This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/653d9bee-c31c-4f80-8ff5-4edad0e9d81b.roa
File:                     653d9bee-c31c-4f80-8ff5-4edad0e9d81b.roa (raw, json)
Hash identifier:          ikP1lsbbgq1LvJyYqwPIUm47sm7rIcs9oHGvX5xAH8Y=
Subject key identifier:   A8:AE:6E:3E:F0:09:C7:20:18:24:78:A1:DF:62:28:3F:FF:8E:07:37
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5FDD13EF5C568650B16D86C9AB70697B35F96F5F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/653d9bee-c31c-4f80-8ff5-4edad0e9d81b.roa
Signing time:             Tue 25 Nov 2025 17:01:14 +0000
ROA not before:           Tue 25 Nov 2025 17:01:14 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1390::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dd:13:ef:5c:56:86:50:b1:6d:86:c9:ab:70:69:7b:35:f9:6f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 17:01:14 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=e2b4981ee2f4575d784fbf4081ba9988a7332d052be5c133a83d97306f46044c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:29:80:14:6d:36:c2:b4:14:54:bd:86:03:
                    59:2f:f6:65:89:02:d9:94:2c:7e:2a:8d:d4:12:eb:
                    96:28:31:56:3b:a5:b0:5d:fc:e6:77:f5:16:72:b4:
                    b6:f0:54:7a:93:72:fc:81:79:6b:32:0d:b8:3c:6d:
                    e2:46:f0:a9:27:76:fd:e2:01:69:29:a7:8e:4c:a2:
                    de:c0:41:46:2e:83:d6:a3:65:20:78:94:0e:28:ca:
                    50:de:7e:e7:0f:c5:ad:e3:a1:95:b6:f0:63:b3:c1:
                    93:2d:7a:47:48:87:38:a4:b9:cd:21:2d:c5:43:46:
                    76:81:3e:c3:2a:86:de:4b:75:e7:e0:77:5e:e0:b3:
                    0f:52:8b:88:9f:d2:29:a3:23:7b:e1:cf:ba:c3:81:
                    81:14:1c:49:31:86:8a:c0:0c:e3:6c:50:68:9a:58:
                    09:50:e0:34:71:08:c6:fc:48:e4:91:b5:3f:83:20:
                    58:43:c2:14:08:a6:b5:06:67:5f:a0:86:33:7d:d0:
                    6c:c8:d4:c8:e8:93:3d:b1:f7:e7:41:ab:b1:c6:1c:
                    ac:b6:50:55:46:d7:60:06:e1:7a:c5:0c:e5:00:ed:
                    7b:a6:68:91:f2:a5:6e:83:e7:18:a5:2e:75:dc:68:
                    90:3c:57:34:ce:c4:12:62:e6:72:38:cd:d8:b1:56:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AE:6E:3E:F0:09:C7:20:18:24:78:A1:DF:62:28:3F:FF:8E:07:37
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/653d9bee-c31c-4f80-8ff5-4edad0e9d81b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1390::/46

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:89:2b:39:1d:08:8f:71:d6:e2:78:5f:1c:29:d8:43:a5:
         9d:46:28:99:f0:6d:4e:c4:d4:a5:98:d3:86:d1:ee:20:b1:9e:
         84:ba:f7:cc:37:ed:5a:82:3e:1f:ff:93:f2:4f:4d:c3:36:38:
         0e:3b:9a:88:69:a2:f6:52:b2:ea:80:b2:0b:22:27:a7:ce:56:
         32:ec:43:6a:ea:02:79:a8:f4:63:3f:31:6d:f3:db:d9:e6:4f:
         86:3a:66:af:d3:b0:6a:9a:73:b7:01:09:08:5b:73:60:58:04:
         91:00:8a:92:9a:a3:28:c2:1a:7e:8d:7b:93:1f:4f:10:fe:5c:
         32:bc:70:68:d3:01:47:d0:92:dd:2d:f5:84:4d:37:b7:a0:c1:
         23:da:b6:31:0d:cd:34:00:78:3b:b2:94:f4:9b:17:26:95:24:
         77:11:62:47:b3:8d:70:57:4a:54:5e:2b:b3:b9:97:36:0a:b3:
         b1:b8:23:e5:9a:c9:b2:94:ee:1a:60:56:08:ad:02:94:f9:56:
         af:69:15:82:f6:09:45:ad:f2:ad:fa:29:a3:9b:11:d1:4d:57:
         1f:a1:b0:c0:a8:64:d0:8a:a5:26:d4:2d:46:14:5f:5c:3c:11:
         5a:06:c5:20:3f:fb:01:96:67:b5:68:0e:42:7e:fb:5c:18:81:
         cd:b2:3f:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:33 2025 by rpki-client