This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78b2dc06-3054-4d5f-87bb-036498603b26.roa
File:                     78b2dc06-3054-4d5f-87bb-036498603b26.roa (raw, json)
Hash identifier:          NwgVUbZA/wT2aD8VnGSWJWKhPugkaodus4JO3H1XVyQ=
Subject key identifier:   DC:B8:32:29:EB:AB:37:4B:6F:EF:11:F6:18:8A:E8:21:13:F2:D8:95
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0588876D3A731335933519E46A2224C961ADAD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78b2dc06-3054-4d5f-87bb-036498603b26.roa
Signing time:             Tue 25 Nov 2025 11:21:55 +0000
ROA not before:           Tue 25 Nov 2025 11:21:55 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3728::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:88:87:6d:3a:73:13:35:93:35:19:e4:6a:22:24:c9:61:ad:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 11:21:55 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=aeb66bfd3cf7704bb3e734ea47b7f10ab6584b859a7e1f576d58049ad9e2593a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:d7:cc:04:61:4f:53:8d:ac:a3:3e:52:42:
                    a6:d8:58:82:3d:01:26:bd:94:22:67:e9:9a:5e:05:
                    2d:1a:e3:08:d8:45:fc:75:1b:ec:c8:7d:76:8f:d9:
                    a4:b2:88:92:d5:da:77:a5:80:3d:a4:f8:81:22:b9:
                    80:18:c5:80:97:bd:61:8d:9d:ab:d5:0b:3b:9d:56:
                    c7:64:e6:e3:04:67:7e:7b:f7:36:cc:00:2e:c2:b0:
                    6a:c3:52:3a:ee:46:7f:a5:e6:a6:99:fa:a6:6b:e0:
                    51:25:32:57:6f:aa:56:d8:28:82:aa:87:8e:27:24:
                    26:41:2c:c0:77:20:79:8e:3e:f4:d1:07:b4:cb:2c:
                    22:aa:49:44:3c:7c:3b:d5:10:b3:12:09:bf:37:69:
                    aa:4e:d8:4c:6f:af:33:65:b5:81:0c:e9:d8:00:50:
                    98:89:14:e1:71:49:b4:fb:1a:be:54:cf:84:5d:15:
                    1b:0c:87:9f:87:68:62:cb:88:ae:53:98:0e:55:b9:
                    34:6d:ba:6c:28:8c:ab:61:43:63:55:e6:b6:36:22:
                    71:90:1f:c3:11:63:14:84:de:27:3b:93:c5:4d:24:
                    8b:65:24:23:6e:a9:e3:92:b0:93:e1:1d:6c:c2:e4:
                    86:9d:c8:18:fe:5f:99:d2:2a:d9:cd:8e:a1:3d:f4:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B8:32:29:EB:AB:37:4B:6F:EF:11:F6:18:8A:E8:21:13:F2:D8:95
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78b2dc06-3054-4d5f-87bb-036498603b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3728::/47

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:17:05:51:e6:3c:9b:d7:84:ba:1d:7f:5b:d5:c4:0c:7f:
         8f:b3:74:ad:36:81:51:22:79:57:a9:8e:b2:99:5f:9e:44:64:
         21:95:98:da:49:db:11:6b:ae:83:01:99:dc:ab:d1:fc:15:77:
         c6:93:55:0a:ea:63:db:d5:2f:f3:be:02:df:21:77:f5:04:60:
         a9:cd:f5:87:4c:e8:f6:e6:c9:da:f9:89:1c:d9:73:8a:ab:6d:
         4b:23:8c:33:4a:63:b6:b6:0f:3f:c1:a8:c0:a4:38:88:f1:66:
         56:eb:70:11:de:d7:12:f1:4b:d1:36:52:66:89:9f:0f:fb:67:
         70:37:99:5b:d8:34:37:96:c5:a5:2a:55:b4:ea:cc:11:c1:f8:
         6e:92:82:18:4b:2b:6c:86:e5:ee:a4:fa:4f:29:ee:9d:d5:06:
         44:d0:e9:84:ef:8e:b3:f6:6a:16:2c:06:8f:d3:6b:ca:ab:d0:
         13:be:4c:63:b0:41:0d:eb:82:ff:bc:72:83:0a:dd:e7:c2:68:
         2e:14:74:c4:9a:01:6a:db:a5:fa:10:d0:ef:e1:f3:59:d1:5d:
         a1:79:82:b2:f2:a4:e5:fd:ae:07:8d:23:c4:15:4a:24:5f:24:
         0f:92:82:0f:15:e2:e8:09:b7:3d:50:2a:83:0b:81:fa:5d:f7:
         33:72:39:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:39 2025 by rpki-client