This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b7e651f-882c-4220-94a5-b8d69aa89a1b.roa
File:                     7b7e651f-882c-4220-94a5-b8d69aa89a1b.roa (raw, json)
Hash identifier:          Tj22/xHM5Ehh1MlDS+wxKq+N4K7ONtyC1GxztAElDa4=
Subject key identifier:   38:F2:7C:15:24:E4:BA:B2:55:69:9F:8C:AF:54:59:23:CF:FC:88:02
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       38B63CE7B5D2AE5E38A86771CE91F21B9C642512
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b7e651f-882c-4220-94a5-b8d69aa89a1b.roa
Signing time:             Tue 25 Nov 2025 09:10:52 +0000
ROA not before:           Tue 25 Nov 2025 09:10:52 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1298::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b6:3c:e7:b5:d2:ae:5e:38:a8:67:71:ce:91:f2:1b:9c:64:25:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 09:10:52 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=fcd976121021290390b6ab93beec1b1096f3add4f1725b1f80726fa79edcc0a7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:02:db:55:4b:b8:a2:6e:6a:fc:6f:81:c2:
                    4a:66:cc:ca:da:f9:bf:2f:5e:83:19:19:dc:e8:9d:
                    8e:b4:f5:57:88:71:7a:94:ba:42:5c:0e:2a:7d:c5:
                    64:1f:ac:40:9e:67:b0:d7:9e:12:3b:ca:b8:38:6e:
                    9b:d9:7d:5b:66:b0:3d:ee:99:42:a5:28:53:64:24:
                    7f:a5:fb:5a:57:e9:e1:be:c1:40:ae:ac:04:45:93:
                    36:2e:cf:fa:5b:08:c5:41:1e:a5:90:ff:ee:00:44:
                    31:49:2c:d8:e3:dd:b7:af:82:f3:85:31:ae:ac:bc:
                    70:81:ea:5b:02:f5:92:00:bf:3b:0e:bc:b2:5e:a1:
                    b9:5b:20:31:bf:e7:b6:cf:75:9c:97:5d:ea:72:9f:
                    3b:f2:af:a9:49:51:01:aa:51:80:79:de:80:9f:97:
                    0d:45:49:2b:da:d4:6d:9b:f6:65:11:73:74:43:00:
                    32:a9:7a:06:da:c2:09:41:e9:55:46:3e:1d:c3:9b:
                    43:34:5e:c4:51:56:74:d3:8a:13:74:f6:2d:d9:b9:
                    b8:28:d0:0f:06:74:a3:ff:f7:89:45:8b:7c:c7:54:
                    db:e2:6c:fe:47:43:8e:3c:38:96:44:28:1c:7b:85:
                    18:bd:9c:67:58:62:e5:a6:01:1d:92:78:d0:de:ac:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F2:7C:15:24:E4:BA:B2:55:69:9F:8C:AF:54:59:23:CF:FC:88:02
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b7e651f-882c-4220-94a5-b8d69aa89a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1298::/45

    Signature Algorithm: sha256WithRSAEncryption
         9b:0d:67:23:07:7f:4f:5b:08:fe:a1:cc:0f:dd:47:b0:fe:4c:
         55:29:67:b5:dc:c1:e9:5e:b4:19:a5:9d:86:88:0d:00:b9:d3:
         29:c4:22:26:13:84:4b:6a:72:8e:7a:54:8b:c7:de:35:b2:c0:
         55:e5:48:74:62:51:78:d7:16:cb:a3:d3:e8:5c:2b:9b:4c:15:
         cc:9c:c1:61:e9:37:57:27:74:63:b7:b3:c4:cd:9d:64:43:2d:
         0c:14:d7:0e:22:d6:27:8f:4c:a6:d6:ea:6d:34:d9:a7:c3:e8:
         cb:ca:a0:db:e1:00:ad:f4:70:f6:2c:22:95:98:c5:79:fa:d8:
         d5:6f:45:11:d8:37:56:ec:ce:b6:be:b4:dc:0b:04:5e:cb:dd:
         b7:80:d3:f1:56:18:12:50:54:37:ca:61:d2:66:7f:4f:c9:a1:
         56:62:6c:f4:33:0d:8e:69:f9:70:76:61:9a:0a:db:2f:5f:bd:
         90:7e:21:3f:d6:5c:f5:9e:2b:14:a8:81:0a:b5:d6:a3:1f:f8:
         81:47:7c:23:fc:eb:3e:d6:b2:a8:c2:3f:03:dc:dc:ea:73:f7:
         51:52:13:98:f6:02:5c:c7:a1:a0:85:8d:53:05:88:83:f3:00:
         69:05:d4:e5:2c:6a:be:40:8d:c8:ef:7b:23:90:1f:5e:c9:ec:
         54:8e:53:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:30 2025 by rpki-client