This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7647bb7b-9bb3-47cd-a8e7-403e7e73e90b.roa
File:                     7647bb7b-9bb3-47cd-a8e7-403e7e73e90b.roa (raw, json)
Hash identifier:          llqcZqY0+79qfkEWlH0CBdjL/qUtWzdGSxBbBDsbEAQ=
Subject key identifier:   2B:B5:05:0A:FA:87:DB:78:AA:85:D2:6C:B8:C5:DA:42:9D:33:35:B9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2EC76AB67AAA7FCDC4A4A5B934E6A3FD51B7F7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7647bb7b-9bb3-47cd-a8e7-403e7e73e90b.roa
Signing time:             Tue 25 Nov 2025 04:31:22 +0000
ROA not before:           Tue 25 Nov 2025 04:31:22 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32f6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c7:6a:b6:7a:aa:7f:cd:c4:a4:a5:b9:34:e6:a3:fd:51:b7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:31:22 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=8b6180c109e1001be46ff7e359c355ebde9f194e4a88e30e5b981059a64b5de2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:17:fd:e4:2b:f6:80:7d:33:71:39:6f:de:
                    2c:2f:ae:a7:eb:a3:f9:d8:51:84:db:83:79:14:5d:
                    e8:b4:2a:74:d4:e6:bd:74:c1:57:e6:40:53:f1:d6:
                    aa:93:b1:64:d9:4f:e9:61:a2:e9:d2:b1:0e:78:f0:
                    a8:ed:20:04:ae:5d:3c:50:ad:d2:bd:9d:5e:5a:74:
                    39:71:9d:1d:51:be:2c:ea:73:89:48:fa:b7:00:b7:
                    12:e0:8d:58:88:03:ae:b2:b9:5a:f1:fe:0f:99:a7:
                    14:a2:86:cb:7d:1c:04:84:19:71:41:0b:4d:3e:37:
                    71:e4:13:b7:52:67:03:3a:68:80:e3:8b:24:57:cc:
                    7a:9e:20:68:7c:11:42:5a:a1:52:25:d0:0d:2c:76:
                    0f:cc:5d:d4:72:f2:76:8b:21:02:a9:03:84:55:d3:
                    95:76:78:3e:af:6a:6e:a6:65:47:aa:84:5a:e5:0c:
                    21:23:90:06:fa:45:05:06:65:32:ae:8a:34:53:fd:
                    7b:82:a7:64:53:1b:d2:bb:d8:e5:2b:91:86:de:32:
                    38:c3:4f:66:ef:f8:4c:eb:8e:5f:92:95:fc:3a:69:
                    67:d9:77:c8:e4:6d:f7:11:56:70:49:6d:12:e9:74:
                    2a:24:db:11:b7:e3:f5:e6:b3:b6:5b:db:04:af:81:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:05:0A:FA:87:DB:78:AA:85:D2:6C:B8:C5:DA:42:9D:33:35:B9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7647bb7b-9bb3-47cd-a8e7-403e7e73e90b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32f6::/47

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:4d:73:89:b5:95:33:e8:2b:47:3d:c7:62:c6:da:47:2d:
         2c:fc:82:c8:87:b8:9d:7e:b7:4e:9e:4c:a0:37:8d:87:dc:09:
         96:e7:58:df:ae:92:35:a7:f7:15:00:4a:c1:2c:55:69:ee:2c:
         72:01:22:4f:5b:0b:be:7c:03:22:67:2d:4a:86:46:b1:66:17:
         59:e8:6d:39:a8:61:fa:6d:06:2b:28:dd:95:f4:c7:23:88:82:
         ce:d1:89:7f:d0:19:21:61:77:30:bc:4c:af:4f:44:15:7c:14:
         e5:ac:54:c8:82:3c:dc:4b:da:78:e1:d9:51:18:9d:41:4d:98:
         a4:65:e0:6f:da:f5:45:35:e8:69:02:a5:ba:be:ba:2c:75:8b:
         49:99:34:68:0d:b8:8c:f6:eb:07:f1:f2:0e:99:a9:55:9c:72:
         c6:ac:2c:45:a7:9a:87:fc:a6:9e:9b:c9:a2:fe:77:c2:39:9b:
         b5:b3:1b:06:79:13:ba:9d:81:63:3f:df:9f:3f:72:11:41:bb:
         ae:d4:7e:06:ac:74:b5:99:be:37:b7:26:b1:fd:c8:58:bd:f9:
         d7:2c:90:8c:fc:d2:42:aa:1c:b6:52:de:bc:21:8c:1f:63:ac:
         b4:46:10:ce:10:fc:5a:87:64:fd:3c:4f:82:f8:c6:66:15:34:
         e9:e3:be:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:40 2025 by rpki-client