This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7df1dbb8-da9b-4a53-92ee-39eee338a42d.roa
File:                     7df1dbb8-da9b-4a53-92ee-39eee338a42d.roa (raw, json)
Hash identifier:          n9I15evNCIPt3BBf/GIJ8T5XSumca3+++auATlDRk60=
Subject key identifier:   A4:AE:35:BB:12:7B:C2:FB:85:A8:E2:28:84:54:73:42:0F:22:17:85
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0EA8F06174D3FBE0AED4A1526E8B0CE4A63A352A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7df1dbb8-da9b-4a53-92ee-39eee338a42d.roa
Signing time:             Mon 24 Nov 2025 01:30:15 +0000
ROA not before:           Mon 24 Nov 2025 01:30:15 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29d4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a8:f0:61:74:d3:fb:e0:ae:d4:a1:52:6e:8b:0c:e4:a6:3a:35:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 01:30:15 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=658cd67f168fb2585dae612dec0f845ac107deaa53430dc2682228b82a26c5a4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4d:3c:73:74:66:c7:03:8e:54:9a:12:8a:6a:
                    e1:bf:ef:fa:78:95:08:2e:b0:bd:b8:b9:11:c7:17:
                    47:5d:e0:f0:47:dc:cd:cd:2d:39:75:d2:22:f4:c8:
                    06:a3:c3:db:37:a6:a8:96:08:4d:26:8a:3f:cc:10:
                    c7:67:45:6b:f7:53:16:71:1a:85:f6:23:e9:fc:af:
                    3e:d3:1d:e2:b7:7c:01:61:c0:fd:ce:07:6d:b1:d4:
                    2e:3a:c3:f7:ff:70:27:46:8d:0c:08:1e:49:89:4a:
                    44:2c:56:cf:47:5a:6c:d5:b9:90:4c:c2:83:07:97:
                    8c:aa:98:a2:02:0b:fa:a2:69:af:2f:d0:bf:e7:76:
                    ea:5c:f9:06:73:a5:dd:87:b2:94:fb:dd:db:61:b9:
                    66:97:73:20:e1:9b:b0:d4:89:3c:7e:00:92:4d:84:
                    69:f8:8f:90:9b:1e:40:50:8b:a2:57:c8:95:d5:72:
                    40:a0:e3:32:97:44:c8:9d:98:d9:5d:9a:96:6f:3f:
                    f4:51:b2:60:91:ef:a2:d6:5e:2b:e6:53:b5:2d:ed:
                    45:5d:08:f0:96:8e:70:50:15:5b:ed:0f:d0:ab:a9:
                    5a:38:12:36:05:51:4c:62:c3:29:36:99:09:b6:74:
                    c6:ad:d3:fc:44:5f:0f:55:67:3d:de:1b:65:3c:02:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AE:35:BB:12:7B:C2:FB:85:A8:E2:28:84:54:73:42:0F:22:17:85
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7df1dbb8-da9b-4a53-92ee-39eee338a42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29d4::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:16:b2:1d:5f:40:be:02:96:0b:d6:88:b4:12:d2:ee:0e:3e:
         3a:da:7a:7a:7e:4b:b5:2c:a7:d2:ec:32:38:ed:cf:98:4e:44:
         0b:8e:72:b3:be:93:11:25:51:8a:36:55:fc:cf:e3:af:d0:c5:
         86:1b:d2:e8:ad:56:a4:60:7d:28:ff:f9:c9:7b:bb:3d:b8:85:
         81:0c:dd:42:79:ec:47:90:25:aa:1a:43:21:76:4a:f6:d0:a9:
         10:5d:30:eb:d7:16:59:cb:6e:e5:24:a4:e9:89:6c:93:f5:f9:
         a8:91:24:69:61:5e:d7:73:49:2b:a6:62:6e:d0:41:8f:82:45:
         e1:c1:87:8c:d3:6d:ef:62:5d:b2:89:c3:78:86:bd:5b:db:e9:
         9d:fa:bf:38:4e:bc:4c:c3:38:59:8e:97:7c:4b:b7:b5:89:d3:
         39:21:62:21:d4:30:33:9a:f2:68:8e:7a:12:24:02:88:ef:cd:
         be:97:cb:f7:bf:15:0b:18:55:29:7f:35:c2:05:52:81:3f:18:
         d3:8f:97:30:77:9c:04:7d:cd:c8:85:43:cf:ca:01:58:3a:d5:
         d1:aa:a6:f8:58:5b:c2:cc:3a:44:b7:dc:00:23:f1:2b:21:6d:
         83:7c:17:58:25:fb:26:1f:e3:fc:94:95:23:80:cc:b1:59:0e:
         a1:6a:2c:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:35 2025 by rpki-client