This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e38e9f9-e5d3-4d3b-bf68-a61471baa851.roa
File:                     7e38e9f9-e5d3-4d3b-bf68-a61471baa851.roa (raw, json)
Hash identifier:          nodCq5vEdE5fgi+xbceWbr/GeonFY1Gzjw7cyyJ+NGY=
Subject key identifier:   40:DA:81:A6:DD:4B:91:49:6A:98:90:94:7F:8B:68:24:A2:1E:AB:14
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       38FAA46AD8A4F814384A4A537C521A9CB783FE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e38e9f9-e5d3-4d3b-bf68-a61471baa851.roa
Signing time:             Tue 25 Nov 2025 16:10:54 +0000
ROA not before:           Tue 25 Nov 2025 16:10:54 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:35d0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fa:a4:6a:d8:a4:f8:14:38:4a:4a:53:7c:52:1a:9c:b7:83:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:10:54 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=31f46530083fececbf5c2c4014d5dbb99269d287a1624c0940d44bf52957df11, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:62:c4:a0:d4:c8:15:ad:c2:f4:44:9a:98:
                    d1:ca:be:c0:47:4d:3d:14:0b:82:f2:28:f9:54:3b:
                    5d:46:74:e0:fc:1a:b1:2f:f2:7e:51:a1:6e:64:09:
                    a0:7b:dc:e4:3d:76:c2:02:9c:5a:c4:a5:7d:e6:24:
                    a0:32:f1:b1:5e:b1:94:d1:3e:c1:f9:5d:a3:43:79:
                    13:52:12:92:1e:00:75:81:18:ae:66:8b:59:3f:76:
                    7b:68:c4:90:c9:92:61:61:bd:82:44:e1:b6:37:48:
                    e0:f5:05:4a:0a:46:08:7d:21:bb:d1:18:c0:93:8d:
                    a2:82:de:b1:b5:d9:37:94:ce:33:c6:6b:a0:99:27:
                    b9:49:69:85:2d:8a:61:cc:dc:5e:49:45:56:c1:4b:
                    b7:45:1a:d2:1b:04:f1:dc:12:32:bb:6b:a0:54:55:
                    8a:ec:82:df:2d:3e:ed:08:95:30:83:54:23:72:ac:
                    12:94:d1:44:4e:8b:0f:92:45:7e:58:aa:e6:da:50:
                    a5:29:59:4b:94:83:7c:a7:1a:8d:e2:bc:5d:e8:35:
                    b3:41:17:8c:74:0c:b3:ff:55:3f:98:3f:64:d3:ac:
                    62:7c:a9:4f:cb:a3:b9:97:01:15:90:d0:ad:25:68:
                    bc:c5:b1:36:6e:30:69:a3:5b:31:25:06:7b:fa:df:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DA:81:A6:DD:4B:91:49:6A:98:90:94:7F:8B:68:24:A2:1E:AB:14
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e38e9f9-e5d3-4d3b-bf68-a61471baa851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:35d0::/47

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:51:a6:e8:1e:56:42:a8:e9:99:59:13:c1:68:7a:e5:e8:
         67:eb:d3:bc:3f:6e:7e:4a:8a:f3:9d:60:48:98:29:ce:cc:52:
         88:b3:56:67:56:98:b8:e2:47:00:33:1c:ff:45:fc:67:0f:cb:
         39:e2:87:2e:88:dc:8d:19:8d:dd:c0:53:66:bd:e5:9a:7d:01:
         de:34:d7:e4:46:57:b0:3a:37:c1:65:f0:05:1c:94:fe:3e:1f:
         fa:93:18:8c:ca:68:60:75:35:07:fe:1c:d9:7d:60:22:e3:2a:
         5f:7e:78:bf:64:97:0f:36:fe:6e:07:92:d9:6c:e1:df:78:ba:
         cb:90:0f:e6:31:f2:3a:7e:2c:c5:4a:cc:b0:ca:28:50:a6:f3:
         50:e9:5d:3c:9a:3e:78:84:68:01:c0:97:ed:ee:d3:bb:1e:3d:
         1f:53:04:fd:45:e4:b1:70:96:36:3f:0a:7e:21:e5:fc:06:05:
         98:dd:c9:08:86:12:15:9a:8a:c2:bb:f8:58:be:14:40:29:c3:
         88:5e:74:d4:81:bc:25:26:a9:23:09:1f:18:ee:e4:9f:e4:4f:
         10:81:6b:7b:54:3d:55:74:5a:1a:1d:62:cd:d8:09:ac:fa:22:
         9f:f1:b1:d8:ac:28:60:7c:9a:e1:e7:85:f7:3a:37:15:e4:fe:
         54:71:53:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:35 2025 by rpki-client