This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72278123-d487-4089-8563-ccc7b421e5d5.roa
File:                     72278123-d487-4089-8563-ccc7b421e5d5.roa (raw, json)
Hash identifier:          Gh304MkMY+XG0YgWAUbtPT7QnFOjBb2o/vqd2OOq19Q=
Subject key identifier:   1C:57:19:C4:02:00:29:C5:63:51:A7:6C:DF:7A:46:86:AD:87:AD:E3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5AD3515321C747433287B30BD0DDB2865052207A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72278123-d487-4089-8563-ccc7b421e5d5.roa
Signing time:             Mon 24 Nov 2025 02:10:13 +0000
ROA not before:           Mon 24 Nov 2025 02:10:13 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f1e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d3:51:53:21:c7:47:43:32:87:b3:0b:d0:dd:b2:86:50:52:20:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:10:13 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=7e741ae88477282a57de0ee6d8fac3b1c33fb2543d9b5aacbee9bb4f35faffce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:92:65:27:1f:13:11:4d:d0:2f:f5:c3:f9:
                    18:14:3c:8b:a6:ff:62:ab:ac:38:7d:a3:67:64:10:
                    d1:d6:f2:06:83:e1:66:93:07:ed:2f:10:65:fc:79:
                    01:b2:4f:83:eb:5a:0f:6a:93:a2:fd:1f:f8:83:c5:
                    be:e4:57:4f:74:79:98:2e:17:ea:07:dc:2b:0c:53:
                    1d:e4:2f:69:4d:74:b4:4f:56:2b:6c:14:9e:24:9b:
                    d1:55:03:4a:cb:ee:30:e2:16:c5:e0:46:b4:82:7a:
                    d6:48:db:2e:58:49:9c:42:79:a7:a6:5a:f0:e4:98:
                    f5:af:ba:91:65:0f:fc:78:62:55:2a:7d:c5:de:ed:
                    f0:36:a6:19:62:b2:a1:61:9d:4e:96:66:fc:d4:2f:
                    5a:dd:0e:1c:a3:f6:4a:6d:64:de:f5:9e:61:bd:22:
                    b2:93:61:6b:3f:5f:0d:8e:da:74:5f:37:af:23:d2:
                    aa:50:50:c9:e3:75:b7:ac:ae:af:db:a1:68:81:ce:
                    ab:9d:5b:fb:27:51:08:8e:bb:22:be:a4:6c:da:dc:
                    3b:ce:b7:22:af:98:f4:fd:3f:ce:a6:c4:a0:a9:e7:
                    81:03:f6:cf:fa:d0:f5:8d:c2:89:1a:f3:06:82:2c:
                    d9:b1:f5:44:58:a6:ad:50:62:4d:5e:cd:28:26:a3:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:57:19:C4:02:00:29:C5:63:51:A7:6C:DF:7A:46:86:AD:87:AD:E3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72278123-d487-4089-8563-ccc7b421e5d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f1e::/47

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:e5:e7:4e:1d:56:5b:6b:01:54:ce:ae:43:9b:73:f0:0c:
         45:51:70:1c:f6:98:0b:97:89:36:c9:3a:fa:66:2c:ad:87:5a:
         b5:ae:49:7e:59:89:b1:d9:f4:3f:15:4a:78:d9:ef:8f:12:c7:
         b0:fc:86:e9:53:56:be:90:3d:ac:21:e7:eb:de:51:88:70:af:
         65:cd:38:51:eb:a2:48:37:0e:fb:e7:40:a9:2c:f8:6a:26:e1:
         b6:44:2b:64:08:53:bf:ac:36:88:2c:78:96:55:03:46:69:6d:
         ae:69:e2:67:55:73:d8:7f:d6:43:bd:61:fa:f7:cf:6d:ea:b6:
         da:93:b2:b7:ff:0b:f9:9d:54:1d:72:71:4c:ba:81:25:7c:7c:
         da:f6:d5:cc:02:16:38:4c:f7:bb:01:98:a1:4e:fa:bd:df:66:
         55:19:3e:f8:e2:83:ad:c4:77:a6:a3:bf:1f:c3:bb:40:8e:ef:
         7f:82:50:9c:26:bb:11:43:05:02:3a:d0:6d:96:f0:bd:29:3f:
         e3:0e:ec:80:cb:9b:32:ce:de:55:b4:a5:15:95:e9:4a:f2:24:
         32:d5:6e:b5:e9:e1:da:d0:b6:05:34:3b:c8:25:3f:65:fe:75:
         1e:95:43:47:0b:bd:f9:c3:fc:b9:f9:00:fd:8d:6f:5a:7b:fa:
         7a:0a:d5:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:15:12 2025 by rpki-client