This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f02aaf7-8cf5-4df1-ad2a-c5dcdba0dcd9.roa
File:                     5f02aaf7-8cf5-4df1-ad2a-c5dcdba0dcd9.roa (raw, json)
Hash identifier:          a1IQvDAf1gfoDU4YxPTgBBCv16h/m+33ZIJXY+pjj+M=
Subject key identifier:   3A:A7:61:C0:F3:59:E4:93:10:F7:0A:9A:07:3E:04:6B:73:9E:4E:53
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       304847717A43537862ADFB3EB69B57AE42ECEE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f02aaf7-8cf5-4df1-ad2a-c5dcdba0dcd9.roa
Signing time:             Tue 25 Nov 2025 15:01:30 +0000
ROA not before:           Tue 25 Nov 2025 15:01:30 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3516::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:48:47:71:7a:43:53:78:62:ad:fb:3e:b6:9b:57:ae:42:ec:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 15:01:30 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=3b9168c734e181aba3328b1428fc7e36103f1b537ef80d1a63824d2ada12da2e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:48:42:b1:51:5b:67:27:90:77:bc:b9:60:
                    fb:71:ac:e0:3a:f6:3c:07:42:63:30:c2:36:72:17:
                    37:fe:51:25:97:33:41:1b:17:8f:3e:08:07:fb:e5:
                    be:f6:71:70:f6:71:5d:ba:d9:02:48:b0:0d:cb:ec:
                    ed:1b:6a:17:a1:ad:cb:30:af:a5:95:55:26:03:2b:
                    84:d6:72:9f:4c:59:9b:de:d5:a9:f1:56:59:80:0f:
                    10:c1:65:bc:5d:73:e3:4e:9e:c3:f0:a8:27:e1:85:
                    fc:3f:76:8f:b1:60:24:05:61:65:e4:ca:d4:c1:f2:
                    d0:b5:bb:b7:98:ef:2d:7c:c8:94:9d:7b:42:46:8b:
                    c2:5c:f8:7d:aa:e2:8a:7a:f2:33:7b:9f:f0:83:5c:
                    6c:47:b8:fd:30:10:11:13:38:69:a2:db:32:79:3e:
                    a7:ad:64:94:54:4e:d7:f1:ae:00:17:eb:2f:c6:b9:
                    81:76:f8:00:10:e2:72:6a:19:3f:70:3f:4f:b3:46:
                    7b:f6:81:29:44:8b:eb:78:6b:9d:f9:39:e0:f4:74:
                    ce:5b:f3:c8:d6:29:3e:ce:af:b6:b1:de:14:01:a6:
                    29:e7:9d:75:20:a6:e8:36:64:04:d9:83:b7:ed:54:
                    cd:73:64:6b:f0:42:50:34:e9:84:13:2d:53:a6:83:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A7:61:C0:F3:59:E4:93:10:F7:0A:9A:07:3E:04:6B:73:9E:4E:53
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f02aaf7-8cf5-4df1-ad2a-c5dcdba0dcd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3516::/47

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:5a:32:9e:1f:a9:06:d1:a2:74:cd:aa:cb:85:aa:96:27:
         c8:91:d7:74:e2:d2:62:36:96:ec:99:e9:c6:02:cd:85:d0:cb:
         01:f8:bd:85:82:1d:17:60:33:97:39:6c:a4:7e:9a:39:8d:c1:
         10:1d:d9:6d:d5:19:d9:7e:b4:7d:57:60:95:78:68:c2:25:26:
         48:8b:62:7c:02:01:6b:1e:0d:8c:3b:1b:81:85:34:07:7b:65:
         08:44:b7:a8:7c:d6:2d:cf:38:26:85:91:a8:99:27:03:6b:e4:
         5f:9e:85:56:c1:81:00:50:b7:be:bb:99:3b:60:10:57:95:b4:
         9c:c2:39:00:0a:1e:e6:d8:4a:39:1a:98:0d:13:63:f8:86:87:
         f4:a8:4f:a6:5c:a0:f4:d3:11:b3:7d:55:d0:13:72:18:2e:19:
         eb:54:16:c4:3c:14:fa:36:c4:f9:a6:e9:bc:e8:eb:39:b3:9b:
         73:9f:e4:26:f6:73:52:00:f1:8f:43:17:79:b8:54:7d:3b:50:
         e9:b5:e0:ec:01:4b:c0:6c:e1:08:75:6c:e3:86:02:84:7f:08:
         04:86:96:d5:07:ad:71:08:e5:3d:02:6b:2f:36:28:d4:35:9c:
         cd:c1:90:0f:f8:50:ce:36:be:ce:7c:59:c9:d2:76:8f:3f:f8:
         19:19:1c:5d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITMEhHcXpDU3hirfs+tptXrkLs7jANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTExMjUxNTAxMzBaFw0yNjAyMjMyMzU5NTla
MHoxSTBHBgNVBAUTQDNiOTE2OGM3MzRlMTgxYWJhMzMyOGIxNDI4ZmM3ZTM2MTAz
ZjFiNTM3ZWY4MGQxYTYzODI0ZDJhZGExMmRhMmUxLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANsMSEKxUVtnJ5B3vLlg+3Gs4Dr2PAdCYzDCNnIXN/5RJZcz
QRsXjz4IB/vlvvZxcPZxXbrZAkiwDcvs7RtqF6GtyzCvpZVVJgMrhNZyn0xZm97V
qfFWWYAPEMFlvF1z406ew/CoJ+GF/D92j7FgJAVhZeTK1MHy0LW7t5jvLXzIlJ17
QkaLwlz4fariinryM3uf8INcbEe4/TAQERM4aaLbMnk+p61klFRO1/GuABfrL8a5
gXb4ABDicmoZP3A/T7NGe/aBKUSL63hrnfk54PR0zlvzyNYpPs6vtrHeFAGmKeed
dSCm6DZkBNmDt+1UzXNka/BCUDTphBMtU6aD0y0CAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBQ6p2HA81nkkxD3CpoHPgRrc55OUzAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvNWYwMmFhZjctOGNmNS00ZGYxLWFkMmEtYzVkY2RiYTBkY2Q5LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHASYAkAA1FjANBgkqhkiG9w0BAQsFAAOCAQEAFEtaMp4fqQbRonTNqsuFqpYn
yJHXdOLSYjaW7JnpxgLNhdDLAfi9hYIdF2AzlzlspH6aOY3BEB3ZbdUZ2X60fVdg
lXhowiUmSItifAIBax4NjDsbgYU0B3tlCES3qHzWLc84JoWRqJknA2vkX56FVsGB
AFC3vruZO2AQV5W0nMI5AAoe5thKORqYDRNj+IaH9KhPplyg9NMRs31V0BNyGC4Z
61QWxDwU+jbE+abpvOjrObObc5/kJvZzUgDxj0MXebhUfTtQ6bXg7AFLwGzhCHVs
44YChH8IBIaW1QetcQjlPQJrLzYo1DWczcGQD/hQzja+znxZydJ2jz/4GRkcXQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:08 2025 by rpki-client