:2f:d0:32:0a:d4:e4:b7:2d:2c:45:03:df:
         0c:31:28:58:6b:dd:c6:01:a0:85:03:5b:c8:e8:f0:62:62:b9:
         ae:a6:54:22:f2:57:17:70:88:49:b9:1e:cc:34:91:fb:6c:93:
         14:41:fa:cc:d5:f8:60:cd:4f:8f:ad:8b:60:ce:34:02:b0:ae:
         23:1e:d8:d8:18:c8:3b:a0:89:b9:08:0b:07:53:20:38:18:74:
         d3:74:7b:18:f3:cd:66:fe:a2:3d:f5:22:9c:f7:d2:09:8e:85:
         8e:74:ae:22:f4:f2:42:4a:ec:e4:1d:3c:4e:46:a3:82:ed:b8:
         59:23:fc:c8:3f:ba:9a:ec:74:a7:9e:f5:89:eb:6c:55:f5:5e:
         72:41:35:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:36 2025 by rpki-client