This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6dc04ec3-b585-402e-80d8-843eed6a9cdb.roa
File:                     6dc04ec3-b585-402e-80d8-843eed6a9cdb.roa (raw, json)
Hash identifier:          RYVmtGxkLWH+jFrph37eRLgBV34OJaDTIH+DFbCjFbU=
Subject key identifier:   65:09:67:40:A6:F4:C6:4C:B9:C5:65:7C:BA:DB:44:94:E6:1A:48:EF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       42A57A81F91B99224A49D2CC0EC785FADD0F32B0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6dc04ec3-b585-402e-80d8-843eed6a9cdb.roa
Signing time:             Mon 24 Nov 2025 03:40:05 +0000
ROA not before:           Mon 24 Nov 2025 03:40:05 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1dde::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a5:7a:81:f9:1b:99:22:4a:49:d2:cc:0e:c7:85:fa:dd:0f:32:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:40:05 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=88d69de2af911d0e66c18b10e58ee1d5a6ae3cb0dd02e1ad4c91ba9a5441b691, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:ba:b6:b1:4b:e4:fc:c9:f1:60:25:40:cf:
                    27:6a:88:9c:27:b4:97:78:e7:e1:80:c9:25:3b:28:
                    fb:be:b5:a6:aa:8d:5c:d7:e4:84:f4:75:dd:87:36:
                    8a:b7:88:51:42:7a:74:63:77:3c:8f:68:d5:20:5a:
                    57:94:99:8a:4b:92:24:25:79:ff:e8:9c:ad:c3:c2:
                    bf:5d:55:4a:48:57:1c:32:6e:b9:ad:17:8e:59:0b:
                    72:f4:43:16:a2:68:91:2c:75:be:45:07:0d:2f:56:
                    c9:57:1c:90:c7:a9:a6:0b:26:2d:15:6f:e6:67:09:
                    29:4c:74:da:ef:fc:45:66:30:4d:6a:4d:d4:f6:39:
                    79:fe:ce:54:be:b5:ca:5f:22:75:d4:d3:87:f6:71:
                    8a:4f:4f:cd:02:0f:b6:72:74:95:ec:ca:f8:4c:1a:
                    75:3f:38:f9:fa:d9:8b:41:27:7b:d4:86:8f:65:8b:
                    84:e4:f0:04:e9:37:a4:40:1c:94:d8:b1:aa:f4:cd:
                    58:9c:87:5c:52:76:a8:dc:ca:e8:dd:b2:0f:64:4a:
                    fd:a7:f5:45:01:14:47:59:c4:3f:3b:6f:05:0c:61:
                    9b:ea:ca:82:28:98:8c:79:a5:0a:33:f4:7a:33:d1:
                    02:31:7e:99:84:29:71:21:16:9a:1a:29:be:9f:39:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:09:67:40:A6:F4:C6:4C:B9:C5:65:7C:BA:DB:44:94:E6:1A:48:EF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6dc04ec3-b585-402e-80d8-843eed6a9cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1dde::/47

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:12:8e:9e:aa:b7:3c:5a:77:9d:88:52:95:ed:c5:31:86:
         ad:a2:4e:78:2b:ee:9e:0b:41:d3:e4:da:1a:ff:72:6f:52:49:
         0a:96:93:92:dd:bc:ae:8a:8d:0b:5a:4d:6f:23:25:f6:c9:50:
         cb:c9:96:8b:dc:d1:4d:f3:44:f6:99:27:eb:b0:f8:37:70:79:
         84:87:ff:68:7a:d6:3a:8a:c7:2e:47:c0:c7:d0:a0:02:e7:c6:
         03:8f:d3:2c:f1:3b:a9:f6:b7:d5:e8:64:6a:2d:31:70:e9:50:
         68:68:c1:99:dd:ef:c6:73:55:e8:8f:be:46:fc:2b:db:76:d3:
         2c:ae:cf:f6:04:32:7d:d7:fe:83:ac:17:30:25:19:8d:43:2b:
         b7:a7:d5:43:21:f0:13:e1:9a:02:ac:7e:57:b9:dc:5e:ad:32:
         19:7b:e7:ba:c4:3a:c5:dd:4c:a0:3c:18:83:02:2b:a2:3e:03:
         b1:08:97:ae:36:5d:f5:ac:73:32:aa:9d:c4:10:88:0b:95:70:
         86:f4:a9:5e:22:1b:4c:6f:66:cc:39:eb:7f:4d:a1:6f:60:20:
         f9:5f:4d:22:df:a4:c5:b7:9d:58:0d:79:be:95:fb:b0:b2:fe:
         07:32:33:04:2c:dd:a6:6d:f7:cb:f8:e6:6c:3f:bf:4b:ae:e0:
         7d:de:61:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:50:41 2025 by rpki-client