This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74fa5671-aa1e-4029-8231-1f417907916f.roa
File:                     74fa5671-aa1e-4029-8231-1f417907916f.roa (raw, json)
Hash identifier:          Y2KhD4vI0DMPAthYd60V70CjzrIVVZzIXATIwlvrpSo=
Subject key identifier:   6F:A9:BC:3A:83:F5:F4:C9:29:AB:63:7F:8A:CE:7C:1E:AC:12:73:3E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6E3A73723DC223DB4804BB63BC44AE1F480648E3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74fa5671-aa1e-4029-8231-1f417907916f.roa
Signing time:             Tue 02 Dec 2025 00:50:07 +0000
ROA not before:           Tue 02 Dec 2025 00:50:07 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3a:73:72:3d:c2:23:db:48:04:bb:63:bc:44:ae:1f:48:06:48:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec  2 00:50:07 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=fe785eee481c9f44adf9443a6293863cc21abc289698b64e834c414209a21621, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:87:c8:3a:3a:42:64:0b:a9:ec:3d:e3:06:
                    d7:e9:32:d3:84:43:bd:45:1e:b9:cb:4a:18:44:de:
                    87:5d:3e:f3:eb:cd:b3:c3:45:85:12:11:ce:52:36:
                    d3:b9:14:66:4d:98:dc:04:5f:bd:20:81:38:e8:a8:
                    79:30:72:37:db:32:54:97:3c:7a:81:ab:a4:1f:dc:
                    7e:26:4e:2d:7d:1e:b4:df:a6:2a:a4:2b:18:9f:ad:
                    ff:0c:87:25:07:80:61:aa:2c:f8:e3:dc:53:16:7e:
                    2a:07:47:b1:5c:2d:57:f3:b6:43:13:47:8c:6a:c7:
                    2a:d5:75:6c:18:78:c8:65:7d:80:9e:f3:4c:9b:cd:
                    ce:01:3e:04:d1:fc:9b:b3:83:16:9b:47:19:e6:e2:
                    d3:f4:29:da:2e:70:c6:c7:8f:30:fd:12:a0:9f:43:
                    19:2b:52:23:10:21:7e:8e:ad:3e:f5:aa:22:c5:56:
                    61:40:5a:c6:c4:ba:14:1b:dd:9e:ed:61:72:e4:5d:
                    51:8c:53:06:c9:93:9b:16:e1:b7:c3:c0:bb:f5:98:
                    60:25:ae:bd:1d:12:f9:62:fc:4b:2b:9c:1e:c7:7b:
                    18:77:16:18:1e:69:d5:f1:b4:44:15:71:19:52:1b:
                    bc:f2:25:db:ee:5f:eb:8d:1f:67:cf:6e:f3:bc:9a:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A9:BC:3A:83:F5:F4:C9:29:AB:63:7F:8A:CE:7C:1E:AC:12:73:3E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74fa5671-aa1e-4029-8231-1f417907916f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d3:c3:3f:5f:7b:3f:d9:e3:c3:be:37:a3:f1:96:e9:c7:8c:
         60:6e:c2:b5:bc:05:03:cf:f4:9a:43:b7:f0:26:22:33:43:3f:
         b9:48:89:ce:4e:d7:02:3b:1b:13:68:de:8f:3c:75:a3:7f:a2:
         a0:40:92:3b:4b:c8:1e:64:dd:a8:b1:22:82:b4:44:83:48:41:
         69:eb:d8:fb:5d:ea:23:da:7b:5d:7a:1b:a8:c3:6a:35:98:0f:
         59:69:a3:73:9c:dd:8e:c9:b0:c1:a4:49:8b:f8:62:3d:87:c2:
         f4:f2:0b:2a:84:23:32:8a:68:dd:b6:1b:db:da:f3:3f:a3:dd:
         c0:e9:0c:06:17:bf:ab:1d:8b:ce:fa:b9:10:48:a1:07:8c:ba:
         6a:0a:46:9d:b1:ba:b9:58:87:bb:8c:d6:3a:3e:7b:65:e2:1a:
         d8:5b:99:7d:0a:d6:4d:0b:7f:3e:36:ed:9b:d7:d2:88:68:c2:
         18:f7:d5:c6:d5:42:3f:02:ef:b7:67:d6:76:f7:7f:9d:8e:9e:
         a7:7e:6b:e0:77:69:47:65:68:4f:be:02:78:72:38:31:09:e4:
         f6:56:55:83:db:cf:6d:e3:0c:a9:94:bf:87:39:63:fc:b3:ca:
         6a:36:f5:b1:a8:87:28:4b:3d:12:14:d3:a2:2f:47:ce:5e:de:
         89:39:be:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:08:29 2025 by rpki-client