This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bd348ef-4976-42c1-bc78-60615b3e275f.roa
File:                     7bd348ef-4976-42c1-bc78-60615b3e275f.roa (raw, json)
Hash identifier:          cET2QWQPaBujfi3Za/OS7d5GXP40Ffr5RYePeiHJEKI=
Subject key identifier:   50:51:7F:8A:55:1C:22:D8:FB:CF:F8:7B:E7:7F:5F:F6:BE:6B:18:1B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55E5477AAEFC367A99ABFE723B1296C7CE07F977
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bd348ef-4976-42c1-bc78-60615b3e275f.roa
Signing time:             Tue 25 Nov 2025 11:02:12 +0000
ROA not before:           Tue 25 Nov 2025 11:02:12 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b18::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e5:47:7a:ae:fc:36:7a:99:ab:fe:72:3b:12:96:c7:ce:07:f9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 11:02:12 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=71bd88da47f8b063e2ca6e8739a750cdb58a1765e10f040022d3583dc7a03ef1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:37:c5:f8:ee:16:de:09:24:bd:18:1c:3f:
                    ad:65:97:d6:b6:06:d4:87:aa:65:e8:54:6e:65:8d:
                    34:6f:61:1c:b1:da:de:88:7e:c8:5f:85:44:ae:6e:
                    8a:0c:a6:53:f4:ad:61:06:3e:a7:fb:c4:c9:4b:3d:
                    e7:b5:fb:55:64:dc:01:04:b0:bf:de:dc:0b:63:3e:
                    eb:3e:06:00:c2:2b:5a:1c:e3:2b:f5:65:02:73:e2:
                    6f:7b:4d:39:1f:f4:3c:4a:b6:fc:ea:6e:a7:5d:07:
                    e0:ab:17:09:7d:44:c6:aa:41:1e:76:9d:dd:f3:30:
                    4f:57:fe:26:13:ed:f1:2e:c0:9b:70:a7:90:7e:9c:
                    8e:9b:07:79:ce:62:78:10:f6:cd:fb:d6:b3:22:66:
                    78:36:0e:26:f0:69:e4:de:47:8e:10:0b:f6:03:a6:
                    c7:4c:54:fd:86:3a:e5:e9:c1:a8:5e:f8:42:30:12:
                    7c:38:b6:9b:e2:73:aa:14:3d:97:e9:68:7a:33:c4:
                    99:17:17:c6:6a:75:6b:b7:76:ac:08:27:03:fb:03:
                    9f:53:59:2b:ee:78:d2:70:f1:3b:04:c7:c9:ee:c3:
                    a3:1e:81:40:8a:6d:41:d5:25:26:46:65:90:de:1f:
                    40:e4:3b:62:8c:28:b3:21:de:cb:19:c9:20:23:99:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:7F:8A:55:1C:22:D8:FB:CF:F8:7B:E7:7F:5F:F6:BE:6B:18:1B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bd348ef-4976-42c1-bc78-60615b3e275f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b18::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:19:74:1f:8f:ca:1c:b7:66:2a:d2:93:f9:0c:dc:26:01:a7:
         78:22:da:6b:1b:32:f8:29:bc:90:36:3b:96:a9:62:98:91:8c:
         6c:06:c2:92:87:ac:39:27:a8:22:06:16:22:c2:e3:67:11:f6:
         34:b5:00:3c:a9:f5:60:21:72:8e:4c:f8:2e:2a:8e:ed:b5:87:
         75:f7:c5:48:2e:06:ea:94:af:a1:07:2a:03:20:a5:da:62:80:
         a3:f9:52:51:9c:0f:70:4d:02:f9:6f:ea:e6:21:74:b6:b7:2c:
         61:66:54:b4:a5:d0:3a:94:20:1b:98:2f:4b:89:dc:5e:c5:38:
         82:1c:de:90:80:f2:02:a4:86:f4:21:bf:bb:b7:db:9b:73:f5:
         20:09:5d:b8:e1:97:d7:95:67:9e:c9:31:b2:e5:22:27:11:43:
         02:2a:85:d3:72:dd:79:d0:82:d0:b5:80:aa:b4:55:91:fc:81:
         a3:53:6a:65:52:59:05:d5:75:cf:02:b7:4c:43:6f:16:2c:5b:
         b3:50:ed:7a:69:f3:7a:9f:45:80:93:6d:01:db:0f:cb:b5:07:
         5c:df:25:68:c4:e3:88:f3:1c:9f:17:df:d9:3b:12:25:4a:6b:
         a8:e8:2c:79:23:c8:be:3a:8e:b5:06:12:fc:37:f5:96:9c:f7:
         c3:25:e1:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:17:10 2025 by rpki-client