This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c952698-564d-4b48-844a-8d4730061bb4.roa
File:                     7c952698-564d-4b48-844a-8d4730061bb4.roa (raw, json)
Hash identifier:          T5FQuVV2oHjDocSNYAVNBjQh1mEPcsbN5BZ+wQg4HRY=
Subject key identifier:   22:1C:6F:00:89:80:16:BA:96:3C:3F:01:7E:40:4A:3D:5C:37:A9:3C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1F2E75E546B1BA700C9690DB4AD2A1CADD6381A0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c952698-564d-4b48-844a-8d4730061bb4.roa
Signing time:             Tue 25 Nov 2025 05:41:25 +0000
ROA not before:           Tue 25 Nov 2025 05:41:25 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1b28::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2e:75:e5:46:b1:ba:70:0c:96:90:db:4a:d2:a1:ca:dd:63:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:41:25 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=2f7a5fcff5767e8908a8e10feba3beae504944113780b542fca8ac4c1ed1fd88, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:a6:07:2e:15:e3:3a:dc:65:dc:0a:5c:eb:
                    3c:24:3c:5f:5d:0a:3c:85:13:61:24:53:4c:9a:78:
                    ef:73:ad:0e:58:64:9a:7c:8b:42:f7:28:51:23:ab:
                    f7:ec:43:1a:8f:da:b6:55:9c:2a:78:c8:0c:ec:93:
                    6a:3c:b6:71:65:55:77:a7:bd:fd:37:f7:04:e5:f1:
                    d1:25:90:e3:ec:1d:86:be:5c:54:a2:98:aa:5e:36:
                    13:24:bc:ae:8a:b1:7f:b5:e2:33:e5:c1:92:80:ea:
                    a0:05:83:76:54:28:24:d7:98:cd:df:13:e4:10:bb:
                    c1:fb:89:4b:60:4e:71:64:9f:65:a5:c7:ac:46:33:
                    4e:f7:1d:1d:55:57:c7:be:1d:a7:f3:1d:54:9e:d1:
                    49:93:6c:3c:72:d3:69:09:36:8e:4e:2a:1e:f2:a9:
                    90:a6:d9:b5:08:d9:62:66:82:d0:0f:27:8c:89:7a:
                    3e:62:c5:52:bb:60:ad:92:d5:83:9d:47:74:69:a0:
                    83:d9:a2:0d:c2:e1:ee:70:13:3e:75:eb:e6:2e:a2:
                    28:50:13:e0:1b:40:93:2e:a0:ce:b0:b8:c1:dd:ec:
                    c5:73:bd:2d:fb:4b:6f:fc:d3:d8:de:ca:47:6f:b2:
                    99:d6:e2:f8:ad:73:9f:f3:b2:39:f9:80:9d:45:a8:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1C:6F:00:89:80:16:BA:96:3C:3F:01:7E:40:4A:3D:5C:37:A9:3C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c952698-564d-4b48-844a-8d4730061bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1b28::/45

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:27:be:f4:01:f3:ea:ca:00:1f:70:e6:96:7c:b6:ec:76:
         30:5d:fa:46:6f:11:22:c5:fd:c4:d3:50:74:ee:09:39:f6:5d:
         6b:65:c5:f5:81:4d:28:9d:bd:c3:21:90:a9:cd:e3:29:44:b6:
         5b:d1:4e:ae:1f:7c:92:8d:98:cf:0a:a1:1b:d2:78:d6:8f:75:
         79:7e:f3:de:0a:e1:b5:e4:06:5e:8a:59:cd:6f:c8:50:22:bc:
         20:b1:9e:22:01:9f:46:5c:bc:ae:52:12:b2:ac:a3:0f:cd:3d:
         36:55:00:fd:61:84:0f:4a:d9:c7:ea:d2:e4:9d:7c:64:25:71:
         5f:96:15:67:e0:ff:56:e1:5f:c2:1a:ad:49:b2:13:82:4e:fd:
         a5:e2:a9:d2:0a:f8:00:4f:5f:f5:7b:3d:32:b5:35:25:15:de:
         63:06:39:53:9b:e4:4a:e7:ce:c1:6a:4b:e7:ce:6d:97:bc:c5:
         a6:28:cc:98:4e:7a:b2:ee:71:0b:58:0a:a0:7b:bd:5e:aa:e6:
         f3:35:fc:47:da:f8:b1:d2:b3:b2:12:49:e6:f0:c4:8a:89:7f:
         bf:30:a7:d1:90:99:63:62:62:02:9b:e6:22:e8:b0:e5:02:dd:
         4f:b1:ef:82:ad:5e:0d:89:db:b3:ff:54:b0:86:04:ed:fa:db:
         62:9b:d1:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:02:10 2025 by rpki-client