This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7285d3f5-8754-434c-98de-63fe8c442a27.roa
File:                     7285d3f5-8754-434c-98de-63fe8c442a27.roa (raw, json)
Hash identifier:          zQDJkwVipLbRC8iU0TNKWcki7DDW1M9xOKMkY7mSxcA=
Subject key identifier:   89:57:45:7F:C7:70:63:58:5A:89:C5:5F:B5:E8:91:78:A5:CD:A0:43
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       659DFA9B483D3552E3DD4EE0272C9E7EF311E4EF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7285d3f5-8754-434c-98de-63fe8c442a27.roa
Signing time:             Tue 25 Nov 2025 03:00:10 +0000
ROA not before:           Tue 25 Nov 2025 03:00:10 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3730::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9d:fa:9b:48:3d:35:52:e3:dd:4e:e0:27:2c:9e:7e:f3:11:e4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 03:00:10 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=7ea7f4aa800aa974140af71e3de002e2600a781c37cbea5aa686886b31450612, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:ee:b2:f4:ef:9c:a3:1e:da:16:a1:89:28:
                    dc:72:14:b1:42:eb:d4:4e:a8:01:f8:bc:78:da:2c:
                    ed:37:61:98:a9:27:1f:60:da:f3:3f:c2:dd:fd:64:
                    51:58:9a:5c:45:a6:1e:62:49:8a:f5:31:a4:cb:89:
                    a8:53:41:65:49:16:70:47:dd:de:f9:ce:2c:5d:79:
                    f5:1a:4f:60:27:22:ce:95:91:71:1f:39:77:3f:67:
                    7a:56:20:e6:d4:44:54:85:59:93:18:c4:85:9b:20:
                    8f:dc:7a:c5:57:50:36:44:c7:42:e9:9e:d0:d0:1a:
                    a2:cb:87:f4:9d:47:2e:91:92:f5:39:31:55:18:e5:
                    b5:cc:71:d6:d8:12:48:dc:3f:f0:c6:df:64:18:82:
                    a0:bb:a1:f4:8a:32:b8:6a:df:08:5f:de:79:e0:76:
                    e6:58:07:bd:13:9a:cc:e3:47:6a:dc:16:c0:d8:eb:
                    52:93:16:61:9d:4f:51:da:69:49:0b:34:72:bd:1d:
                    15:d0:cd:80:0d:34:aa:a2:fa:7f:be:6b:03:d8:7a:
                    cd:a8:25:c9:e0:f0:c2:72:fc:9d:ba:00:53:8c:6c:
                    4a:76:51:09:2a:e8:54:ed:5d:3c:db:d2:5d:88:e8:
                    00:b6:55:45:31:98:d8:26:6c:82:77:08:38:4c:25:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:45:7F:C7:70:63:58:5A:89:C5:5F:B5:E8:91:78:A5:CD:A0:43
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7285d3f5-8754-434c-98de-63fe8c442a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3730::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:17:c8:5f:78:f2:d4:0e:71:1e:af:cb:f3:40:f3:0f:fc:
         6a:cf:75:2c:c3:6a:95:0c:5a:b1:1b:5d:89:c3:4e:fc:00:93:
         10:b1:79:c0:df:2d:0c:75:d5:0b:e8:3e:fd:56:cc:e8:79:19:
         c2:3b:f2:31:1b:79:63:60:39:a0:53:85:a4:62:bd:4a:90:8a:
         10:72:c0:3b:cb:da:aa:ee:39:e2:38:a7:3b:9f:41:cc:1b:f6:
         a2:ca:03:a5:6d:bb:61:23:c5:2d:f5:25:35:4d:ab:06:b0:d5:
         88:11:f3:4c:83:98:4c:47:a2:de:ad:7d:1d:c9:ad:d7:33:b1:
         79:ef:6b:cc:48:7c:93:2f:71:87:e3:80:bf:36:09:17:c6:34:
         59:48:e8:e7:bc:e8:41:1f:8b:5d:89:d7:a4:31:c2:40:90:5c:
         38:99:8c:60:90:b6:55:ff:25:0b:4c:76:6d:aa:31:77:12:35:
         30:50:bc:5a:8c:59:25:dd:60:03:dd:14:44:a9:65:ac:8b:4f:
         85:f8:ac:10:33:d5:d1:6e:43:72:a7:a0:b9:7b:c5:02:7d:06:
         5a:21:03:58:aa:2c:a4:33:d2:91:ac:58:c2:ac:a0:76:f3:25:
         16:c7:6d:19:83:31:ca:ae:cd:ee:97:95:df:68:c7:88:d8:7f:
         2a:70:67:6b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZZ36m0g9NVLj3U7gJyyefvMR5O8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDMwMDEwWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZWE3ZjRhYTgwMGFhOTc0MTQwYWY3MWUzZGUwMDJlMjYw
MGE3ODFjMzdjYmVhNWFhNjg2ODg2YjMxNDUwNjEyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEfe6y9O+cox7aFqGJKNxyFLFC69ROqAH4vHjaLO03YZip
Jx9g2vM/wt39ZFFYmlxFph5iSYr1MaTLiahTQWVJFnBH3d75zixdefUaT2AnIs6V
kXEfOXc/Z3pWIObURFSFWZMYxIWbII/cesVXUDZEx0LpntDQGqLLh/SdRy6RkvU5
MVUY5bXMcdbYEkjcP/DG32QYgqC7ofSKMrhq3whf3nngduZYB70TmszjR2rcFsDY
61KTFmGdT1HaaUkLNHK9HRXQzYANNKqi+n++awPYes2oJcng8MJy/J26AFOMbEp2
UQkq6FTtXTzb0l2I6AC2VUUxmNgmbIJ3CDhMJcXxAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUiVdFf8dwY1haicVfteiReKXNoEMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzcyODVkM2Y1LTg3NTQtNDM0Yy05OGRlLTYzZmU4YzQ0MmEyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAANzAwDQYJKoZIhvcNAQELBQADggEBAFl9F8hfePLUDnEer8vzQPMP
/GrPdSzDapUMWrEbXYnDTvwAkxCxecDfLQx11QvoPv1WzOh5GcI78jEbeWNgOaBT
haRivUqQihBywDvL2qruOeI4pzufQcwb9qLKA6Vtu2EjxS31JTVNqwaw1YgR80yD
mExHot6tfR3JrdczsXnva8xIfJMvcYfjgL82CRfGNFlI6Oe86EEfi12J16QxwkCQ
XDiZjGCQtlX/JQtMdm2qMXcSNTBQvFqMWSXdYAPdFESpZayLT4X4rBAz1dFuQ3Kn
oLl7xQJ9BlohA1iqLKQz0pGsWMKsoHbzJRbHbRmDMcquze6Xld9ox4jYfypwZ2s=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:50:41 2025 by rpki-client