This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78d5bf96-d16b-499e-82f5-a66db4c1c591.roa
File:                     78d5bf96-d16b-499e-82f5-a66db4c1c591.roa (raw, json)
Hash identifier:          nlRY3laWl2UwprDHXg0zFZuZ2H6Y1FUj/BRKoG/TPAk=
Subject key identifier:   C5:EF:CA:1C:04:23:38:BB:1A:56:B1:DC:48:AF:E0:5F:3B:9B:C5:5F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2D1954F35B952BF40CEDDE1C0430CA483026F61C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78d5bf96-d16b-499e-82f5-a66db4c1c591.roa
Signing time:             Mon 24 Nov 2025 04:10:08 +0000
ROA not before:           Mon 24 Nov 2025 04:10:08 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3244::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:19:54:f3:5b:95:2b:f4:0c:ed:de:1c:04:30:ca:48:30:26:f6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:10:08 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=fc4b39f9334088e4c9ed59ce26b33b036d2da3e5a2f26ce7efc567eccb49feb3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:73:93:8c:e3:b4:ee:bc:0f:c3:e8:5d:6d:23:
                    92:4d:d9:07:af:80:b4:65:1f:d2:53:af:c1:10:7b:
                    08:12:55:55:8e:01:94:30:6a:b5:94:ce:aa:3a:80:
                    45:4e:f1:9c:d9:48:60:e8:03:a4:a1:2e:fc:12:c5:
                    9b:56:24:8b:69:c6:46:82:f4:54:10:cb:92:22:80:
                    7e:62:f4:33:2b:3f:5e:1b:0c:0f:e7:35:80:7a:7d:
                    12:d6:05:30:ec:9a:4e:0a:ac:b5:d8:14:7e:d6:cc:
                    0a:30:cc:04:00:f9:20:4f:7d:79:97:b0:59:13:6c:
                    f7:a6:83:8f:d6:cf:ed:2b:0b:f5:ac:73:02:77:86:
                    12:aa:d9:cf:51:71:7e:d9:08:6d:40:8d:64:11:6c:
                    33:a9:ab:29:af:0d:e3:9e:a2:03:c7:13:7f:56:10:
                    da:42:f2:f1:a8:15:f3:08:b7:82:99:35:8e:16:d6:
                    4b:a2:35:13:38:41:5a:61:ac:e7:9f:55:2b:63:62:
                    4b:b9:71:20:bb:e2:fb:e8:7c:9f:f0:20:05:1c:fb:
                    36:c3:f8:50:a2:9a:72:3f:50:94:1c:75:b1:b5:8b:
                    82:a9:2c:86:b9:c2:f2:10:74:5f:6d:9f:c5:cf:22:
                    50:db:b6:f1:88:0f:e3:90:2a:11:58:f2:63:18:25:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EF:CA:1C:04:23:38:BB:1A:56:B1:DC:48:AF:E0:5F:3B:9B:C5:5F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78d5bf96-d16b-499e-82f5-a66db4c1c591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3244::/47

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:11:b5:09:e3:1c:c6:24:f1:ba:82:92:49:b1:fa:d1:d3:
         97:1d:02:9b:42:e2:2b:e8:7c:7a:bb:5e:88:be:07:d8:eb:c9:
         97:09:03:0d:da:e9:f6:6f:d4:c4:6c:d7:5d:73:bd:99:a2:b2:
         d4:02:9c:7a:55:52:22:1e:b5:64:09:b2:40:5f:df:46:36:bf:
         b7:ee:c7:5e:f6:cf:65:9f:cf:07:8b:a1:3f:6e:af:07:37:9d:
         b6:0e:ac:34:65:8a:4d:24:62:9a:b1:c8:a8:34:52:43:60:b2:
         81:d2:ff:e0:a9:f8:e1:a5:f5:fb:96:3e:18:f2:26:78:4d:4e:
         4a:66:ba:e6:b0:a9:8b:33:97:2a:44:2a:d4:87:6b:a4:3a:41:
         c7:67:9a:07:2d:32:ad:0c:b2:73:ef:91:8b:b4:91:ec:8a:2b:
         ab:e1:a2:c5:a1:76:a8:13:b0:b8:76:ab:9d:41:aa:3e:9b:d4:
         f3:65:db:35:c9:97:42:4a:53:ec:f5:b7:bb:a3:57:9a:48:0b:
         40:31:7d:24:09:36:d5:e9:f6:26:ac:f9:92:35:dd:62:33:5d:
         30:44:14:39:3e:0f:35:11:44:83:4b:c4:48:ed:b7:15:a8:f1:
         a9:45:c8:e5:dd:7b:25:c1:75:74:33:88:a2:68:77:38:0c:57:
         e5:d7:b4:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:55 2025 by rpki-client