This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6bc36a66-5374-49bc-8b9c-3780c27bc13c.roa
File:                     6bc36a66-5374-49bc-8b9c-3780c27bc13c.roa (raw, json)
Hash identifier:          HOL/V+5nX3vOqL1WARzIgooXbvZQ7ywQo51WkAC8tgw=
Subject key identifier:   43:2A:6A:AC:F8:86:19:10:5F:85:63:4B:DC:32:38:66:57:E0:48:69
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4656B1D1E1F07E3FAEF15D5A6C5A1EA2959B09C9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6bc36a66-5374-49bc-8b9c-3780c27bc13c.roa
Signing time:             Mon 24 Nov 2025 04:22:13 +0000
ROA not before:           Mon 24 Nov 2025 04:22:13 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ffc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:56:b1:d1:e1:f0:7e:3f:ae:f1:5d:5a:6c:5a:1e:a2:95:9b:09:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:22:13 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=914bce99ad744450ea1260e5b8c712edb4e33d4bafd9a3c231bb33dc835b5755, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:3b:1e:56:f0:b1:30:73:6b:bc:21:c8:b1:
                    a2:ab:94:53:b1:33:bd:50:0c:13:5e:44:0c:7b:ba:
                    95:72:3b:a9:a0:6f:2c:04:17:97:ff:e7:ec:8e:c8:
                    2a:ee:fb:17:8a:e6:57:a4:cc:65:08:be:31:b6:8d:
                    e2:94:d0:7e:22:24:e7:f9:84:0e:ed:95:a3:c9:15:
                    be:6f:94:cd:c4:66:ef:25:2c:e7:34:ad:cc:0d:91:
                    e5:d5:e4:5e:5e:15:63:93:60:45:ca:dd:1c:09:75:
                    6d:02:00:ba:7c:54:c0:52:8d:fb:3c:e2:3a:6c:76:
                    0c:2d:63:9d:32:96:1a:ae:e8:09:20:c1:97:22:00:
                    d2:ea:48:80:1c:98:0a:36:88:4f:39:4c:7c:00:dd:
                    57:5e:80:f9:d2:fc:1c:89:5d:f3:94:50:bd:a9:49:
                    c0:45:00:82:cb:e9:4a:1d:80:a7:13:63:45:2c:f0:
                    40:8b:39:58:d4:5b:46:52:11:f2:b2:7d:22:cd:e2:
                    9a:59:9b:bb:39:3f:ed:5f:23:af:06:9d:e5:1a:ae:
                    e4:c8:32:12:d4:79:a8:f9:c8:a9:f1:8e:e5:d7:6e:
                    7a:fd:9d:3b:d4:b7:a0:7f:8b:8a:cf:d3:6a:f9:01:
                    a0:bc:ee:5c:8d:fa:fe:ce:2a:68:99:69:ab:ad:ca:
                    45:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2A:6A:AC:F8:86:19:10:5F:85:63:4B:DC:32:38:66:57:E0:48:69
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6bc36a66-5374-49bc-8b9c-3780c27bc13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ffc::/47

    Signature Algorithm: sha256WithRSAEncryption
         b4:b6:7a:47:ee:a3:1c:fe:da:b8:3d:9f:2b:9b:81:4e:a6:28:
         dd:6d:0c:14:d4:db:bc:be:28:e2:12:de:09:02:79:bf:c7:ef:
         60:d6:2a:88:e5:8b:31:b2:ce:a5:39:ec:0c:8c:38:aa:43:a6:
         58:98:07:ed:d2:93:ff:dc:c9:2d:be:5a:10:53:4e:f4:b4:5b:
         73:92:99:b2:6b:d2:e6:a6:ef:9b:e7:26:f3:d3:c3:70:c0:b7:
         fe:41:48:35:94:80:ab:c4:16:c5:82:73:5d:b4:c6:fa:a3:6d:
         92:75:0b:cc:c7:d5:c2:24:01:4d:cc:79:fd:fe:67:41:c8:e9:
         00:d9:8b:d5:cf:3a:c3:54:59:e7:c5:a7:7e:2f:7b:1d:12:67:
         18:d7:fa:71:f4:79:87:7b:ef:70:e7:e1:a5:e3:cb:89:df:c1:
         14:d2:cf:30:d9:40:04:04:b5:60:06:05:39:2c:f5:5f:f8:4f:
         89:2d:48:79:f0:59:4e:39:3c:e1:13:87:d3:01:61:2b:b9:cb:
         44:5b:2e:87:6e:ee:b5:04:76:2e:41:24:34:f1:8f:fb:e5:e8:
         15:96:05:b2:e9:9f:07:97:94:4d:62:d1:e3:8c:c9:d5:11:87:
         9a:91:b8:e4:f7:72:43:e3:bc:ba:66:1f:7e:e7:15:91:42:d6:
         27:74:84:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:52 2025 by rpki-client