This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6439abbe-7e71-4fa2-8163-5bc9a1f9f25c.roa
File:                     6439abbe-7e71-4fa2-8163-5bc9a1f9f25c.roa (raw, json)
Hash identifier:          DkiaIVtOLgaYqLAPK6q5udEp4vp5zrCA8MtTUlEXWJQ=
Subject key identifier:   C1:41:A6:E3:69:D3:19:43:14:F7:94:89:C7:70:9A:41:AE:A5:A6:B3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0DE783E5F3CF206BB6CF49D43BD8859B4C6F2BC1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6439abbe-7e71-4fa2-8163-5bc9a1f9f25c.roa
Signing time:             Tue 25 Nov 2025 16:21:45 +0000
ROA not before:           Tue 25 Nov 2025 16:21:45 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3aae::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e7:83:e5:f3:cf:20:6b:b6:cf:49:d4:3b:d8:85:9b:4c:6f:2b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:21:45 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=ab6b525f89e45d906b27e5df6f2a47e908d9cc23a100b4006236fcadc3d573c2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:c4:61:94:df:7c:83:7c:33:8e:5f:f4:f7:
                    ef:39:2f:b8:da:3e:b6:1b:b0:5b:c8:67:e1:66:65:
                    52:2d:e3:d3:38:6c:73:e2:6f:49:09:6b:b2:df:9e:
                    e9:6d:6c:10:93:47:e4:57:32:cf:4f:10:b1:6f:8e:
                    70:e4:12:1a:93:9b:39:6e:8d:1e:59:ff:04:fd:37:
                    d1:2e:1a:99:07:46:75:c1:be:f0:c5:d1:19:5f:c6:
                    26:21:ec:66:36:9b:32:7f:ed:c0:e6:87:0b:f6:41:
                    df:a7:40:25:1b:75:a5:54:ae:ee:78:82:fa:65:ff:
                    1c:bd:73:48:31:bd:96:c7:0a:59:71:30:07:11:3b:
                    b5:94:01:5c:39:d2:6b:1d:24:f7:b1:d3:8a:17:23:
                    93:ff:fc:a8:a0:68:ca:65:27:e9:ab:8b:b8:77:3d:
                    e7:1d:70:42:f5:ff:a6:75:cb:2d:b9:ec:eb:ea:7c:
                    08:d0:2e:d5:73:89:1a:8e:3b:2a:ef:57:72:c8:64:
                    57:5d:1e:71:a7:bb:6b:ac:ee:cd:98:f3:e0:13:e5:
                    d0:fd:9f:54:2e:46:b9:c4:5b:eb:09:d3:5b:75:19:
                    2a:94:03:b2:0f:da:05:27:9a:e2:9f:ec:64:56:bd:
                    3d:77:0e:50:f9:68:8b:13:3e:c3:a3:a2:0f:95:0c:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:41:A6:E3:69:D3:19:43:14:F7:94:89:C7:70:9A:41:AE:A5:A6:B3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6439abbe-7e71-4fa2-8163-5bc9a1f9f25c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3aae::/47

    Signature Algorithm: sha256WithRSAEncryption
         88:bc:81:b2:2c:1f:08:ad:f0:07:12:8c:4b:40:88:3a:89:30:
         83:15:bb:28:64:46:26:5a:a9:08:69:65:96:e2:a8:1c:11:a3:
         2e:2a:fa:55:bc:23:a0:4d:d4:7e:f3:88:22:e1:be:d9:7f:76:
         57:d9:98:20:dd:dc:fb:07:31:b8:f6:d0:c3:0f:08:62:39:b6:
         48:cc:da:2c:74:9e:c0:28:78:68:9c:dd:e7:4e:96:83:96:12:
         51:fa:17:37:18:90:70:df:48:1c:a8:75:3c:f0:7b:cd:1b:0c:
         d6:08:de:86:cb:8d:fc:00:01:cc:23:5f:c9:1d:95:47:d5:b7:
         d5:02:f1:4f:cc:77:9a:9e:19:1f:86:60:ad:95:c8:04:12:6f:
         ec:76:95:70:94:e9:7f:44:09:57:c1:3f:9a:2b:4a:56:6f:24:
         dd:54:75:c1:3b:32:0d:43:3e:dd:62:49:bd:2c:9d:a0:43:f3:
         2d:31:bb:7c:ba:a3:1c:f4:a6:ca:13:7e:9a:28:e0:7d:65:03:
         82:00:76:23:e2:da:e5:c1:e5:52:07:bf:8c:0d:fb:ec:02:37:
         1b:7f:6f:ba:be:f6:aa:2d:e3:78:48:60:3f:53:69:76:16:a9:
         36:bd:de:74:8c:6d:24:47:b3:27:4e:1d:59:67:e0:18:7a:23:
         92:76:c1:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:34 2025 by rpki-client