This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6272251e-ee06-419f-a5e7-6553d99e8ff4.roa
File:                     6272251e-ee06-419f-a5e7-6553d99e8ff4.roa (raw, json)
Hash identifier:          ulHH49pKwllkuJN40IU5KjVEmIRBiK2d0kk/Sv0CFW0=
Subject key identifier:   78:89:20:5B:9C:08:75:0A:29:DB:C6:83:6E:28:6F:49:E3:8D:D3:8C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       111B5F972659B013B7BEE05BF173A8D4BC8B23F8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6272251e-ee06-419f-a5e7-6553d99e8ff4.roa
Signing time:             Tue 25 Nov 2025 04:32:01 +0000
ROA not before:           Tue 25 Nov 2025 04:32:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1320::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1b:5f:97:26:59:b0:13:b7:be:e0:5b:f1:73:a8:d4:bc:8b:23:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:32:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=ad1c6dda68838796582409ae691caf71e2a14cfdf4385bda3eb976d51010734b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:43:ee:1e:16:40:91:79:9f:47:be:40:eb:
                    68:b4:1b:20:2f:e8:db:ff:71:4f:d7:e6:a0:65:9f:
                    1a:b4:02:81:e1:16:9a:df:55:e0:2f:09:ff:67:03:
                    f4:f0:c8:88:b2:b5:43:aa:c9:bf:02:22:f4:c6:31:
                    4c:86:5e:4e:2d:97:9a:68:47:d7:6f:02:2c:19:3f:
                    70:9c:8a:aa:2d:f5:bb:84:c8:48:11:85:5b:63:6f:
                    a2:6b:d8:35:94:d7:72:af:6e:41:ca:28:2d:d5:15:
                    84:f1:25:d8:cb:ad:77:b0:57:a1:8c:79:71:d5:14:
                    ca:d3:ed:84:1b:97:11:9e:42:95:1a:e6:8a:c7:8b:
                    bc:da:95:5d:29:61:dc:71:5d:d4:4b:b2:55:e2:07:
                    2e:b2:61:d3:1a:4b:88:0d:92:5e:44:ed:49:c2:c7:
                    00:ce:0e:e5:0a:80:61:3a:1b:75:be:bd:6e:4f:91:
                    24:d1:25:49:68:7d:6d:44:3d:d4:49:1e:25:17:d1:
                    3a:91:a8:30:67:22:32:40:a7:0e:8f:a0:c8:ef:2d:
                    ea:1d:6a:de:0c:ca:25:21:65:3b:3c:69:6e:4a:02:
                    d1:cc:2e:8c:29:16:bc:38:41:4b:97:c2:c0:fb:34:
                    7a:d9:67:3d:72:13:6a:62:04:57:30:03:36:e1:c0:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:89:20:5B:9C:08:75:0A:29:DB:C6:83:6E:28:6F:49:E3:8D:D3:8C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6272251e-ee06-419f-a5e7-6553d99e8ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1320::/46

    Signature Algorithm: sha256WithRSAEncryption
         2d:a6:2b:17:40:69:a3:af:55:cd:15:dc:1d:49:46:55:30:c2:
         33:4d:6f:4b:c1:b8:db:80:33:0c:dc:3b:0c:71:6a:06:ee:3e:
         99:3d:31:51:af:7c:07:17:5d:02:e3:27:84:40:ce:81:c0:92:
         5c:91:cd:b5:bf:48:ad:d5:1a:d7:62:6f:96:c0:a7:62:18:af:
         0f:5a:ec:44:36:11:2a:3b:d0:f8:9d:d4:c5:28:db:0e:ea:e5:
         d0:cd:76:0b:10:f3:77:cf:5c:a5:4f:fc:2f:a5:b1:5c:95:63:
         25:2c:b3:92:27:f0:95:71:45:d7:be:0c:a8:27:8f:3f:fa:ac:
         42:da:20:45:8b:e8:fd:a1:d2:63:39:cf:cc:cf:16:54:ee:97:
         a9:03:17:9c:be:31:a7:50:8a:86:b2:94:a4:9e:6b:8d:7d:f9:
         be:da:12:8b:28:2f:22:3e:f4:8c:24:ff:0a:47:b7:49:a7:44:
         8d:1d:88:f1:cd:45:16:6e:73:84:d2:6a:9c:fa:be:2d:2f:f7:
         01:21:38:c8:2e:cb:9f:3b:a3:6c:e2:06:93:bf:c6:0c:e5:26:
         cb:9a:1b:55:e4:e5:31:04:03:f4:ed:76:8c:99:40:8c:35:2e:
         18:ed:e8:2d:5e:7e:c3:b8:ab:06:fd:95:24:d6:93:c5:7e:70:
         16:06:02:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:51:54 2025 by rpki-client