This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60a5de58-393a-4913-a069-cac0fc54d013.roa
File:                     60a5de58-393a-4913-a069-cac0fc54d013.roa (raw, json)
Hash identifier:          ok/3yc/6WKuJViGvx79eknHYSzlFnTDwot9nyiAcLwo=
Subject key identifier:   DD:80:AC:E0:05:A5:4F:E0:CD:0E:90:3D:46:E2:F5:05:C6:7C:45:DF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0C279AFD979631A7F92DD173BA2718DB2D2F0271
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60a5de58-393a-4913-a069-cac0fc54d013.roa
Signing time:             Tue 25 Nov 2025 10:30:13 +0000
ROA not before:           Tue 25 Nov 2025 10:30:13 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ba0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:27:9a:fd:97:96:31:a7:f9:2d:d1:73:ba:27:18:db:2d:2f:02:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 10:30:13 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=2b2ee058dcfb4543b2886d36980708ad6be4700d1bddeeae0e68932b5f8ccc2f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:91:d7:79:3b:84:69:9d:3a:21:1d:59:a3:
                    d6:e0:c2:a4:7f:bb:9f:e0:f4:50:a0:77:8b:8f:47:
                    7c:c1:6b:fe:eb:0b:77:f4:6d:12:d7:4b:b6:8f:00:
                    92:e0:75:87:47:20:c9:44:cc:8e:d2:3b:a6:ae:4e:
                    50:01:ba:69:b1:2a:a5:7c:41:12:54:71:af:a9:03:
                    a9:d4:b2:52:c6:c8:3d:fc:2b:2c:b3:6a:d1:a2:c8:
                    4a:d9:0b:38:e7:2f:8c:0d:e5:f3:58:45:1c:e5:e7:
                    8c:b5:fe:6b:62:66:83:63:28:f9:32:9c:18:da:47:
                    8f:54:eb:f0:d8:9f:bb:d0:8a:7c:ec:18:1f:fc:42:
                    06:83:61:f1:94:08:e7:d8:0b:b6:09:4b:23:cb:b6:
                    68:3c:e9:ea:18:9f:c2:2f:5a:90:0a:9c:98:66:0a:
                    de:42:10:eb:7e:4d:b3:d0:69:c2:ce:03:58:0c:65:
                    f1:ea:4d:87:de:68:85:1f:ec:10:b5:10:02:6b:f5:
                    89:60:5e:32:65:01:c6:93:62:3d:bc:37:dc:08:4a:
                    59:87:7f:f5:e5:93:d3:b9:53:5c:57:58:99:77:a9:
                    88:bc:cd:c1:2e:ed:5a:2d:92:6d:1d:7f:60:5a:8b:
                    57:cb:94:63:d5:f3:b7:7e:e1:73:b7:ce:98:06:3f:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:80:AC:E0:05:A5:4F:E0:CD:0E:90:3D:46:E2:F5:05:C6:7C:45:DF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60a5de58-393a-4913-a069-cac0fc54d013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ba0::/46

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:dd:67:93:1e:28:1a:ae:d2:29:a4:fd:ef:11:56:98:f3:
         7c:fc:33:0e:fa:e3:44:07:bb:65:a7:15:d2:33:37:ac:0b:af:
         c9:77:37:ae:7d:73:90:17:fc:d1:04:01:85:12:33:71:64:c2:
         76:f8:fc:c0:80:00:d5:3a:19:77:e0:fb:a5:0b:e0:97:d5:05:
         27:b1:99:17:7a:be:50:1a:38:34:75:5e:91:99:d4:39:82:1f:
         39:66:83:b2:a5:f1:8e:b3:23:88:19:94:3f:b6:f0:e3:10:7c:
         45:95:74:65:f6:14:c1:e7:1b:70:14:2b:d2:59:0f:88:85:ec:
         11:8c:25:4e:95:03:09:f9:2c:1d:5a:a1:3b:30:b6:e7:28:7a:
         eb:a6:92:47:6d:70:9b:f0:7e:38:c5:94:7b:b9:04:1e:3f:48:
         13:56:dc:1a:9a:5b:90:bd:6f:80:2f:ad:9e:9c:7c:9a:78:39:
         ca:7c:cf:fb:2b:7e:f9:b1:f0:7b:dd:65:17:13:0f:87:92:cb:
         0c:f2:07:e4:fe:63:35:36:98:41:46:f7:0c:27:13:ea:07:1f:
         26:2a:c7:d6:b0:e9:81:c1:dd:0a:03:4e:8a:b0:b7:15:9c:93:
         79:6d:d1:20:e3:e4:6a:a0:2f:f6:50:bb:29:b8:eb:27:48:5a:
         0a:37:b8:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:12:49 2025 by rpki-client