This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/769a94c8-6e59-49fa-8aff-49e4406b7578.roa
File:                     769a94c8-6e59-49fa-8aff-49e4406b7578.roa (raw, json)
Hash identifier:          Tij0yNtogTiCT5aYnjST4mw3cnPbjkCwwkApg3xxdhw=
Subject key identifier:   21:FB:34:25:45:3F:B2:4A:A9:E2:C1:A4:94:D5:24:B1:28:05:8F:D1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       13680E074280CC8FAE296E5B9C8823F8724F533F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/769a94c8-6e59-49fa-8aff-49e4406b7578.roa
Signing time:             Tue 25 Nov 2025 16:32:07 +0000
ROA not before:           Tue 25 Nov 2025 16:32:07 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:291c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:68:0e:07:42:80:cc:8f:ae:29:6e:5b:9c:88:23:f8:72:4f:53:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:32:07 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=62e66f4c5040d36d64df152076b6b075b94856703c7c67ea09e20f21a050e991, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:87:69:7c:45:4b:72:ae:53:0f:37:39:ad:
                    6f:24:a8:d4:3c:68:c6:e9:75:8a:ff:3b:02:85:9c:
                    d6:1a:12:54:30:3f:23:cc:1a:8a:16:90:71:27:fb:
                    41:70:e3:fb:72:0a:62:51:2b:e3:37:a1:8f:1a:4b:
                    4b:0d:66:f0:22:79:76:9f:5a:4e:9e:c5:db:ad:72:
                    dd:57:68:7b:17:7f:78:49:6c:0a:b5:de:a5:14:69:
                    39:35:75:8b:04:65:aa:8f:9e:01:b8:ba:7f:44:60:
                    1d:97:5b:db:fb:14:f6:82:e0:7f:a8:ac:9c:ca:b6:
                    b2:e3:6e:2f:da:d4:dd:7c:36:ce:66:3d:bc:82:04:
                    f0:f3:17:2d:90:a8:0c:eb:87:a2:de:0f:5c:cb:3f:
                    d5:34:15:f9:39:d3:f9:db:12:8f:e9:b5:14:81:1c:
                    22:11:18:e8:a7:40:19:d5:52:0f:67:8b:b8:b9:e6:
                    0b:e2:dc:9c:8f:81:bc:11:c3:eb:52:02:ef:de:62:
                    d3:cc:54:ef:2f:da:12:3f:78:ef:1c:f1:ce:b4:9c:
                    e5:fe:f7:04:c2:d7:42:83:ee:28:ce:42:48:fa:e0:
                    50:91:75:c9:3a:07:fe:8a:04:a3:2a:27:73:d8:a3:
                    fe:b5:81:c9:36:b4:0c:b2:df:3f:2b:dd:7a:24:e9:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FB:34:25:45:3F:B2:4A:A9:E2:C1:A4:94:D5:24:B1:28:05:8F:D1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/769a94c8-6e59-49fa-8aff-49e4406b7578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:291c::/46

    Signature Algorithm: sha256WithRSAEncryption
         82:c4:9e:a5:50:ce:5b:37:5f:ea:da:92:39:28:28:6d:53:45:
         d9:22:3e:36:8b:5d:a6:06:6a:e1:3e:0a:42:d8:ec:38:10:80:
         29:f4:ac:7d:97:63:58:80:7d:b7:c7:7a:62:62:36:bd:9c:03:
         5e:1e:c3:8d:a8:b4:60:bf:b7:18:1d:53:94:d6:6c:bd:af:17:
         f6:7a:a9:23:a4:41:a6:19:aa:66:2b:b5:2c:43:b4:66:36:91:
         54:55:07:98:78:8a:21:a6:7e:8e:c4:69:b7:26:59:a4:9d:3b:
         55:12:86:bf:78:92:14:1f:0f:15:88:fb:fc:7c:5f:12:3f:36:
         32:3b:4f:a8:30:b2:23:dd:0c:b7:dd:32:22:de:b3:34:52:23:
         41:12:ef:1a:03:8d:65:13:8a:fa:6a:f2:1c:ef:db:63:5b:6a:
         15:2d:61:8c:d4:a7:6b:23:03:64:e9:3a:fa:f1:b1:86:22:51:
         5c:13:98:41:4d:b6:45:c4:0a:ee:f1:a0:03:c8:82:cb:8d:d4:
         e1:f7:70:6a:e7:bd:4c:fa:e9:77:37:d2:c9:33:77:1b:32:40:
         12:1a:a9:6b:6d:68:0c:b7:ed:0f:97:5f:5f:de:91:6e:3d:29:
         fb:e6:27:09:60:1e:3d:bc:a1:98:65:29:0f:9d:e1:08:a4:ef:
         b5:97:07:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:41 2025 by rpki-client