This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5df8d1c3-3b1f-4371-b1de-c018506ef10a.roa
File:                     5df8d1c3-3b1f-4371-b1de-c018506ef10a.roa (raw, json)
Hash identifier:          /UjkGrTBWnFjx5fEbehJUPdn9Sg0tywK2zjUBnUTW8g=
Subject key identifier:   36:C9:D2:24:77:CF:D8:2E:CA:01:E3:2E:94:1E:5C:CA:29:C9:EB:4A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0D0F491AB6361847AA11BC32C7A31E51ACC96103
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5df8d1c3-3b1f-4371-b1de-c018506ef10a.roa
Signing time:             Tue 25 Nov 2025 13:22:21 +0000
ROA not before:           Tue 25 Nov 2025 13:22:21 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0f:49:1a:b6:36:18:47:aa:11:bc:32:c7:a3:1e:51:ac:c9:61:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 13:22:21 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=6888644011a1035653b79439b98a976656183e773eab60a072d48e387ed8b5fd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:25:25:cd:7a:27:45:38:5a:af:7b:c0:f4:3b:
                    91:d0:02:ff:ca:cb:9b:76:74:c0:a5:95:eb:7f:73:
                    c6:51:89:82:43:37:f7:d6:26:13:eb:25:cb:fe:19:
                    f5:78:4c:c7:a5:e8:e0:47:89:70:2e:40:d4:2c:25:
                    58:b1:d4:23:82:dc:de:98:ff:c1:2e:99:8e:ba:76:
                    df:71:1a:a4:9e:fe:e9:e5:7b:26:78:3e:67:aa:16:
                    0c:e8:14:9e:d9:7c:05:a1:a9:ea:f5:b3:0a:c4:a7:
                    ca:6f:af:e0:6a:e9:5f:67:7e:d7:da:1e:95:aa:d2:
                    32:95:b4:4d:3b:77:4c:90:0f:36:ba:42:9f:dc:96:
                    de:21:bb:0e:0e:d8:89:5d:40:0c:d0:79:3b:18:ba:
                    b6:77:63:2a:f8:fd:ba:8f:61:86:08:a5:a2:c5:41:
                    3f:f0:d5:6a:63:87:16:73:a9:4c:61:e4:7f:ef:f2:
                    83:e5:46:69:e2:0c:78:f4:28:ee:2f:8a:ed:c2:85:
                    81:9f:17:02:20:6d:59:80:1e:50:e8:73:91:30:78:
                    07:a2:b4:6a:61:a7:50:5d:26:69:15:43:44:2e:cb:
                    a4:c9:f9:e9:6c:fb:29:a4:d5:19:9c:28:11:e7:1c:
                    43:63:79:aa:21:0c:06:73:9f:81:ae:d6:9a:c8:68:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C9:D2:24:77:CF:D8:2E:CA:01:E3:2E:94:1E:5C:CA:29:C9:EB:4A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5df8d1c3-3b1f-4371-b1de-c018506ef10a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c10::/44

    Signature Algorithm: sha256WithRSAEncryption
         c0:e2:af:db:5e:49:81:7d:b6:9c:bd:67:da:88:95:93:19:24:
         72:ce:41:a5:a9:75:b1:81:69:7d:b4:69:8f:8d:5a:f0:a9:31:
         54:0b:5e:ae:b7:16:1e:96:37:cb:4e:97:5d:01:ad:ca:36:a3:
         58:15:16:47:1c:81:16:82:28:95:2c:ea:28:bd:a0:cf:b3:32:
         f1:98:eb:c2:bd:46:ef:8a:ec:ee:4a:c2:70:3f:0a:7e:ea:50:
         fe:68:ab:18:0c:e3:8a:af:8d:a1:74:48:0e:c6:7f:26:ec:f1:
         49:27:4b:b2:46:da:e1:0f:52:9a:14:2c:c9:c2:be:2c:c0:5a:
         7f:72:4a:9a:e5:49:50:68:9b:dc:ba:b7:38:5e:90:dd:c7:fb:
         e4:80:d1:e9:1b:ab:1c:e8:7c:fe:76:41:48:a8:1e:c2:6a:35:
         0d:32:0c:27:33:36:9c:46:2d:bf:69:c5:73:be:c7:04:d2:eb:
         a1:ad:64:d6:5d:d7:cc:a5:20:9b:1a:16:56:0b:7f:6c:d6:d0:
         57:0a:23:72:27:9f:d8:ed:2d:d5:82:cc:2d:ee:5b:b7:84:b0:
         90:26:46:bd:cc:4c:6d:83:9d:46:14:71:00:e8:90:f5:83:12:
         91:70:f1:6c:6e:57:26:81:df:13:ba:2c:c0:1e:89:2a:b2:85:
         77:13:00:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:11 2025 by rpki-client