This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6bc564a6-9b11-47b2-9262-c3d724fb85d4.roa
File:                     6bc564a6-9b11-47b2-9262-c3d724fb85d4.roa (raw, json)
Hash identifier:          3hK4c9dO7jcOtjjAHAeRWsciNt+guW2SBYKQ1l8ICIg=
Subject key identifier:   34:23:92:06:39:00:83:A1:3E:AF:C8:A8:31:8C:38:2B:FA:E1:92:D9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       30C26B81C584D894797B96A28E48B85F26971224
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6bc564a6-9b11-47b2-9262-c3d724fb85d4.roa
Signing time:             Mon 24 Nov 2025 00:32:04 +0000
ROA not before:           Mon 24 Nov 2025 00:32:04 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1442::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c2:6b:81:c5:84:d8:94:79:7b:96:a2:8e:48:b8:5f:26:97:12:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:32:04 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=dd34e2653165b3f0613f12d460949c1e4538e958c19e04a05a6a937f823f4499, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:45:04:41:c9:06:7d:bc:87:0d:60:12:de:
                    0b:51:5e:36:08:e8:10:ac:cf:e4:8a:6b:7f:5d:00:
                    55:6f:3e:1d:50:db:b1:25:e3:17:d1:a1:4b:be:67:
                    10:80:36:c6:c3:8d:bb:52:db:5b:76:57:e0:2d:4e:
                    7b:0d:86:8f:e2:0b:c9:ce:a7:7e:04:ac:43:e9:81:
                    88:a6:04:53:1c:aa:5b:de:39:39:b3:fc:b9:88:6c:
                    d4:99:24:db:05:45:b9:ef:a0:d5:e5:61:e8:ed:06:
                    68:65:74:fc:36:e8:d6:76:a0:b3:62:c3:a9:2d:11:
                    e8:05:e4:38:a6:0d:38:4a:3c:26:4c:75:de:9b:23:
                    58:57:84:6b:32:83:36:06:de:1b:85:cb:eb:8d:eb:
                    e7:bd:ff:30:2a:19:ab:7f:20:a1:09:20:45:7f:63:
                    f4:6a:07:47:05:cc:ee:2a:63:0c:fb:18:12:f4:b9:
                    4f:e0:92:c8:d2:e1:4a:2c:b2:12:17:01:64:ba:f7:
                    40:f2:05:8f:65:c1:b9:60:f3:dc:8a:6a:26:17:82:
                    79:57:bd:7b:4f:50:ef:04:23:71:cf:5b:77:33:09:
                    2a:47:aa:db:d8:45:72:f0:b4:0d:33:7f:bf:ec:33:
                    90:79:bc:e5:bb:fd:8c:3b:46:4e:da:03:a4:05:14:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:92:06:39:00:83:A1:3E:AF:C8:A8:31:8C:38:2B:FA:E1:92:D9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6bc564a6-9b11-47b2-9262-c3d724fb85d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1442::/47

    Signature Algorithm: sha256WithRSAEncryption
         9b:01:9a:7c:62:61:b2:29:c9:8e:74:c8:b7:5c:15:81:10:1f:
         db:d1:6e:38:85:26:b9:dd:8d:2f:5d:7c:8d:a3:17:b5:31:6b:
         0b:72:2e:94:7a:a5:5b:49:cd:22:c4:e1:14:0a:61:30:61:31:
         0f:c1:9d:a8:7c:46:55:28:32:b4:0a:d0:bf:d2:c0:1f:cc:42:
         be:1a:21:91:b7:dc:35:22:9c:a9:81:35:af:9b:f8:c8:76:98:
         ed:e9:5c:63:c9:7e:ee:29:51:be:0a:6d:bb:c0:78:af:68:52:
         12:3f:35:47:59:6f:ac:25:0c:ce:cb:88:8a:90:80:06:50:78:
         2e:54:19:19:54:25:fa:68:77:7b:4c:2b:e4:47:4b:4e:67:2a:
         6b:52:55:9e:95:6b:3f:37:b4:22:9a:6f:58:c5:58:ee:07:a2:
         bc:df:41:d8:78:91:8f:98:af:cc:b3:42:f9:93:6e:4a:f0:92:
         5a:62:d7:b7:16:e0:19:c4:cc:8f:ef:78:9a:5c:9f:c0:55:88:
         03:be:ec:49:25:b1:06:56:21:6c:1e:63:60:7f:f5:df:6d:bd:
         23:e9:11:cd:57:a4:97:e9:e5:5d:b8:2d:1b:75:9c:41:b1:6c:
         74:b5:c4:bd:48:c0:7f:1e:91:db:26:fe:31:90:e9:e7:80:a1:
         6c:6c:91:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:14 2025 by rpki-client