This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e43e117-1b4d-4f20-b9a2-c1c54aaf3547.roa
File:                     6e43e117-1b4d-4f20-b9a2-c1c54aaf3547.roa (raw, json)
Hash identifier:          CGfnxnUHk4AbgWbIswX2rqBxEb0CPXKV9/YkD2yiX20=
Subject key identifier:   65:70:AC:76:F0:C7:A2:6D:DE:31:9A:83:F9:F2:50:D8:74:EB:8E:DF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55523D3B7728219DF0876204E521F42E88EF6D95
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e43e117-1b4d-4f20-b9a2-c1c54aaf3547.roa
Signing time:             Tue 25 Nov 2025 03:51:17 +0000
ROA not before:           Tue 25 Nov 2025 03:51:17 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3eb8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:52:3d:3b:77:28:21:9d:f0:87:62:04:e5:21:f4:2e:88:ef:6d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 03:51:17 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a2d6bd21c97af0103de85b47dfa88dd0f33fff015485b676734619b18f724ec3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:f6:bd:e7:63:f8:a2:89:01:7b:4d:5f:a2:
                    85:88:40:b7:14:22:3d:69:47:c2:c9:b7:19:91:f0:
                    18:48:e2:d6:35:17:9d:c5:2e:df:3f:7f:b9:04:40:
                    03:ea:c5:ee:61:3e:c8:ba:07:c7:b9:e0:3a:61:e1:
                    6f:5c:e2:c0:3a:ed:ec:19:1f:8c:fb:f2:25:df:da:
                    99:22:9d:15:73:7d:72:82:97:84:58:14:11:a6:d4:
                    e6:76:d0:18:23:96:c4:70:7d:e2:b0:10:4d:63:ae:
                    1d:9d:e8:1f:2e:34:d2:85:a3:84:62:53:dd:69:a2:
                    59:f1:ed:5e:c5:5a:a5:f6:0f:0d:d8:f3:94:d8:ad:
                    e7:ce:1d:63:09:eb:42:3f:a1:7f:b6:ea:b2:f2:91:
                    08:19:a1:e9:c5:ef:32:51:9b:f2:98:5e:83:3a:a2:
                    3f:26:30:f2:77:34:e3:e3:d9:e4:f0:77:b6:d3:51:
                    b2:0b:c1:55:69:ea:e1:03:5a:83:48:a2:06:c2:3e:
                    5f:a0:c0:3e:45:2c:34:60:64:74:b3:61:2c:69:0d:
                    fe:30:d4:0c:09:11:c6:4a:ab:5f:73:0b:58:e3:d3:
                    20:e1:52:a6:7f:64:dc:db:05:81:32:4f:54:47:cd:
                    1d:a3:25:93:e7:c9:0d:6a:8b:fa:d8:ce:14:df:4a:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:70:AC:76:F0:C7:A2:6D:DE:31:9A:83:F9:F2:50:D8:74:EB:8E:DF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e43e117-1b4d-4f20-b9a2-c1c54aaf3547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3eb8::/47

    Signature Algorithm: sha256WithRSAEncryption
         35:31:13:ed:08:4a:5b:63:3b:f6:bc:f7:b8:10:85:b9:ab:33:
         77:e5:31:3e:c7:4b:51:62:11:1e:24:f3:f8:88:99:09:00:23:
         a5:7b:6b:5b:ad:e7:7f:92:ab:25:9c:d3:af:33:a5:bd:7f:ac:
         6e:3d:98:8a:66:35:d3:8e:fa:ae:e7:9f:d5:f3:62:11:ec:eb:
         81:14:d0:8f:78:df:25:29:9e:ba:67:76:66:2b:9d:2a:3b:72:
         d4:3c:14:a3:48:d9:43:6b:0e:cd:be:25:4c:d0:45:5d:d1:08:
         ca:e2:91:f4:06:d6:0c:3f:59:89:36:dc:0b:40:e4:4a:5a:51:
         24:de:a0:6b:81:11:31:eb:71:70:82:5f:8c:1a:93:17:10:b0:
         1d:02:e3:54:a0:a6:af:d9:26:c8:e5:86:59:53:45:9a:80:26:
         d0:a3:94:69:b5:f3:31:ae:e4:70:8f:8a:28:c6:02:1e:30:d9:
         65:22:d2:e7:e7:92:f8:9a:68:e6:4d:8c:c8:5a:00:28:b4:dd:
         a9:be:60:20:8b:ec:0e:2d:3b:ea:5f:23:5c:94:b1:91:23:21:
         99:e0:98:34:0e:9c:f0:8f:83:0b:db:29:51:b1:11:09:11:59:
         b0:07:52:12:65:9c:02:29:d2:6b:19:f2:b6:cd:a2:c3:dc:b7:
         79:75:c4:f4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVVI9O3coIZ3wh2IE5SH0LojvbZUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDM1MTE3WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMmQ2YmQyMWM5N2FmMDEwM2RlODViNDdkZmE4OGRkMGYz
M2ZmZjAxNTQ4NWI2NzY3MzQ2MTliMThmNzI0ZWMzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDB0Pa952P4ookBe01fooWIQLcUIj1pR8LJtxmR8BhI4tY1
F53FLt8/f7kEQAPqxe5hPsi6B8e54Dph4W9c4sA67ewZH4z78iXf2pkinRVzfXKC
l4RYFBGm1OZ20BgjlsRwfeKwEE1jrh2d6B8uNNKFo4RiU91polnx7V7FWqX2Dw3Y
85TYrefOHWMJ60I/oX+26rLykQgZoenF7zJRm/KYXoM6oj8mMPJ3NOPj2eTwd7bT
UbILwVVp6uEDWoNIogbCPl+gwD5FLDRgZHSzYSxpDf4w1AwJEcZKq19zC1jj0yDh
UqZ/ZNzbBYEyT1RHzR2jJZPnyQ1qi/rYzhTfSkq7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZXCsdvDHom3eMZqD+fJQ2HTrjt8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzZlNDNlMTE3LTFiNGQtNGYyMC1iOWEyLWMxYzU0YWFmMzU0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAPrgwDQYJKoZIhvcNAQELBQADggEBADUxE+0ISltjO/a897gQhbmr
M3flMT7HS1FiER4k8/iImQkAI6V7a1ut53+SqyWc068zpb1/rG49mIpmNdOO+q7n
n9XzYhHs64EU0I943yUpnrpndmYrnSo7ctQ8FKNI2UNrDs2+JUzQRV3RCMrikfQG
1gw/WYk23AtA5EpaUSTeoGuBETHrcXCCX4wakxcQsB0C41Sgpq/ZJsjlhllTRZqA
JtCjlGm18zGu5HCPiijGAh4w2WUi0ufnkviaaOZNjMhaACi03am+YCCL7A4tO+pf
I1yUsZEjIZngmDQOnPCPgwvbKVGxEQkRWbAHUhJlnAIp0msZ8rbNosPct3l1xPQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:35:32 2025 by rpki-client