This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6a69913c-7bb6-42e2-b374-195635d084f3.roa
File:                     6a69913c-7bb6-42e2-b374-195635d084f3.roa (raw, json)
Hash identifier:          JI6JzKIfKVDKW/zYT1oDxZ1lnvSgd9/lileHAE5/h/k=
Subject key identifier:   93:C2:D1:5B:86:5C:CF:8C:6C:A6:27:00:B8:68:61:AF:AF:E9:FF:C1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       784214D45A5C39515EB334DE64DA37D9BC163E59
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6a69913c-7bb6-42e2-b374-195635d084f3.roa
Signing time:             Mon 24 Nov 2025 02:20:09 +0000
ROA not before:           Mon 24 Nov 2025 02:20:09 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1bb0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:42:14:d4:5a:5c:39:51:5e:b3:34:de:64:da:37:d9:bc:16:3e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:20:09 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=e7b51d8c9b7b47daf14b639f44abbbdc902aaff025e40a3520ed9dca3c025cd2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c4:86:2f:a1:0c:6b:af:c4:ae:ca:fb:9c:9f:
                    a5:d3:e5:4d:6a:c7:e3:37:b6:04:53:c0:34:da:c5:
                    0a:e6:f2:fa:93:41:0b:3f:d0:93:41:42:58:5f:2d:
                    f7:74:0e:11:39:75:9a:0d:d1:65:a3:9d:f9:84:01:
                    69:fe:78:44:c7:9c:f5:76:59:ab:5a:2b:cb:ff:42:
                    ad:2f:a1:d1:d3:9e:bf:d9:f5:76:2b:fa:f5:64:d3:
                    09:f2:9c:33:19:08:5f:8e:4a:a2:4f:f2:b0:29:a7:
                    5a:ab:41:07:ef:0d:0b:87:17:11:47:ed:44:89:c3:
                    d7:15:ba:60:f6:d6:bc:64:3e:b8:8e:6c:77:43:48:
                    ba:3a:d9:bb:14:2f:7e:0e:9d:b6:04:85:d3:0b:36:
                    cc:4d:68:48:8c:d0:52:11:7a:47:e4:97:fb:f2:36:
                    29:7e:9c:cf:28:13:aa:d6:98:eb:61:8a:5d:b0:61:
                    30:d5:e4:02:e0:d4:6d:df:56:17:b4:52:7f:1e:38:
                    29:d1:6a:27:6e:b2:6f:08:b1:d3:b1:3a:58:21:53:
                    96:34:f1:2b:e4:2e:fc:ff:da:e4:07:e9:9d:cb:7a:
                    60:70:77:bc:e4:79:75:e6:68:20:7a:dc:ff:71:01:
                    0a:2b:37:ee:f0:09:07:55:e4:4e:0c:8e:b7:a3:ed:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C2:D1:5B:86:5C:CF:8C:6C:A6:27:00:B8:68:61:AF:AF:E9:FF:C1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6a69913c-7bb6-42e2-b374-195635d084f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1bb0::/47

    Signature Algorithm: sha256WithRSAEncryption
         48:9e:fa:3f:9d:d3:87:e3:50:52:43:3a:7e:6b:61:80:3e:49:
         5e:8e:67:7d:b7:4f:8c:7e:a5:a2:ba:12:f5:33:7e:f2:a9:4c:
         44:e8:57:a5:8d:25:47:3a:25:39:a9:c5:14:c1:4c:a0:ff:f3:
         c4:6f:46:73:47:7c:56:2a:5b:39:e4:f8:ac:bb:ee:a0:2b:72:
         3a:39:84:72:e6:f3:eb:f4:68:c0:a1:5b:ef:05:88:0b:f9:66:
         76:77:09:5b:53:72:10:c5:cd:41:2b:7a:e3:64:51:f4:df:81:
         43:d1:12:7d:a7:7f:3d:19:0e:a1:00:27:31:1f:6a:f6:6e:98:
         6e:0a:0c:2c:1b:a4:52:b6:fb:e8:c0:e2:db:f9:8f:f2:f8:85:
         19:73:bd:35:67:92:c4:bf:e2:2c:44:a9:f6:51:0a:36:dd:ee:
         2d:fb:96:2d:65:b1:1d:d5:66:90:7d:65:ee:75:e2:d7:5b:5a:
         a0:00:fe:9a:a9:17:60:c7:9e:4a:a5:c4:a3:74:18:eb:52:46:
         92:f8:fa:55:25:e6:d9:01:e4:1e:0d:2d:81:0c:b8:e7:ef:88:
         1d:3f:7b:e8:1b:0d:a9:ba:d8:a2:2c:bf:aa:66:0f:2b:c0:7a:
         0c:1b:1b:d4:9c:ad:76:e4:96:5e:42:5c:ff:86:a9:d9:09:bf:
         b6:ea:99:7a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUeEIU1FpcOVFeszTeZNo32bwWPlkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDIyMDA5WhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlN2I1MWQ4YzliN2I0N2RhZjE0YjYzOWY0NGFiYmJkYzkw
MmFhZmYwMjVlNDBhMzUyMGVkOWRjYTNjMDI1Y2QyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD8xIYvoQxrr8Suyvucn6XT5U1qx+M3tgRTwDTaxQrm8vqT
QQs/0JNBQlhfLfd0DhE5dZoN0WWjnfmEAWn+eETHnPV2WataK8v/Qq0vodHTnr/Z
9XYr+vVk0wnynDMZCF+OSqJP8rApp1qrQQfvDQuHFxFH7USJw9cVumD21rxkPriO
bHdDSLo62bsUL34OnbYEhdMLNsxNaEiM0FIRekfkl/vyNil+nM8oE6rWmOthil2w
YTDV5ALg1G3fVhe0Un8eOCnRaidusm8IsdOxOlghU5Y08SvkLvz/2uQH6Z3LemBw
d7zkeXXmaCB63P9xAQorN+7wCQdV5E4Mjrej7dTlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUk8LRW4Zcz4xspicAuGhhr6/p/8EwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzZhNjk5MTNjLTdiYjYtNDJlMi1iMzc0LTE5NTYzNWQwODRmMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAG7AwDQYJKoZIhvcNAQELBQADggEBAEie+j+d04fjUFJDOn5rYYA+
SV6OZ323T4x+paK6EvUzfvKpTEToV6WNJUc6JTmpxRTBTKD/88RvRnNHfFYqWznk
+Ky77qArcjo5hHLm8+v0aMChW+8FiAv5ZnZ3CVtTchDFzUEreuNkUfTfgUPREn2n
fz0ZDqEAJzEfavZumG4KDCwbpFK2++jA4tv5j/L4hRlzvTVnksS/4ixEqfZRCjbd
7i37li1lsR3VZpB9Ze514tdbWqAA/pqpF2DHnkqlxKN0GOtSRpL4+lUl5tkB5B4N
LYEMuOfviB0/e+gbDam62KIsv6pmDyvAegwbG9ScrXbkll5CXP+GqdkJv7bqmXo=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:16:04 2025 by rpki-client