This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7f166844-3ac3-4fab-99cf-d9f9747ab150.roa
File:                     7f166844-3ac3-4fab-99cf-d9f9747ab150.roa (raw, json)
Hash identifier:          Vf4Jvj//+nLVYE2Xi33mm6nhZATv7db+oXb4jfbfg2E=
Subject key identifier:   A1:21:73:C3:17:28:EF:EC:7A:3B:1B:93:0E:2E:12:FE:C3:15:7B:2A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       39B8A9E019AB6CA9DFAD9D130BBBE8FCA5499A3C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7f166844-3ac3-4fab-99cf-d9f9747ab150.roa
Signing time:             Mon 24 Nov 2025 06:41:40 +0000
ROA not before:           Mon 24 Nov 2025 06:41:40 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1626::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b8:a9:e0:19:ab:6c:a9:df:ad:9d:13:0b:bb:e8:fc:a5:49:9a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 06:41:40 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=03a31c198bc92a58ebf996b8f70601f434401c15e6bc6bb63e4b0e4f04496c2c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:83:6f:a7:3e:c1:97:69:ac:bd:07:14:cf:
                    62:7a:80:e3:9a:b9:ee:cc:5a:35:97:7d:b8:a8:31:
                    d8:36:8b:aa:c5:f2:d8:dc:5e:c7:7a:c5:ab:af:f1:
                    48:7b:b6:d4:b6:62:bf:5c:1b:f3:ce:66:5e:0c:3c:
                    91:ca:5e:17:5a:ea:6f:b5:5c:55:2e:3f:12:59:f2:
                    9a:53:f0:75:47:5c:e9:96:01:05:c9:8a:31:40:c8:
                    c3:3d:68:2d:f2:42:32:24:df:42:90:8d:f7:52:03:
                    0f:51:d7:5f:f3:f3:3c:e5:a8:c6:a3:bb:82:bd:bd:
                    62:1b:20:6d:8c:a2:ee:d0:85:06:94:d7:cb:e0:68:
                    8d:cb:dc:c1:93:b8:42:fb:08:02:cf:1b:c5:48:2d:
                    e8:fa:0a:11:5f:5e:7b:7c:24:64:f7:33:03:7e:44:
                    ac:9f:b6:4c:cb:1f:c1:98:74:b2:31:3c:f2:79:9f:
                    43:28:ed:4b:7c:31:7d:cc:31:1d:c1:8b:88:94:35:
                    05:7d:b7:64:54:58:e3:12:c9:b8:18:31:91:79:20:
                    18:7c:26:ed:27:9c:d5:24:c9:7f:49:11:78:dd:24:
                    ad:a3:ac:3e:a5:cb:bb:9e:a4:f1:f4:3c:49:6b:55:
                    2f:16:da:54:9e:0f:23:93:d6:56:7b:5f:6a:b8:c9:
                    8d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:21:73:C3:17:28:EF:EC:7A:3B:1B:93:0E:2E:12:FE:C3:15:7B:2A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7f166844-3ac3-4fab-99cf-d9f9747ab150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1626::/47

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:2c:8c:7d:19:52:66:96:09:60:d3:01:d5:9d:9f:d9:96:
         3b:27:9d:ac:89:f4:41:79:c7:32:b2:84:26:ba:df:74:84:a5:
         fc:bb:a3:47:21:67:ef:04:99:f2:01:ac:d9:33:aa:a4:c5:17:
         b9:7d:9a:37:9a:74:41:2b:a7:f3:95:6b:50:05:74:06:cd:cd:
         28:a2:5f:bc:fb:98:68:81:a0:e9:ce:6d:87:66:b2:c3:41:6c:
         a2:2a:6e:73:d7:67:bd:3b:ca:29:b4:f0:43:43:be:05:17:a2:
         1a:be:19:91:1f:c6:2b:f9:01:73:f9:c8:97:b2:15:95:58:69:
         80:e5:f3:85:b0:cf:23:b8:93:81:29:a0:00:97:a6:26:2d:80:
         01:66:a6:1d:91:87:31:0c:67:35:df:2b:b5:86:f2:a6:82:f4:
         b1:8f:91:82:2a:18:5d:8d:05:da:89:4d:a2:47:16:8b:5e:40:
         6b:67:66:22:17:c6:d0:00:6b:70:a7:ad:98:d9:d7:83:b1:ce:
         ca:45:cd:1f:b3:c1:bc:83:46:27:e4:a0:6c:8b:1c:14:d7:1d:
         12:90:23:65:76:27:17:9e:6e:45:4d:13:49:65:5c:dc:af:2a:
         db:c6:44:26:37:61:60:78:8b:33:c3:f0:2e:d1:dc:c7:b6:46:
         a5:c6:a0:6c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUObip4BmrbKnfrZ0TC7vo/KVJmjwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDY0MTQwWhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwM2EzMWMxOThiYzkyYTU4ZWJmOTk2YjhmNzA2MDFmNDM0
NDAxYzE1ZTZiYzZiYjYzZTRiMGU0ZjA0NDk2YzJjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtMYNvpz7Bl2msvQcUz2J6gOOaue7MWjWXfbioMdg2i6rF
8tjcXsd6xauv8Uh7ttS2Yr9cG/POZl4MPJHKXhda6m+1XFUuPxJZ8ppT8HVHXOmW
AQXJijFAyMM9aC3yQjIk30KQjfdSAw9R11/z8zzlqMaju4K9vWIbIG2Mou7QhQaU
18vgaI3L3MGTuEL7CALPG8VILej6ChFfXnt8JGT3MwN+RKyftkzLH8GYdLIxPPJ5
n0Mo7Ut8MX3MMR3Bi4iUNQV9t2RUWOMSybgYMZF5IBh8Ju0nnNUkyX9JEXjdJK2j
rD6ly7uepPH0PElrVS8W2lSeDyOT1lZ7X2q4yY23AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUoSFzwxco7+x6OxuTDi4S/sMVeyowHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzdmMTY2ODQ0LTNhYzMtNGZhYi05OWNmLWQ5Zjk3NDdhYjE1MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAFiYwDQYJKoZIhvcNAQELBQADggEBAGt9LIx9GVJmlglg0wHVnZ/Z
ljsnnayJ9EF5xzKyhCa633SEpfy7o0chZ+8EmfIBrNkzqqTFF7l9mjeadEErp/OV
a1AFdAbNzSiiX7z7mGiBoOnObYdmssNBbKIqbnPXZ707yim08ENDvgUXohq+GZEf
xiv5AXP5yJeyFZVYaYDl84WwzyO4k4EpoACXpiYtgAFmph2RhzEMZzXfK7WG8qaC
9LGPkYIqGF2NBdqJTaJHFoteQGtnZiIXxtAAa3CnrZjZ14OxzspFzR+zwbyDRifk
oGyLHBTXHRKQI2V2JxeebkVNE0llXNyvKtvGRCY3YWB4izPD8C7R3Me2RqXGoGw=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:17:03 2025 by rpki-client