This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c3c84ff-715a-4026-b6d5-0da2452d291c.roa
File:                     5c3c84ff-715a-4026-b6d5-0da2452d291c.roa (raw, json)
Hash identifier:          mBAI2kZV++WUnRVK6QfcPWqm4ivtZAUpLpwJPr3VYv8=
Subject key identifier:   B3:B6:A3:ED:76:9B:08:C8:5D:1C:0F:1D:E8:95:56:F7:09:8B:30:E5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       05B2B511C385C047B7BAB8E3E0E76B18C55F1CDA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c3c84ff-715a-4026-b6d5-0da2452d291c.roa
Signing time:             Tue 25 Nov 2025 15:31:15 +0000
ROA not before:           Tue 25 Nov 2025 15:31:15 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fd4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b2:b5:11:c3:85:c0:47:b7:ba:b8:e3:e0:e7:6b:18:c5:5f:1c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 15:31:15 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=551eb2c51a5ec98bed7160fff2cd17c15b179ed44cd6780f420c9ddc5f3b884d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:e4:97:48:ca:2d:43:b8:5b:2d:71:ae:6e:
                    30:c2:3f:d7:fa:7a:5a:23:c4:0d:48:f9:4b:77:a1:
                    7a:ab:59:6b:5a:e2:78:15:ff:93:12:33:1a:b6:a7:
                    2b:6a:02:fb:90:11:c5:c3:4b:38:a2:b9:b5:61:83:
                    61:4d:04:e9:ed:2a:65:40:5f:5b:0f:28:a7:28:f0:
                    b8:b0:e9:94:26:1f:6e:8b:27:45:d1:e1:1f:ea:94:
                    22:34:4b:06:16:a5:79:4b:cf:9d:b0:6a:1b:d4:6b:
                    3d:fd:aa:0f:55:4f:e1:22:84:4e:c7:38:f4:3f:86:
                    08:1d:f7:bb:8e:c0:1c:f8:0c:36:e9:02:5e:48:14:
                    3c:e4:7c:0a:33:3b:12:03:40:53:62:ac:dc:d6:c3:
                    ec:d5:1e:84:16:08:cd:73:9b:b7:e6:89:c5:8a:1a:
                    f9:90:2f:8d:35:87:71:db:b9:ce:f0:da:80:ab:c8:
                    3f:1d:32:4d:62:cc:f6:b4:4b:62:66:30:06:33:dc:
                    66:a4:6a:63:08:75:3d:96:11:74:69:42:11:3f:fc:
                    20:a4:2c:5d:9c:47:1a:0a:98:a1:76:f6:0a:9c:6a:
                    5e:f7:04:cd:4a:9b:f1:e0:c5:37:fe:9d:8e:d8:20:
                    bc:fe:ba:81:81:53:84:17:1a:74:73:81:dd:2e:7d:
                    cb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B6:A3:ED:76:9B:08:C8:5D:1C:0F:1D:E8:95:56:F7:09:8B:30:E5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c3c84ff-715a-4026-b6d5-0da2452d291c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fd4::/47

    Signature Algorithm: sha256WithRSAEncryption
         99:31:00:0b:e0:63:4e:10:4b:0a:b5:85:2c:93:ef:f3:e6:08:
         f7:03:3f:5a:e5:c3:90:e1:01:ee:79:89:4b:01:5b:2f:87:87:
         c8:b8:48:9c:d3:45:05:bf:0f:6a:76:2f:e3:67:43:e9:e0:de:
         33:f0:52:45:b1:a2:8a:44:74:75:28:44:8e:50:e7:f8:d4:53:
         0c:7b:c0:e9:8d:a8:b5:cf:13:46:39:a3:4b:a9:79:1e:1f:b2:
         de:7f:82:3a:49:c3:92:3f:99:a0:6f:33:3b:db:c2:9e:11:0f:
         ed:27:3a:0c:43:ac:cb:a6:f2:e3:c9:cf:13:be:a1:6e:79:15:
         98:ba:cf:35:a2:9d:ba:70:0a:25:08:f7:e5:5c:1f:ea:71:82:
         61:6f:59:2e:47:19:f2:6e:f6:2b:a9:5e:29:2d:59:1e:eb:63:
         76:ab:ce:17:a3:3d:bd:48:35:27:5f:8d:51:70:af:53:c8:6e:
         39:1e:2d:e1:75:96:24:4c:2a:67:55:e4:3f:66:3d:f1:85:c2:
         ac:61:41:e3:25:24:40:20:1b:c5:e8:0e:6d:70:40:38:4d:ed:
         ef:5b:dc:74:9e:62:79:67:a8:26:ed:aa:2b:34:31:78:be:d5:
         90:39:0a:f0:01:1c:a7:a0:14:4b:9a:b7:64:3d:58:de:24:84:
         f0:ed:04:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:12:44 2025 by rpki-client