This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6af8d90f-bc28-4e0c-98af-2bc41d14b034.roa
File:                     6af8d90f-bc28-4e0c-98af-2bc41d14b034.roa (raw, json)
Hash identifier:          eQaZx5JbYDkT7bOUUDJMzkwrJb526z7jj8QP0H2ORvE=
Subject key identifier:   D9:0B:95:35:17:25:9E:A8:D7:A5:3C:4D:00:AF:A3:3C:97:38:67:73
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1F71F0DC71E8BA2C440E4469B2921D997B6F85C0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6af8d90f-bc28-4e0c-98af-2bc41d14b034.roa
Signing time:             Tue 25 Nov 2025 13:12:23 +0000
ROA not before:           Tue 25 Nov 2025 13:12:23 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f10::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:71:f0:dc:71:e8:ba:2c:44:0e:44:69:b2:92:1d:99:7b:6f:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 13:12:23 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=81bc06d35823387a7ba685dd8b383e2259922da673c46463d15d5ba4186276ba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:e0:7d:f8:7c:9f:10:58:33:8b:6b:b9:6d:
                    84:8b:6d:65:07:4a:e5:97:47:06:0f:48:f4:c6:b8:
                    d4:3d:bb:e3:c2:fd:93:ba:71:a4:98:aa:53:f0:ef:
                    9e:fb:19:be:ef:07:3f:88:9f:78:41:23:c2:8b:dd:
                    e8:e2:51:48:d5:82:75:33:fd:2e:44:8f:fb:3c:83:
                    02:91:3d:32:21:9f:bc:a1:88:03:08:46:0c:61:eb:
                    ce:38:26:18:69:8d:aa:36:d5:24:cf:79:80:cb:af:
                    9c:20:13:a2:2a:e8:21:04:59:93:3d:33:dc:d7:86:
                    13:de:7b:b2:de:10:1f:d9:a5:37:3a:24:0c:e0:21:
                    0b:da:d2:92:3b:a3:be:4e:c5:b3:6b:48:a4:12:cb:
                    05:2a:cd:a6:ec:83:c9:c1:5e:0c:d7:e7:dc:5a:c2:
                    76:d4:01:ab:26:a9:cd:73:9b:92:9f:55:48:4c:51:
                    1d:73:28:ed:d5:0d:e3:9e:13:88:5a:b4:73:1f:ca:
                    ed:b6:41:db:9b:e4:34:71:1e:84:ec:ec:bc:3a:8b:
                    cd:a0:36:58:6e:bb:dd:69:e7:b9:92:24:a8:e0:61:
                    1f:c1:54:80:45:24:af:08:83:7b:23:8e:0c:da:66:
                    75:0f:5a:a2:e2:7a:20:2b:45:d3:00:8f:1b:a6:d3:
                    4f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0B:95:35:17:25:9E:A8:D7:A5:3C:4D:00:AF:A3:3C:97:38:67:73
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6af8d90f-bc28-4e0c-98af-2bc41d14b034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f10::/46

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:eb:67:b3:98:5d:22:10:d1:5a:da:08:bd:7f:a4:25:01:
         f0:be:aa:08:26:8b:cf:03:12:95:e7:ad:68:e6:46:ed:d7:b0:
         37:89:19:91:9c:6d:7c:10:fb:23:00:7d:35:7b:a1:9c:74:87:
         8d:ab:1c:3a:14:a1:ce:25:61:1a:db:b9:61:0a:b4:73:d0:94:
         f8:a6:9d:dc:0f:2a:99:a8:8a:0b:b3:24:a3:60:cd:c4:3a:fa:
         be:6d:27:8a:bf:b6:10:46:1f:bb:94:87:d8:5a:ed:5e:60:17:
         ea:8c:38:3c:53:f1:bb:3f:1e:2b:ee:5f:d6:8a:51:59:ad:e8:
         dd:4c:57:95:2f:5d:6c:b6:1b:72:5f:5f:ec:e7:b5:17:12:98:
         da:1a:cc:05:fb:ef:1d:c4:71:7a:e4:a8:51:5b:1d:cf:dc:a9:
         c7:b8:a2:c3:33:1b:46:ca:f0:b5:ba:1c:7d:4f:7d:82:aa:1c:
         80:88:7b:cb:48:73:a7:69:cd:53:6c:54:52:3e:56:bd:20:a8:
         9c:cf:43:b5:29:46:47:b1:17:0f:4c:55:47:75:24:3d:ed:ad:
         17:a9:ba:71:53:59:d4:e1:2d:59:89:65:64:b6:f9:0d:d8:85:
         6c:cc:86:63:bc:37:fb:b9:86:58:fb:b5:d5:1d:5b:31:34:34:
         21:6e:91:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:51:20 2025 by rpki-client