This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5bf238f4-31a9-473e-a334-ef7d3847e527.roa
File:                     5bf238f4-31a9-473e-a334-ef7d3847e527.roa (raw, json)
Hash identifier:          0OSQv2Ilgm70BWx0wsjgtwyJe5dMZnbrvYlNjPiVKdg=
Subject key identifier:   63:22:0E:4F:36:56:61:10:D2:CD:42:A7:66:6A:0A:1A:55:3D:FD:77
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6E7EB2A63FA12D90CAC73106A512E87113A5EABF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5bf238f4-31a9-473e-a334-ef7d3847e527.roa
Signing time:             Mon 24 Nov 2025 05:11:38 +0000
ROA not before:           Mon 24 Nov 2025 05:11:38 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1418::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7e:b2:a6:3f:a1:2d:90:ca:c7:31:06:a5:12:e8:71:13:a5:ea:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:11:38 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=0ea357610bc47d2a1115a7c623f7d7a0aa6b251809ff19cc4cae8a8101b1df30, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:dd:8e:ba:68:6f:f6:bb:17:c6:a5:f2:6a:84:
                    38:4c:b5:f9:16:a0:6b:97:ca:09:fe:75:85:bc:bd:
                    c5:6f:b1:2a:39:4a:4b:ee:4a:a8:eb:0f:c6:ba:b5:
                    38:26:6c:db:7e:04:74:8d:7f:8e:b4:70:be:a8:e2:
                    dc:dc:f2:f2:ea:d8:23:e7:ca:28:a5:d3:db:0e:33:
                    f3:81:8d:c3:d6:cd:4d:97:f9:a6:f6:0b:9a:12:18:
                    1e:52:ba:f0:47:bb:d4:8c:29:79:97:eb:a2:ed:4f:
                    7d:5b:02:19:ea:16:4f:de:db:bd:8b:7d:55:23:5e:
                    14:d8:21:b3:62:92:a8:a7:33:ba:3f:a0:d4:3c:9a:
                    09:b0:95:c9:89:c3:70:26:d7:08:2d:43:93:d0:af:
                    7d:34:2f:53:bb:e8:1c:9e:6d:06:5c:d9:c2:d8:f4:
                    cb:ae:54:ef:43:24:27:e0:8d:cc:21:d1:94:eb:46:
                    42:b8:b2:40:4a:8c:11:18:5a:bf:f0:92:af:5a:c1:
                    19:a1:63:73:50:1b:37:80:c3:1c:d8:35:4b:08:0c:
                    3b:5b:c0:a0:ff:57:9a:a4:a7:29:af:30:de:d1:8f:
                    08:64:6d:fd:b3:87:f9:b0:28:c0:7d:c1:23:45:9d:
                    e1:ed:e6:8a:7c:cd:e8:da:53:28:00:65:fb:a8:eb:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:22:0E:4F:36:56:61:10:D2:CD:42:A7:66:6A:0A:1A:55:3D:FD:77
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5bf238f4-31a9-473e-a334-ef7d3847e527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1418::/47

    Signature Algorithm: sha256WithRSAEncryption
         96:7a:cf:c8:b0:52:0f:07:24:1b:b1:c8:1d:97:6f:1a:31:f7:
         d6:8a:8a:c6:ad:50:52:68:91:89:39:fa:28:98:72:a9:d5:f3:
         08:77:eb:06:49:57:07:a2:ce:1a:2f:2b:e4:b2:7b:52:27:f6:
         18:4d:6f:d5:a7:91:09:3c:59:99:6a:3b:85:28:0a:8f:ba:b2:
         39:f7:a8:3c:9a:08:fa:66:a3:46:ed:2e:01:82:15:4f:cd:db:
         9a:3a:cc:b2:85:6e:4e:0f:8f:2c:13:04:b3:36:3a:92:5f:ee:
         84:f3:90:07:72:ed:2b:fe:8e:8d:e7:95:6c:ac:da:62:12:cc:
         04:b0:46:5f:07:86:04:48:2d:18:f2:1f:4e:8e:66:a5:dc:85:
         54:c2:78:3b:fd:65:d0:e0:d9:39:88:81:58:88:0b:c3:31:b2:
         b5:55:b4:f4:b6:81:c8:0c:bc:f4:a9:aa:a0:70:2d:f0:3f:92:
         05:ed:fb:5a:76:91:a3:9e:38:97:47:37:36:ee:03:c7:9f:3e:
         c8:3b:78:ea:aa:bf:bd:7a:25:e3:8c:bd:b1:b7:7c:3f:71:93:
         b7:ef:b4:b3:6a:41:dd:6a:c2:20:fb:56:12:99:08:21:c0:af:
         04:09:b3:fe:23:cb:5b:83:50:62:43:e0:a9:54:80:91:ed:94:
         04:dc:5f:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:11 2025 by rpki-client