This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b3b86ba-35b5-4e1a-a69c-889ff17c73c1.roa
File:                     5b3b86ba-35b5-4e1a-a69c-889ff17c73c1.roa (raw, json)
Hash identifier:          CWqaiZOX8gbCz1DwXagYqhz1Hf+H9fIwx5v1gUIzDco=
Subject key identifier:   30:81:1B:8A:42:3E:91:F2:24:C2:81:CE:12:63:FF:39:7A:F2:F3:F2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46AF81A318B5D8404C2DD9E884941ACB030A9A86
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b3b86ba-35b5-4e1a-a69c-889ff17c73c1.roa
Signing time:             Tue 25 Nov 2025 12:21:32 +0000
ROA not before:           Tue 25 Nov 2025 12:21:32 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3eee::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:af:81:a3:18:b5:d8:40:4c:2d:d9:e8:84:94:1a:cb:03:0a:9a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 12:21:32 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=8500093c634bd11ff37c5c378fed7a27b76ca02eaa97e9259a8559e5a4a28b48, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:5e:8c:d7:f8:30:19:53:0d:c6:65:ff:1c:
                    17:aa:71:4e:7d:39:16:a6:51:e4:e7:8f:9d:e0:aa:
                    79:86:32:21:0a:7f:0c:8e:06:e9:a1:37:c2:d7:16:
                    4d:e5:ad:98:ec:1e:5d:d9:0c:99:0a:4d:9c:37:b3:
                    4b:c5:00:50:84:a6:d7:7d:c6:e8:43:13:da:5a:1d:
                    39:d8:30:a5:f9:e0:d0:b2:fc:67:c4:d5:f5:4b:bc:
                    28:86:a4:2e:e8:18:ba:b6:28:ec:a3:d7:c7:f0:13:
                    45:69:46:ff:9a:5d:97:4d:a9:67:7a:32:6e:a9:dc:
                    f9:e6:44:49:d1:7f:33:7e:4c:e3:9e:88:f2:62:6b:
                    13:62:1e:f6:07:a4:92:b7:11:9b:e5:c2:62:d5:1a:
                    01:09:c5:c8:42:5a:11:3b:14:b6:9f:69:74:30:98:
                    70:b3:97:25:39:a9:1d:e7:04:9a:ad:a7:ad:63:90:
                    a8:a8:e9:d7:7a:b4:cf:9c:f0:a7:ef:30:a6:fd:35:
                    a1:5f:67:b1:21:6c:5c:fe:85:05:96:87:f1:64:4d:
                    1e:e3:8a:69:5a:58:b4:62:62:2b:07:0a:81:91:c3:
                    e7:af:91:73:09:ac:0e:4e:d0:67:4b:93:14:ea:1c:
                    8f:ae:e2:1d:df:b6:f9:03:fc:d0:cb:69:f3:48:48:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:81:1B:8A:42:3E:91:F2:24:C2:81:CE:12:63:FF:39:7A:F2:F3:F2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b3b86ba-35b5-4e1a-a69c-889ff17c73c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3eee::/47

    Signature Algorithm: sha256WithRSAEncryption
         5d:b7:ce:bb:e4:93:b4:d6:57:3c:ca:60:ab:bf:d1:f2:50:58:
         32:a1:69:38:50:0d:22:14:19:50:b0:db:14:8b:48:0d:b7:6a:
         4c:87:36:f1:83:fe:19:e8:a1:1b:9f:7f:2b:71:92:98:0e:50:
         c0:cf:51:9d:c0:2a:e3:b8:7b:6d:92:ce:43:80:e6:e4:62:2e:
         8c:97:88:00:d9:c0:05:63:fc:8e:64:1c:fd:1d:d8:c9:8c:c8:
         b3:66:0d:b8:40:f6:1b:38:6a:c2:ef:41:26:56:62:95:70:5f:
         1a:85:43:3a:30:eb:7a:f3:a3:ba:02:b3:0f:ff:f8:de:4e:96:
         7d:42:c6:7b:c6:52:39:7c:e2:df:16:b3:8b:44:56:94:73:69:
         6c:5c:f3:56:ac:39:62:6b:0d:8a:0f:a0:0e:cf:c5:c0:b0:b4:
         ae:6f:d2:f5:b1:e9:0a:73:88:69:89:57:3f:16:1e:20:69:a1:
         1b:45:79:1f:13:ba:ec:8b:5d:c2:8b:d0:35:06:8c:a1:dc:a2:
         6a:1d:d0:bd:dd:ba:b1:c7:47:71:79:4c:a6:c0:9d:64:c1:11:
         f0:7e:1c:ff:14:29:d2:f4:6a:98:80:37:53:cd:99:6e:a3:2f:
         bc:e9:f0:0b:93:83:2a:58:67:c7:9e:35:fa:5c:a2:32:ba:4d:
         ab:42:fa:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:06 2025 by rpki-client