This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6be66f18-6360-463a-8083-5893fc4f4c28.roa
File:                     6be66f18-6360-463a-8083-5893fc4f4c28.roa (raw, json)
Hash identifier:          ALsDONjWNgXXFHl1MAg9s+Mf8i1ykTvVh3pk7ZmLD8A=
Subject key identifier:   EC:A2:92:E1:25:8E:0B:E1:C9:9E:52:FE:D0:13:C3:BC:4B:00:D4:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6EA03101CAC3FCFBBDDDC49D20FA9F7E616A34D0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6be66f18-6360-463a-8083-5893fc4f4c28.roa
Signing time:             Tue 25 Nov 2025 03:30:08 +0000
ROA not before:           Tue 25 Nov 2025 03:30:08 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d74::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a0:31:01:ca:c3:fc:fb:bd:dd:c4:9d:20:fa:9f:7e:61:6a:34:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 03:30:08 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=9fc599b2f6c1280a4faf2cc9c5d9807cdbce7c35d82e13ae3221dbb35353481f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:ae:1e:cd:00:93:2e:05:4c:97:71:d4:51:
                    23:7c:30:e9:e7:8b:03:14:ac:c7:9a:b6:a8:59:c8:
                    3c:dc:e9:17:bd:b7:6a:29:ac:ec:fb:70:64:fd:05:
                    20:72:35:c7:1b:f8:6c:26:20:09:b8:e8:2f:98:61:
                    88:57:a6:1d:07:27:38:f9:0b:c7:d5:f6:83:10:fd:
                    63:2c:28:48:84:a8:74:0b:28:2d:85:f9:8a:52:96:
                    ab:16:e3:37:4f:c7:21:50:c0:67:8e:04:46:41:76:
                    f8:d5:aa:7a:7c:c1:bd:80:c6:2a:88:2f:b1:23:a1:
                    6e:2e:84:4e:16:d9:40:03:7c:37:21:e0:4f:30:23:
                    20:78:b2:25:29:27:8d:cb:09:51:db:45:51:f7:51:
                    ca:eb:ff:9a:09:2b:45:2e:7c:a8:0b:fa:1b:40:34:
                    28:03:44:b3:6b:ea:23:2a:08:6a:e7:3a:f9:d8:50:
                    7a:1c:42:0d:54:d4:86:f8:9f:cf:9a:b5:bb:97:53:
                    6f:0b:26:96:00:23:24:06:6c:53:67:98:b9:2b:01:
                    2d:26:da:cd:92:1c:e2:a1:93:b0:52:7c:64:37:07:
                    c5:1d:18:b9:23:a2:8e:04:8f:95:39:ef:5c:6d:59:
                    95:66:27:57:f9:80:7a:92:47:c2:be:f4:8b:21:ae:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A2:92:E1:25:8E:0B:E1:C9:9E:52:FE:D0:13:C3:BC:4B:00:D4:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6be66f18-6360-463a-8083-5893fc4f4c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d74::/47

    Signature Algorithm: sha256WithRSAEncryption
         b4:c8:88:7e:e8:d0:e4:b3:6c:83:93:24:ef:10:52:6e:3a:63:
         1e:ca:ca:02:24:99:2c:e7:eb:aa:c4:5d:42:27:7c:5c:43:b3:
         6a:ee:c2:c5:df:f5:1b:e5:d1:13:7c:75:26:18:2d:b0:d0:f8:
         4d:3f:14:80:e4:d1:ba:34:46:56:5e:21:dd:59:34:30:68:02:
         28:12:3b:29:c3:55:54:8f:cd:a8:47:aa:4c:75:39:cb:4c:c5:
         90:ba:9d:0e:25:6a:4e:f1:cb:8f:79:a7:6f:f9:b0:67:b1:8c:
         03:08:6f:62:df:1e:46:86:88:91:8c:66:d6:75:f9:7e:6a:11:
         36:f8:66:68:ed:1e:42:30:6d:01:f8:38:d4:94:ec:7b:d0:3d:
         02:9e:d6:ea:b7:6b:25:8a:be:45:70:4f:84:1a:33:7b:6e:43:
         71:bd:0c:7a:57:51:d7:c0:3e:74:65:f7:a9:41:6b:9e:fb:f1:
         76:88:1e:9f:3b:2f:f3:13:8b:2f:18:79:28:b3:de:22:4d:bd:
         fb:b3:a4:0a:25:ab:e5:59:c6:74:ff:8d:98:f7:33:3e:9d:e6:
         2c:29:0d:d7:fc:63:29:a3:3e:15:92:01:c1:2e:00:4b:56:7e:
         eb:cb:d8:2f:7a:a2:d0:0e:93:21:70:ba:76:47:26:71:ca:af:
         9e:c1:71:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:46 2025 by rpki-client