This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ebe9aee-61d1-4410-a3fa-54a7289bf71e.roa
File:                     7ebe9aee-61d1-4410-a3fa-54a7289bf71e.roa (raw, json)
Hash identifier:          0HLlqOClNkx2zd5mNje5c/EnVcJUxFbPRP4Tbhb16bw=
Subject key identifier:   92:5B:B7:A2:7A:E5:5B:3B:B0:97:7F:78:88:93:97:AC:91:24:D5:9D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       63B2A0DD2F1DB460346A334E61D9887F83584289
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ebe9aee-61d1-4410-a3fa-54a7289bf71e.roa
Signing time:             Tue 25 Nov 2025 01:40:03 +0000
ROA not before:           Tue 25 Nov 2025 01:40:03 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3888::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b2:a0:dd:2f:1d:b4:60:34:6a:33:4e:61:d9:88:7f:83:58:42:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 01:40:03 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=713f3e9665c2ba3f34e70d29c0a669ec54f5290689bdcfad0371213e09e34e54, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:b3:f2:90:db:bb:7b:73:5c:16:64:b7:51:
                    84:03:0e:29:c9:83:a4:82:4d:e2:d9:75:c3:59:5a:
                    a3:4a:00:56:d3:ca:9b:df:f3:7e:5b:7b:bd:9e:05:
                    6e:96:ab:56:fa:8a:50:99:2c:43:5e:07:b1:c5:1b:
                    37:91:a3:11:21:77:b9:7b:e3:b9:58:1c:9a:77:1d:
                    b5:11:67:ca:70:a6:0f:e0:31:a5:23:80:4e:33:b7:
                    34:ae:7e:f3:08:8e:10:f8:8e:c8:84:dc:a0:d6:3b:
                    cf:f4:2f:72:1b:92:3b:6d:78:95:72:36:a9:b4:63:
                    cd:79:a7:f4:62:da:36:5a:33:5c:0c:3e:dd:1c:c3:
                    7f:40:5d:1b:85:96:8b:19:fe:bf:1f:6c:ad:30:4c:
                    42:0a:f9:eb:29:ec:8d:78:cb:fe:26:d6:37:17:43:
                    f4:b9:6f:f6:87:d9:a3:76:66:e4:2c:04:7c:52:0a:
                    31:4d:b1:47:6e:00:1f:80:49:56:83:e3:3b:9e:19:
                    8e:e7:22:a1:8d:72:ed:6f:fc:11:ed:c3:7a:0e:40:
                    82:a9:8b:71:67:b7:f5:20:ca:cd:10:0d:74:52:50:
                    7b:8d:7d:c8:d1:87:a0:30:af:45:c9:84:90:c6:67:
                    7b:5a:d4:e7:aa:88:02:c3:82:93:7f:cf:0e:74:a9:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5B:B7:A2:7A:E5:5B:3B:B0:97:7F:78:88:93:97:AC:91:24:D5:9D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ebe9aee-61d1-4410-a3fa-54a7289bf71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3888::/46

    Signature Algorithm: sha256WithRSAEncryption
         37:20:cd:7a:47:a8:a5:75:44:3e:0c:c9:a2:27:43:97:fc:19:
         26:e2:2c:ac:66:76:5a:6f:01:5a:9d:5a:57:85:0b:d6:83:2b:
         65:35:78:b9:cf:0b:61:62:a7:15:4a:24:9c:38:2b:4d:e3:b8:
         da:b7:21:d6:19:d2:bb:1d:f7:23:a3:3a:78:53:1f:ad:ee:ed:
         9e:b1:9d:18:74:af:d3:8c:ce:23:b8:80:2b:9d:fc:64:6e:0d:
         d0:30:6a:8c:14:50:d1:3c:f8:b2:08:70:90:43:2c:d0:ac:62:
         e6:21:0c:5a:a5:33:16:13:6b:9f:09:92:de:6b:bc:d8:02:8d:
         67:09:61:79:97:0c:11:d3:11:a5:81:d4:c6:2f:58:9b:f8:29:
         63:c9:0d:9b:f9:fa:06:b3:71:15:50:d1:48:81:4b:85:49:c5:
         53:29:9e:db:3e:a9:70:52:79:19:aa:d4:c6:a5:4a:b9:d5:1d:
         45:91:7b:0c:e1:f6:5d:a5:14:ab:8f:9f:c5:fa:af:7c:15:1a:
         e7:9f:66:74:5c:9d:f0:e2:c7:03:d2:20:88:3f:87:ab:1e:14:
         90:a9:46:13:0f:5c:c1:40:c2:48:0b:18:69:42:cb:9f:0a:5c:
         2a:18:4c:2a:dd:74:6a:03:94:e3:0e:7b:4a:a6:d6:10:44:c8:
         2f:2a:60:88
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUY7Kg3S8dtGA0ajNOYdmIf4NYQokwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDE0MDAzWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MTNmM2U5NjY1YzJiYTNmMzRlNzBkMjljMGE2NjllYzU0
ZjUyOTA2ODliZGNmYWQwMzcxMjEzZTA5ZTM0ZTU0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7sLPykNu7e3NcFmS3UYQDDinJg6SCTeLZdcNZWqNKAFbT
ypvf835be72eBW6Wq1b6ilCZLENeB7HFGzeRoxEhd7l747lYHJp3HbURZ8pwpg/g
MaUjgE4ztzSufvMIjhD4jsiE3KDWO8/0L3IbkjtteJVyNqm0Y815p/Ri2jZaM1wM
Pt0cw39AXRuFlosZ/r8fbK0wTEIK+esp7I14y/4m1jcXQ/S5b/aH2aN2ZuQsBHxS
CjFNsUduAB+ASVaD4zueGY7nIqGNcu1v/BHtw3oOQIKpi3Fnt/Ugys0QDXRSUHuN
fcjRh6Awr0XJhJDGZ3ta1OeqiALDgpN/zw50qRu3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUklu3onrlWzuwl394iJOXrJEk1Z0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzdlYmU5YWVlLTYxZDEtNDQxMC1hM2ZhLTU0YTcyODliZjcxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOIgwDQYJKoZIhvcNAQELBQADggEBADcgzXpHqKV1RD4MyaInQ5f8
GSbiLKxmdlpvAVqdWleFC9aDK2U1eLnPC2FipxVKJJw4K03juNq3IdYZ0rsd9yOj
OnhTH63u7Z6xnRh0r9OMziO4gCud/GRuDdAwaowUUNE8+LIIcJBDLNCsYuYhDFql
MxYTa58Jkt5rvNgCjWcJYXmXDBHTEaWB1MYvWJv4KWPJDZv5+gazcRVQ0UiBS4VJ
xVMpnts+qXBSeRmq1MalSrnVHUWRewzh9l2lFKuPn8X6r3wVGuefZnRcnfDixwPS
IIg/h6seFJCpRhMPXMFAwkgLGGlCy58KXCoYTCrddGoDlOMOe0qm1hBEyC8qYIg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:13 2025 by rpki-client