This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70e109a5-a824-41d9-b793-b484e4a5d4b0.roa
File:                     70e109a5-a824-41d9-b793-b484e4a5d4b0.roa (raw, json)
Hash identifier:          cf6Gsc1Zs/1d3Jz363zlgi6LQeRXpsprBDFwxNFgqdk=
Subject key identifier:   FD:B8:C4:F6:DD:83:86:92:72:19:CC:7D:19:A6:B8:5D:9B:A3:AD:A2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17A1EEFFB189751E18C771152EE0AAFBC159FD20
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70e109a5-a824-41d9-b793-b484e4a5d4b0.roa
Signing time:             Tue 25 Nov 2025 11:21:51 +0000
ROA not before:           Tue 25 Nov 2025 11:21:51 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3620::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a1:ee:ff:b1:89:75:1e:18:c7:71:15:2e:e0:aa:fb:c1:59:fd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 11:21:51 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b93512523eb674a0d6acdde15e42090e67f25b178699af09fcd151ae289c2197, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:94:c1:24:46:16:15:64:75:58:7d:8d:cc:
                    0c:e2:32:af:f7:42:6c:01:66:8b:a3:df:bc:48:f4:
                    8e:82:ab:ac:7c:5f:eb:79:a3:e6:5a:9b:37:38:f6:
                    d3:35:9a:f1:6e:6a:73:35:23:2c:d0:d5:fb:cb:c2:
                    63:27:90:27:88:c0:e6:46:ea:8a:4d:f1:44:91:24:
                    b1:31:fd:68:55:2c:60:87:54:cd:67:8d:a9:ae:6f:
                    8d:f9:c3:ac:e7:c0:f9:29:1a:e6:b6:3f:2e:af:74:
                    9f:8c:a6:b5:b1:93:07:bb:5f:7f:db:2d:c9:97:0e:
                    15:ba:1e:9d:c0:74:02:08:d8:38:a2:52:ec:b4:da:
                    b5:e4:61:25:ae:cd:c0:7b:ce:60:06:aa:44:41:99:
                    51:51:38:bc:48:d1:3e:c8:f6:61:ab:75:c7:76:93:
                    21:37:4d:93:36:3a:52:51:04:8e:55:2a:cb:5c:e5:
                    b5:19:6e:bb:cc:ed:8e:90:df:c1:74:ef:3a:da:27:
                    9c:ba:eb:b4:7e:c1:50:b7:eb:02:c7:74:a3:2e:62:
                    3e:d1:95:e9:01:1b:ab:6c:f5:19:50:80:1d:7b:72:
                    d9:9d:74:4f:54:29:b5:da:63:52:f1:23:a5:ab:8b:
                    36:d2:2f:4c:ab:d0:0c:a9:5f:61:88:8a:a3:f1:8d:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B8:C4:F6:DD:83:86:92:72:19:CC:7D:19:A6:B8:5D:9B:A3:AD:A2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70e109a5-a824-41d9-b793-b484e4a5d4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3620::/43

    Signature Algorithm: sha256WithRSAEncryption
         88:97:c2:db:ee:84:86:09:b7:6f:63:8c:76:70:e9:e9:7e:35:
         8c:b8:72:c1:30:ae:ee:1d:19:28:33:9c:d1:88:28:bf:5f:89:
         e2:df:0e:53:78:82:f2:1c:7d:b2:13:5b:d3:ee:a8:c9:56:f6:
         80:a5:7d:5d:62:6e:79:fa:e4:cc:f0:56:41:a0:10:15:c5:b5:
         a4:22:6a:11:56:85:c7:c6:6d:a2:5f:d1:e4:78:ff:95:ef:5f:
         a4:2d:6b:b0:f0:48:90:30:de:d3:8e:5b:50:ea:ee:1e:f5:7f:
         48:11:0b:47:dd:ef:47:03:d0:34:c9:1c:f3:f1:8f:c4:a7:64:
         7c:db:36:0d:b4:5f:a5:fe:87:78:2b:4c:18:3d:74:29:ec:d0:
         b1:27:20:15:18:fc:4b:9c:b0:41:5c:58:eb:6c:27:42:60:f7:
         48:ef:04:1d:f5:dc:8a:da:8f:ad:75:cc:07:59:31:ed:51:75:
         60:75:1c:a7:52:e8:c9:ae:f9:bd:18:28:79:16:86:84:92:88:
         09:61:5c:ea:62:78:03:76:b7:95:e9:db:b4:3a:88:23:be:93:
         fb:ec:67:50:70:ff:ef:78:86:48:e5:63:ab:87:0e:9f:68:b1:
         b7:99:7d:ab:7e:db:d1:e3:cf:86:42:64:c1:71:28:6e:17:7a:
         4a:0a:87:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:02 2025 by rpki-client