This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/782f40b7-c04d-4f52-88bf-2bad316f7828.roa
File:                     782f40b7-c04d-4f52-88bf-2bad316f7828.roa (raw, json)
Hash identifier:          fYNc0USAKIFQuxfu2Z8d4oe5X8eHGDgej364JMuUH3k=
Subject key identifier:   0F:76:C7:72:81:05:EC:05:CB:AB:A4:83:33:7D:6B:34:93:B0:EA:6D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4C3275DE87ADD7689D9B89E74B25029204900B10
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/782f40b7-c04d-4f52-88bf-2bad316f7828.roa
Signing time:             Tue 25 Nov 2025 09:31:02 +0000
ROA not before:           Tue 25 Nov 2025 09:31:02 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a28::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:32:75:de:87:ad:d7:68:9d:9b:89:e7:4b:25:02:92:04:90:0b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 09:31:02 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=64fb7498e83f85f1465fc345e7205de4008b74c7429a5a50d9ad69612c7e6c9c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:ad:83:5f:a5:a4:97:47:08:d9:aa:90:ec:
                    2c:c1:d5:50:a0:ea:27:db:81:da:b1:c3:01:73:0c:
                    24:1e:5b:ab:d0:70:8c:81:0a:82:b6:02:aa:18:8c:
                    fb:f4:f3:8d:58:30:b9:5d:e4:0b:2d:4a:f8:f8:bd:
                    7d:88:c9:3e:d9:eb:af:13:eb:30:dc:09:a9:80:b0:
                    1f:46:23:13:b9:48:06:6a:2a:4d:17:e4:79:d4:26:
                    f2:d1:5b:1b:95:8f:6e:68:35:53:04:1c:f7:ab:0a:
                    20:50:77:2f:18:a1:3d:af:3f:12:96:87:db:9a:10:
                    77:9c:f2:57:3a:72:8a:03:11:5e:2b:a8:a3:d0:ff:
                    bc:f3:5b:f2:49:84:89:c2:11:bc:73:bd:3c:63:fd:
                    16:80:aa:1d:48:73:d9:b9:9b:64:25:d9:c4:d2:be:
                    59:5d:56:6c:73:c0:cb:a8:87:fc:6f:bc:94:9a:0d:
                    c7:80:53:9f:db:41:a4:11:fb:01:b2:19:61:c2:a6:
                    0c:36:0c:f4:bb:34:94:77:e8:48:16:f1:08:d2:0a:
                    17:18:bf:19:bc:86:93:fe:37:0d:6d:1e:0b:59:99:
                    aa:e8:56:2c:f3:04:86:70:95:86:36:3d:dc:4f:e4:
                    fa:41:ad:ed:97:bc:e6:49:dd:10:d2:ce:98:e9:e6:
                    bb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:C7:72:81:05:EC:05:CB:AB:A4:83:33:7D:6B:34:93:B0:EA:6D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/782f40b7-c04d-4f52-88bf-2bad316f7828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a28::/47

    Signature Algorithm: sha256WithRSAEncryption
         39:83:5d:67:e9:43:76:4b:cb:17:1b:2c:d1:a0:52:41:5d:a4:
         e9:bd:f5:50:a6:ff:34:ab:63:b7:fa:ab:2e:60:a2:53:b0:33:
         3e:b7:b3:59:7c:d2:a6:51:87:9d:0a:db:58:11:71:2c:77:67:
         00:ec:30:ac:46:8d:36:b0:56:18:67:c5:a5:dd:c4:3a:6b:88:
         4c:b6:97:14:c3:f6:d6:94:99:8e:5b:c4:ad:f0:ce:ed:6e:13:
         4e:be:94:6a:07:11:3c:33:59:eb:20:98:8d:2c:75:c6:52:de:
         98:92:3d:e9:cf:fc:ff:66:5d:fe:53:36:59:ba:90:b3:27:4c:
         21:1f:d3:84:b2:cf:9b:a3:c4:0d:91:e6:be:b8:25:fb:de:d4:
         b5:9c:64:1a:8e:d3:83:aa:a2:93:55:09:28:4b:ef:d3:7d:8d:
         62:05:67:08:e8:06:3b:7a:e4:38:77:ed:95:b4:6d:0d:7c:31:
         7f:c0:2b:d4:ed:2a:12:9e:96:49:f1:a8:4b:96:49:3c:6c:57:
         a9:25:dd:2b:8d:7e:d1:56:40:73:df:15:f7:84:ba:f2:db:c0:
         87:28:a5:8f:d0:10:fe:ec:28:d0:d8:19:a2:91:18:79:2d:39:
         ca:5f:be:7a:72:d5:8c:b9:67:89:29:44:7c:f8:ba:8b:ac:b6:
         48:d4:1c:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:44:09 2025 by rpki-client