This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59c9124e-192a-4dfb-9b16-32ffd0ce9743.roa
File:                     59c9124e-192a-4dfb-9b16-32ffd0ce9743.roa (raw, json)
Hash identifier:          VguDmtSYyYYcXgbDkcGsTjOT9SKRDgKIAjvcpnip3dE=
Subject key identifier:   32:42:CD:DC:E2:5C:B7:7B:1B:9C:0A:36:93:D9:69:88:16:62:97:F0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       128FA2F823C7DC66238C39DBFFD65FE98F350CBD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59c9124e-192a-4dfb-9b16-32ffd0ce9743.roa
Signing time:             Tue 25 Nov 2025 14:30:13 +0000
ROA not before:           Tue 25 Nov 2025 14:30:13 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ae0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8f:a2:f8:23:c7:dc:66:23:8c:39:db:ff:d6:5f:e9:8f:35:0c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:30:13 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=2cc83d69d62c23913147c77c81df82c638493834d91843af504e4418bf2654e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:22:1f:a0:3e:18:55:71:cb:0d:a1:48:fb:
                    40:05:bd:13:07:eb:f6:f6:05:55:18:5d:4c:29:e9:
                    95:7e:3d:7d:1f:fa:19:62:c1:ed:69:0a:64:1d:78:
                    ae:d9:d3:46:c8:44:42:a7:6b:54:11:32:95:1f:27:
                    be:26:4c:9d:80:f4:e9:2c:03:42:67:af:8a:cf:51:
                    d6:5b:e2:cc:29:93:50:67:9a:d9:bf:66:cb:c1:da:
                    25:70:e7:88:3f:18:db:28:ad:9d:24:f9:16:a0:1b:
                    2b:0b:f9:30:b2:34:94:0c:06:fa:bf:0e:85:83:c1:
                    63:95:69:3c:12:d4:b0:97:86:4e:0a:a0:a9:a2:2b:
                    68:06:3a:36:a5:d9:37:d6:d1:b2:e5:99:a7:aa:e6:
                    47:ce:bc:28:8d:fe:76:ec:4b:d1:92:77:50:47:8b:
                    22:29:80:1b:16:be:3d:96:d3:da:4a:24:0c:15:58:
                    08:44:14:21:89:88:c1:39:a6:14:0a:c4:01:74:55:
                    16:c6:62:c2:ab:8f:28:94:ad:04:0f:03:aa:95:84:
                    6a:3f:f3:1f:bc:aa:ba:15:2d:c7:36:1f:a8:4f:51:
                    15:8a:ab:aa:4b:ce:e9:b2:0d:a2:b1:ed:85:dc:bb:
                    49:84:f4:d0:d2:1d:67:fb:b0:a8:54:8c:7d:14:03:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:42:CD:DC:E2:5C:B7:7B:1B:9C:0A:36:93:D9:69:88:16:62:97:F0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59c9124e-192a-4dfb-9b16-32ffd0ce9743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ae0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0a:e6:b2:c2:b5:60:07:f2:aa:ad:d4:75:cb:94:49:da:0a:84:
         b8:ee:3b:75:89:a6:b3:c5:70:09:96:b2:fd:c4:42:d4:a9:31:
         89:5c:d4:7d:6c:12:03:c3:fb:52:53:01:0a:85:d8:75:69:a9:
         5c:be:0c:e6:09:6e:d6:86:fc:b8:95:f0:20:9f:55:e9:55:26:
         45:30:87:bc:5f:33:c2:a8:de:6b:11:c9:ba:5f:55:2e:ba:ea:
         04:f9:e9:15:eb:25:02:3f:95:36:5a:70:aa:5b:e4:3b:49:ee:
         b9:5c:6b:71:2f:c7:5d:aa:f1:e9:ca:b2:62:cd:70:aa:5b:2f:
         96:19:4d:32:a2:3d:57:f8:cd:b6:38:fc:7c:c7:3a:85:0a:b1:
         c2:b2:88:54:59:b6:90:91:f7:52:20:f7:57:d8:0f:82:7d:6d:
         69:d3:8b:c8:42:ef:a4:a2:74:16:59:e4:42:8a:a0:d3:c0:4f:
         d7:70:66:47:75:98:60:d6:dc:bc:61:c1:51:b2:a1:38:78:5a:
         5e:7e:86:68:c7:c3:60:c2:77:88:2a:25:98:fe:8f:fc:e8:18:
         a0:b1:44:c0:c4:88:0d:4e:aa:2a:cd:fd:ff:19:fb:c4:8f:71:
         5f:c8:b0:f8:0d:a5:1a:1b:c7:0a:9e:88:f6:53:76:bc:a1:bd:
         d6:0b:e5:b4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEo+i+CPH3GYjjDnb/9Zf6Y81DL0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTQzMDEzWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyY2M4M2Q2OWQ2MmMyMzkxMzE0N2M3N2M4MWRmODJjNjM4
NDkzODM0ZDkxODQzYWY1MDRlNDQxOGJmMjY1NGU2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtoiIfoD4YVXHLDaFI+0AFvRMH6/b2BVUYXUwp6ZV+PX0f
+hliwe1pCmQdeK7Z00bIREKna1QRMpUfJ74mTJ2A9OksA0Jnr4rPUdZb4swpk1Bn
mtm/ZsvB2iVw54g/GNsorZ0k+RagGysL+TCyNJQMBvq/DoWDwWOVaTwS1LCXhk4K
oKmiK2gGOjal2TfW0bLlmaeq5kfOvCiN/nbsS9GSd1BHiyIpgBsWvj2W09pKJAwV
WAhEFCGJiME5phQKxAF0VRbGYsKrjyiUrQQPA6qVhGo/8x+8qroVLcc2H6hPURWK
q6pLzumyDaKx7YXcu0mE9NDSHWf7sKhUjH0UA01xAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUMkLN3OJct3sbnAo2k9lpiBZil/AwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU5YzkxMjRlLTE5MmEtNGRmYi05YjE2LTMyZmZkMGNlOTc0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAOuAwDQYJKoZIhvcNAQELBQADggEBAArmssK1YAfyqq3UdcuUSdoK
hLjuO3WJprPFcAmWsv3EQtSpMYlc1H1sEgPD+1JTAQqF2HVpqVy+DOYJbtaG/LiV
8CCfVelVJkUwh7xfM8Ko3msRybpfVS666gT56RXrJQI/lTZacKpb5DtJ7rlca3Ev
x12q8enKsmLNcKpbL5YZTTKiPVf4zbY4/HzHOoUKscKyiFRZtpCR91Ig91fYD4J9
bWnTi8hC76SidBZZ5EKKoNPAT9dwZkd1mGDW3LxhwVGyoTh4Wl5+hmjHw2DCd4gq
JZj+j/zoGKCxRMDEiA1OqirN/f8Z+8SPcV/IsPgNpRobxwqeiPZTdryhvdYL5bQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:19 2025 by rpki-client