This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/79749478-2575-4b3d-a327-eb593af63bfe.roa
File:                     79749478-2575-4b3d-a327-eb593af63bfe.roa (raw, json)
Hash identifier:          0SM5OXAv125j/tD9vs750pNfrpEPs9pet1YWATfJaAM=
Subject key identifier:   70:A4:8E:AE:8A:B4:F6:5F:54:76:49:73:A1:B5:34:3D:D7:BE:C8:CC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2B81BF708B1B270C2A13C51F2217C5928BFD9FB7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/79749478-2575-4b3d-a327-eb593af63bfe.roa
Signing time:             Tue 25 Nov 2025 04:52:16 +0000
ROA not before:           Tue 25 Nov 2025 04:52:16 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c88::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:81:bf:70:8b:1b:27:0c:2a:13:c5:1f:22:17:c5:92:8b:fd:9f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:52:16 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=ab621c96ba7dc44949b26d5fdd7991591db324efe289012888ccfc43e0f1930a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:19:58:fc:59:02:f4:5c:3b:4d:e7:3e:ca:
                    5c:64:95:e4:a6:32:e4:fb:cd:72:38:2b:99:e3:65:
                    16:a6:af:2f:0e:5f:37:3f:d2:80:05:4c:5a:37:c4:
                    2e:78:6f:30:fa:52:c9:5e:7e:49:4f:9c:54:b4:02:
                    fc:d3:d4:7c:ef:78:90:72:e9:ca:7b:57:af:26:ee:
                    46:01:1e:bb:9b:38:e7:ae:31:9c:24:9a:ff:eb:e4:
                    72:30:c8:a2:8d:d6:87:6d:29:a6:c5:07:01:d7:b2:
                    da:eb:26:ae:34:b5:2e:c8:88:9a:6b:87:90:30:96:
                    c8:a9:14:75:2a:06:43:b2:33:d2:88:53:fb:ff:77:
                    01:d2:07:a0:77:a9:ac:b1:65:25:49:cc:ec:43:e4:
                    09:a5:8c:c2:dd:53:d3:31:17:8f:27:f9:ed:a4:2c:
                    61:f6:02:ff:c2:58:3a:ab:d4:fd:41:62:2f:0d:a1:
                    26:af:af:15:25:19:1e:da:48:51:c5:76:a8:fc:0c:
                    ff:e6:84:b0:02:f8:27:e4:2f:8c:cb:e5:b4:76:c4:
                    e6:ce:c9:d8:10:4a:d0:75:a2:6c:bf:57:dc:50:b0:
                    80:e6:43:d5:1c:46:43:83:05:0e:60:7d:3c:68:1a:
                    69:ac:66:7e:f3:48:bc:b8:f7:6a:02:65:d5:b4:dc:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A4:8E:AE:8A:B4:F6:5F:54:76:49:73:A1:B5:34:3D:D7:BE:C8:CC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/79749478-2575-4b3d-a327-eb593af63bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c88::/45

    Signature Algorithm: sha256WithRSAEncryption
         01:86:3c:64:0c:4d:5d:1d:01:66:51:74:f1:3f:f7:83:a4:90:
         a7:c3:9b:88:a5:1c:77:b3:86:26:bf:83:22:e7:dc:f0:43:97:
         8d:7d:76:3d:31:9c:76:5c:0c:49:28:45:10:f8:6b:b6:d9:25:
         3e:fe:15:27:95:a7:d8:6f:ef:78:77:ac:e7:8d:ed:2d:6b:d9:
         9e:51:37:69:fc:e5:cf:62:a9:5d:03:24:2c:b4:b3:bb:ed:8c:
         dc:f2:39:85:5f:d1:08:6f:36:28:9d:34:21:da:d9:9d:30:93:
         f1:04:8f:36:44:8d:0e:b1:fa:e8:76:68:40:e4:28:9b:57:29:
         94:39:0d:3c:04:60:ff:3f:ab:b0:25:09:21:18:8c:76:ca:17:
         75:47:59:ee:fe:15:d4:d8:c2:db:c2:12:43:86:8e:38:39:2a:
         fe:20:c9:e3:57:a1:a1:5c:c6:5a:bd:be:c3:aa:c7:6e:d3:dd:
         a8:04:75:bf:1a:62:8a:41:4d:34:e8:d6:bc:88:5f:b1:03:0f:
         59:70:f5:2b:c2:1b:26:ca:46:42:b5:65:64:ec:87:72:c7:c1:
         19:df:93:00:0e:6c:a5:2b:7e:fb:47:90:31:15:a2:ad:0b:dd:
         fe:2a:a6:de:05:f5:d9:36:5a:c4:96:64:db:fb:ba:3d:74:a0:
         78:fe:bf:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:57 2025 by rpki-client