This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e29c25c-3757-4f43-bd79-55a5fa73988b.roa
File:                     5e29c25c-3757-4f43-bd79-55a5fa73988b.roa (raw, json)
Hash identifier:          mnIoxAEyxBrXf1wGZxoTPpkxmd8pbFyThYbJrFaVm1A=
Subject key identifier:   58:CD:9D:71:E3:AB:4D:57:C3:8F:D2:0D:77:E8:49:91:4A:E7:8D:2F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3F9F5FA398B60021CE8FA1144D39E72BDC8DF4D9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e29c25c-3757-4f43-bd79-55a5fa73988b.roa
Signing time:             Tue 25 Nov 2025 14:31:01 +0000
ROA not before:           Tue 25 Nov 2025 14:31:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9f:5f:a3:98:b6:00:21:ce:8f:a1:14:4d:39:e7:2b:dc:8d:f4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:31:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=78413372719728f5e0f8192be1dd5bf7efae3a263890d21005b788dc30fa563c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:8a:04:f4:6f:e0:40:d3:20:d9:9d:56:09:
                    6b:97:c0:2e:d1:ce:10:93:a6:51:ad:58:c4:89:f3:
                    16:5f:77:ff:e2:a0:47:99:4c:48:c8:20:64:ff:01:
                    1b:2d:86:08:b5:a3:d3:ba:54:6e:30:1d:2c:dc:f5:
                    84:a5:a9:46:77:bd:b7:f4:e4:a9:48:48:5c:f7:27:
                    5a:d5:c1:c0:c9:66:57:ec:5a:6f:1f:83:98:54:c5:
                    0e:0a:9c:aa:e0:14:80:ca:e5:dc:80:e2:e5:ab:21:
                    fb:57:6e:7d:9c:d1:8f:c0:0d:f9:ea:8e:09:b9:f0:
                    17:90:09:7f:44:fd:19:0b:ec:c0:e2:ea:c3:00:74:
                    2a:44:55:bf:ee:e6:f9:61:8b:49:55:87:74:1d:0d:
                    e7:58:5a:75:bf:ca:24:2c:23:82:68:97:2a:5b:1d:
                    2b:da:d0:a3:50:bb:e6:e9:8c:5d:29:f9:16:77:ec:
                    a8:da:2b:1e:2e:e6:7c:e5:d8:93:7b:6e:02:e4:84:
                    7c:fe:b1:d3:ee:50:50:a6:ff:46:13:7b:8f:49:9f:
                    93:30:42:5a:ab:d0:3c:4e:16:9c:db:32:3a:50:e7:
                    86:05:35:8c:85:4d:6b:7a:28:ba:a4:c2:d1:9c:4d:
                    ef:0e:7d:72:a4:a7:0a:a0:32:e4:22:ac:ce:64:7a:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CD:9D:71:E3:AB:4D:57:C3:8F:D2:0D:77:E8:49:91:4A:E7:8D:2F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e29c25c-3757-4f43-bd79-55a5fa73988b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e70::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:bd:51:7b:86:fc:5b:fd:23:b3:84:12:8c:38:06:d8:d9:96:
         8a:a6:e2:cd:b4:39:40:84:58:b9:b7:00:a4:0c:21:f2:8b:96:
         09:63:71:88:ab:5f:58:42:6b:3f:13:d8:e1:8e:20:da:84:11:
         8e:63:fc:37:83:1a:12:90:07:33:2d:af:96:ce:0e:60:6c:53:
         54:07:3b:9e:fc:c6:6e:16:8c:6d:27:a8:57:c5:b4:7c:ba:d1:
         0b:ab:2a:51:de:e9:00:c5:50:99:da:9d:da:78:03:87:25:c4:
         ee:3e:ab:fd:1e:37:31:71:09:de:75:f1:7d:37:88:98:ed:35:
         5b:04:bb:14:55:9b:67:17:02:6a:71:36:c0:a6:01:65:e5:e9:
         f6:96:fa:e9:4b:aa:4b:18:b4:a4:38:e3:7e:a8:0b:eb:8e:c4:
         c2:82:94:ca:71:56:77:7f:aa:46:1f:2d:65:cf:5a:8e:1d:23:
         1b:9b:e1:cf:06:de:7f:df:91:d4:e9:66:27:6d:45:04:73:92:
         84:20:87:ae:25:af:dc:1d:47:59:f4:a6:93:e6:b3:82:8c:13:
         30:3d:79:dd:58:41:ce:b8:83:08:57:8e:3b:8c:9f:aa:e1:fd:
         05:92:69:ff:04:f7:0a:67:a1:35:ed:55:64:f1:65:61:01:c8:
         92:eb:9e:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:16:54 2025 by rpki-client