This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7844d18b-4394-444e-af6b-d6d42367d09d.roa
File:                     7844d18b-4394-444e-af6b-d6d42367d09d.roa (raw, json)
Hash identifier:          ybynEKAFOUAf8Xqo+qWRRfptwcwFDYHNywan4Fjayi0=
Subject key identifier:   36:B4:04:6C:3E:75:F1:E2:FF:94:BD:3A:35:EF:B1:44:5C:3B:98:6D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       155EA6AFB11CFF596EF9BBB1477A6129376427DE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7844d18b-4394-444e-af6b-d6d42367d09d.roa
Signing time:             Tue 25 Nov 2025 16:51:12 +0000
ROA not before:           Tue 25 Nov 2025 16:51:12 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3280::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5e:a6:af:b1:1c:ff:59:6e:f9:bb:b1:47:7a:61:29:37:64:27:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:51:12 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=34b1d63f1f97d8e50f3181f5e73d3a1944bbae6e9c12294e73ec787a25f6088c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:e3:cd:82:40:90:cf:28:64:33:0c:39:31:
                    49:df:78:d7:91:f6:4c:a9:6d:d7:4b:cb:fe:21:7e:
                    8c:93:b1:66:89:8c:20:f4:78:b1:05:97:30:15:ce:
                    50:fc:da:21:c7:d4:b0:7e:96:c9:a6:82:3b:78:65:
                    ac:c8:f6:8a:d0:bc:4a:93:fe:a3:d9:a3:22:f9:6e:
                    c2:44:15:0c:2c:f9:2e:e5:2c:20:67:0b:58:f5:1a:
                    07:ec:7f:fa:d0:e3:68:39:a1:18:f5:c7:87:e4:3c:
                    8e:cd:50:dc:a7:dc:60:e0:9b:d5:e3:f9:d0:f8:d3:
                    81:ee:71:f6:f4:6e:b4:b1:53:71:ac:77:2a:4b:fb:
                    f7:8d:08:df:65:ec:7d:2d:ee:4b:cc:9d:d0:61:00:
                    20:12:b0:ab:00:5f:40:43:de:c7:fe:7e:42:f3:83:
                    e7:62:c4:61:31:e0:5c:85:f1:49:3f:f4:d1:58:e1:
                    dc:fd:76:81:fd:53:ab:2f:d8:65:c3:fa:a5:30:95:
                    b0:7d:66:48:48:1d:fd:9e:a1:cf:b1:72:b1:b9:c2:
                    d7:69:9a:26:c7:9f:cc:de:90:ce:0c:c7:3f:7c:e7:
                    0a:ac:ee:7a:64:2b:87:4c:9d:5f:4d:eb:96:72:eb:
                    e9:c1:5e:73:f4:df:07:65:70:c4:30:66:85:b4:be:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B4:04:6C:3E:75:F1:E2:FF:94:BD:3A:35:EF:B1:44:5C:3B:98:6D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7844d18b-4394-444e-af6b-d6d42367d09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3280::/46

    Signature Algorithm: sha256WithRSAEncryption
         91:ec:5d:79:f7:e1:39:b6:6c:7a:f9:e7:39:e1:4c:80:d2:53:
         d6:7b:e5:1f:12:50:a9:4f:51:a6:d2:af:d0:3c:99:c8:5e:1d:
         e7:48:d1:73:ee:d3:8f:a4:7f:ee:08:0f:cd:09:8e:93:e6:ce:
         00:d7:46:19:32:3a:ee:37:dc:cc:42:28:38:aa:da:06:8d:3c:
         2d:89:3b:b2:b5:cf:21:7c:0d:99:de:02:1c:d4:34:2c:11:b9:
         79:8d:7f:b2:ac:fd:46:9f:99:d8:68:84:3f:b2:12:ef:49:09:
         33:21:e3:58:ba:8b:05:34:1c:63:23:e3:da:b2:6b:10:e2:7e:
         79:7f:10:bd:fc:da:75:a9:f9:74:63:b5:e1:db:39:4f:a5:cd:
         a1:42:fd:c6:98:d9:89:fd:db:ee:ba:8c:01:48:ce:14:7a:a3:
         5b:e4:8a:3c:b8:c2:25:88:ce:e9:77:37:c9:c8:9f:58:67:f2:
         1b:cb:94:62:e4:65:92:1f:68:9e:f3:20:80:56:16:29:4d:b9:
         4c:be:a5:57:bb:79:ee:76:71:1c:72:03:65:5a:8f:60:f7:49:
         a9:4e:dd:b4:1c:5d:c3:e7:c9:94:1d:3f:f3:92:36:1b:b9:6a:
         81:a9:1b:60:ac:c9:a0:d6:7c:d7:64:55:00:88:66:bf:a3:44:
         29:64:b5:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:21 2025 by rpki-client