This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6449f237-fd5d-40fd-ab9c-fc63662fac31.roa
File:                     6449f237-fd5d-40fd-ab9c-fc63662fac31.roa (raw, json)
Hash identifier:          LxV8rCOe65/bCfJEQ2BpQHw47qgS3MNeK36m3+BBDlU=
Subject key identifier:   3C:EE:A9:E9:16:0A:89:60:81:1F:E7:DC:37:DD:18:42:64:25:21:E7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       66819F754F34FCEC7B9F5DD67105F354FCA1138C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6449f237-fd5d-40fd-ab9c-fc63662fac31.roa
Signing time:             Tue 25 Nov 2025 12:12:08 +0000
ROA not before:           Tue 25 Nov 2025 12:12:08 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:173c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:81:9f:75:4f:34:fc:ec:7b:9f:5d:d6:71:05:f3:54:fc:a1:13:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 12:12:08 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=215d85b65c8982e67216c3e2d10245eb3fbc89f89af2989f5f5cd350d1a82178, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:5d:47:b7:34:fe:e7:cb:5d:f7:f2:7b:54:
                    7d:df:ca:1f:40:b3:98:69:17:5e:79:dc:b2:a1:6d:
                    d5:84:9e:83:75:91:e9:72:0c:c6:ea:82:2a:cc:a5:
                    fe:01:2d:dd:67:5c:97:77:89:2e:36:a3:72:84:51:
                    23:2a:ab:02:33:a8:5f:a8:e5:9e:2d:2e:15:aa:aa:
                    72:4a:cc:55:ff:e9:c1:68:50:44:35:8d:23:fa:dd:
                    eb:fe:14:73:2b:d2:c2:bc:76:e3:4b:c5:5f:b3:1e:
                    68:35:b3:72:c2:19:1d:72:d5:9b:03:fc:e8:a3:55:
                    64:1b:a0:f1:11:04:01:33:e6:7d:58:d8:62:38:4b:
                    c3:2f:44:59:47:b8:ec:52:e9:6b:d4:5e:30:7e:b4:
                    53:e6:1c:0e:4b:9c:3f:f0:13:0e:92:4d:78:fa:2a:
                    11:1c:c0:a1:ab:ce:ac:da:5e:cb:37:d7:62:c9:23:
                    a3:99:82:87:f6:73:42:02:b6:2a:48:bf:bf:97:8c:
                    b4:da:86:b0:c8:59:5a:3d:f6:3f:e8:d8:77:de:13:
                    53:2e:dc:b0:62:a6:a6:2b:03:af:70:a8:f6:4e:29:
                    0d:77:3f:e9:aa:56:51:ab:d2:16:c1:55:d6:34:05:
                    bc:92:b9:88:e0:72:97:03:3d:02:0d:4a:d1:d9:24:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EE:A9:E9:16:0A:89:60:81:1F:E7:DC:37:DD:18:42:64:25:21:E7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6449f237-fd5d-40fd-ab9c-fc63662fac31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:173c::/46

    Signature Algorithm: sha256WithRSAEncryption
         99:71:c7:ea:7c:e8:79:8d:5f:4d:e8:97:60:ca:49:32:ac:af:
         13:86:52:04:e9:59:25:b4:f1:5b:13:67:2f:05:f8:0a:e4:ea:
         14:d1:4d:ff:90:31:45:d0:67:11:e2:9c:f6:a8:7e:2e:2d:30:
         79:62:d6:3e:fd:2c:3e:28:9c:6f:72:a1:93:52:f1:5a:95:7d:
         b6:3f:da:90:92:34:e6:55:e5:9a:d6:cb:b6:ff:3f:cd:44:ec:
         5f:bd:af:97:70:cc:e2:df:61:1c:bf:37:5f:7e:9f:21:6d:82:
         b5:ed:18:f8:b3:a2:1f:a6:7b:2f:8f:b1:f9:fb:0e:59:43:93:
         69:88:66:cd:82:3f:d2:e1:27:77:e6:92:44:77:bc:7a:bf:a3:
         a0:ea:2d:f3:de:68:57:02:ab:53:0e:cd:c3:2a:f5:64:21:3d:
         c6:59:ba:bb:9d:0f:b7:5a:f7:62:6b:5a:96:57:dd:ec:8b:43:
         5c:54:d0:36:68:01:b8:ad:1a:b9:41:de:cd:77:ef:fd:51:de:
         ba:3e:94:b1:e5:dd:01:f4:ab:79:b2:fc:c7:bc:38:42:f9:18:
         09:ef:b8:44:8c:3a:a1:b7:fb:e4:aa:54:89:fa:a9:a5:ec:5a:
         7e:fa:07:a5:e5:c0:4b:26:b5:3f:1c:77:9f:95:54:24:4f:95:
         bc:90:ca:7a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZoGfdU80/Ox7n13WcQXzVPyhE4wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTIxMjA4WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMTVkODViNjVjODk4MmU2NzIxNmMzZTJkMTAyNDVlYjNm
YmM4OWY4OWFmMjk4OWY1ZjVjZDM1MGQxYTgyMTc4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgUV1HtzT+58td9/J7VH3fyh9As5hpF1553LKhbdWEnoN1
kelyDMbqgirMpf4BLd1nXJd3iS42o3KEUSMqqwIzqF+o5Z4tLhWqqnJKzFX/6cFo
UEQ1jSP63ev+FHMr0sK8duNLxV+zHmg1s3LCGR1y1ZsD/OijVWQboPERBAEz5n1Y
2GI4S8MvRFlHuOxS6WvUXjB+tFPmHA5LnD/wEw6STXj6KhEcwKGrzqzaXss312LJ
I6OZgof2c0ICtipIv7+XjLTahrDIWVo99j/o2HfeE1Mu3LBipqYrA69wqPZOKQ13
P+mqVlGr0hbBVdY0BbySuYjgcpcDPQINStHZJGjlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUPO6p6RYKiWCBH+fcN90YQmQlIecwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzY0NDlmMjM3LWZkNWQtNDBmZC1hYjljLWZjNjM2NjJmYWMzMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAFzwwDQYJKoZIhvcNAQELBQADggEBAJlxx+p86HmNX03ol2DKSTKs
rxOGUgTpWSW08VsTZy8F+Ark6hTRTf+QMUXQZxHinPaofi4tMHli1j79LD4onG9y
oZNS8VqVfbY/2pCSNOZV5ZrWy7b/P81E7F+9r5dwzOLfYRy/N19+nyFtgrXtGPiz
oh+mey+Psfn7DllDk2mIZs2CP9LhJ3fmkkR3vHq/o6DqLfPeaFcCq1MOzcMq9WQh
PcZZurudD7da92JrWpZX3eyLQ1xU0DZoAbitGrlB3s137/1R3ro+lLHl3QH0q3my
/Me8OEL5GAnvuESMOqG3++SqVIn6qaXsWn76B6XlwEsmtT8cd5+VVCRPlbyQyno=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:13:21 2025 by rpki-client