This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61968163-7c94-4eee-80e7-5d799d9dfe31.roa
File:                     61968163-7c94-4eee-80e7-5d799d9dfe31.roa (raw, json)
Hash identifier:          fAe2sJgc64JQKqkLKcBtNfPTY/7cVV4fhL1wgjrbUys=
Subject key identifier:   A7:CF:47:9B:88:2A:C4:52:9A:16:14:30:12:AE:DE:59:D5:F9:D4:ED
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2AB4281F47B2D685A31EAD22721ABF3D8B1E45A4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61968163-7c94-4eee-80e7-5d799d9dfe31.roa
Signing time:             Tue 25 Nov 2025 03:40:09 +0000
ROA not before:           Tue 25 Nov 2025 03:40:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32fc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b4:28:1f:47:b2:d6:85:a3:1e:ad:22:72:1a:bf:3d:8b:1e:45:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 03:40:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=068b0afb83facfa8a05cc8baa90ab36b7b1399154b38128c6c07b27d646a6f3d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:ec:77:b5:08:e5:38:2a:2f:df:a8:37:24:
                    a5:49:71:6d:1a:05:b3:45:0f:7c:90:84:43:93:8c:
                    83:e9:2f:f6:0f:26:92:d7:30:f6:18:cb:37:3f:1c:
                    1a:3a:7b:53:ea:13:78:c8:ae:1a:04:30:8c:87:dd:
                    6d:d5:c3:33:f5:de:51:bc:37:36:45:46:8c:98:df:
                    45:14:d4:ed:1c:c8:53:c5:e0:de:88:37:00:f9:9a:
                    75:0e:f9:d9:5f:e7:0f:7a:69:37:65:6e:fd:d1:ef:
                    38:a0:c7:d5:86:7f:6d:f7:9c:26:27:5c:08:af:39:
                    c3:5a:bc:a3:f5:f8:e8:87:6d:7f:34:d7:0c:e8:7e:
                    5b:d3:19:2c:57:6f:2c:a4:ef:a6:54:f0:11:b9:f6:
                    62:40:ee:bf:97:54:d1:9a:2d:94:5e:fd:4d:b8:38:
                    3e:92:4f:ad:1a:7d:f7:e4:2c:98:3a:77:e1:22:1a:
                    36:a7:d7:1f:15:29:51:24:3c:36:55:09:26:67:cd:
                    17:d0:43:40:7b:b5:e4:0f:1b:5b:83:c4:b4:6c:79:
                    fd:4a:28:c2:b4:d6:d6:91:3b:0f:c4:11:32:d9:af:
                    ff:22:59:27:2a:47:d8:84:a5:f7:ed:12:72:34:85:
                    32:33:83:d9:9d:6e:ab:8b:e5:d2:98:2b:23:df:b4:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CF:47:9B:88:2A:C4:52:9A:16:14:30:12:AE:DE:59:D5:F9:D4:ED
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61968163-7c94-4eee-80e7-5d799d9dfe31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32fc::/46

    Signature Algorithm: sha256WithRSAEncryption
         bf:43:15:ba:2b:0e:61:e1:cf:ec:b9:3f:35:58:7c:76:6d:10:
         b0:d7:fd:59:67:61:cf:71:56:a9:3c:93:91:e3:64:9a:66:75:
         78:19:af:4f:d3:2a:a5:47:6b:41:e2:e3:c1:f5:3a:bb:15:9b:
         03:35:e3:56:42:f8:5f:6b:ab:8e:f7:52:48:a0:57:49:45:f0:
         88:5e:7c:5c:fc:82:55:c4:98:f4:6d:9a:cc:c8:de:1f:ae:0a:
         61:57:87:f8:3c:f3:57:34:f7:cb:43:b7:bc:61:3a:7d:6e:a5:
         af:1a:60:f0:55:f8:ca:7a:12:83:86:2b:de:13:8b:3e:02:fb:
         32:27:4e:7b:f5:24:05:8d:53:23:3b:68:f2:dd:ed:2c:35:87:
         04:3b:e4:10:d4:7d:cd:9a:4d:d3:7a:0f:71:0a:f8:9b:5b:d7:
         a7:46:bf:16:6c:81:c3:26:45:e2:36:85:73:7b:f7:9e:e6:13:
         c2:b0:93:94:ee:9b:05:9e:32:0d:78:85:cc:bb:51:5d:2a:d1:
         ab:5a:e4:74:4b:66:cb:5c:6b:f2:7c:5f:20:0f:72:6e:f2:ff:
         fe:39:91:99:0c:b4:cd:f3:4f:52:a2:1f:0a:e7:fd:e0:82:84:
         65:aa:2b:56:d4:54:d3:1a:a8:5a:41:9e:cf:16:a5:79:cf:33:
         ad:29:e1:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:45 2025 by rpki-client