This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73168e4b-02c4-436e-9879-21e1cce33692.roa
File:                     73168e4b-02c4-436e-9879-21e1cce33692.roa (raw, json)
Hash identifier:          FNygM/B89MZIu+9Y2RfQ2/wFE2DokmP0mLVg+AAbjWU=
Subject key identifier:   BD:27:A1:8F:5A:78:8C:16:E4:FA:E7:7C:33:2B:BE:63:E3:E2:9C:10
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       70A2D292EDC54486204F92B04D38624B6C91C6DE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73168e4b-02c4-436e-9879-21e1cce33692.roa
Signing time:             Tue 25 Nov 2025 04:51:41 +0000
ROA not before:           Tue 25 Nov 2025 04:51:41 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a34::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a2:d2:92:ed:c5:44:86:20:4f:92:b0:4d:38:62:4b:6c:91:c6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:51:41 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=08e90afcdf2f450a24e8dcca8156a4d3b5c3b03664cbcc592c102cdb109928ad, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d7:1c:9e:c9:ae:ee:58:f0:18:a9:0c:62:26:
                    4a:b6:94:c9:49:3e:3a:d6:b3:7b:ec:78:f3:cc:ca:
                    2c:3c:a1:46:f9:fb:ea:c0:39:cd:6e:cd:f1:b1:6f:
                    e2:32:98:99:aa:b7:6f:7c:1c:66:fd:d7:d9:00:02:
                    96:f9:03:b5:c6:b1:f8:43:9c:7c:85:5b:76:e8:81:
                    28:3e:c5:99:f1:70:e6:8a:25:bd:f4:63:e8:df:66:
                    d6:8b:d2:6f:25:11:d7:03:0e:47:2a:49:1b:64:0a:
                    25:41:db:91:18:27:a7:e9:11:8e:b2:8e:9c:cf:88:
                    4f:cb:84:62:bb:ad:85:73:6c:eb:e5:d3:83:47:51:
                    3e:4c:9f:6f:72:a1:49:bc:42:0a:cc:45:bd:63:1d:
                    8c:76:92:ac:79:d3:bb:b1:ed:62:76:d8:06:98:80:
                    6e:20:70:21:da:92:b9:79:f9:bc:26:9d:e5:72:ab:
                    d6:91:de:7e:b9:33:5e:ad:f1:5f:36:ba:d4:8e:82:
                    9c:ca:0f:e7:83:21:93:71:72:44:d7:73:86:9a:78:
                    20:a8:a7:b3:18:2d:c4:05:85:6f:1f:14:2d:15:4e:
                    14:22:8c:63:ab:ae:13:36:bd:56:e5:29:a9:14:82:
                    5a:54:34:25:de:9e:9c:a9:b3:16:51:2d:ee:6e:64:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:A1:8F:5A:78:8C:16:E4:FA:E7:7C:33:2B:BE:63:E3:E2:9C:10
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73168e4b-02c4-436e-9879-21e1cce33692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a34::/46

    Signature Algorithm: sha256WithRSAEncryption
         12:8e:ef:d9:05:ae:12:fb:f7:d9:e0:5f:02:49:82:b4:bc:fb:
         f3:d5:87:eb:14:08:85:e4:91:00:11:fd:e7:07:68:c1:ea:d4:
         e1:7c:4a:4e:73:d2:bc:84:07:fe:87:0a:1d:d5:eb:a6:06:06:
         32:8b:54:41:74:6f:0b:ba:7a:13:72:0a:86:42:98:77:2d:19:
         29:9f:6a:a6:94:58:7e:f0:e4:ef:24:2f:2a:b9:30:b7:f2:c2:
         b7:c1:b1:ac:26:22:eb:7f:60:eb:d0:bd:df:3a:e6:f3:69:a9:
         34:12:18:12:87:32:92:ab:f2:91:3e:56:da:b8:91:8b:e7:c0:
         08:82:8b:cd:c3:a9:45:ef:c2:40:c3:cd:a7:6a:a9:39:ef:a9:
         56:30:26:48:ab:1e:6b:2b:9e:ee:df:6c:78:4b:83:8f:66:ce:
         b0:4e:ea:e5:5b:ba:e0:37:5b:eb:4b:38:e9:19:07:a8:a4:9e:
         03:65:9c:69:03:27:64:42:49:bf:db:f3:cc:c8:ce:1f:0e:e1:
         f1:7a:75:20:af:28:90:37:9f:d7:43:95:bf:3c:a6:c5:09:39:
         7e:12:75:3f:99:23:42:81:a3:46:be:50:ec:e7:9a:34:29:7c:
         7b:25:77:4c:d8:46:3c:08:92:09:b5:6b:1f:e3:de:1a:96:79:
         92:a2:51:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:00 2025 by rpki-client