This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7f697c85-32fd-4de3-8d77-7761ce065bda.roa
File:                     7f697c85-32fd-4de3-8d77-7761ce065bda.roa (raw, json)
Hash identifier:          WqDCzkeQ/imwPVGxKkXCfjDtCmDtEIChT9RDGjJOzqc=
Subject key identifier:   EF:0A:D1:DC:2F:58:6E:DF:65:88:78:72:6D:A0:58:E4:D5:41:84:3D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55E06F59C549CCBB9D4F92A24A2DA508198CBE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7f697c85-32fd-4de3-8d77-7761ce065bda.roa
Signing time:             Tue 25 Nov 2025 03:40:08 +0000
ROA not before:           Tue 25 Nov 2025 03:40:08 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e0:6f:59:c5:49:cc:bb:9d:4f:92:a2:4a:2d:a5:08:19:8c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 03:40:08 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=35cab3015d27fa92cee8de34d2ba03f6d3b874eb459cf6fa99cdbb8b49d86934, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:b2:5a:48:73:0f:df:00:e3:cb:1d:1e:f8:
                    ca:aa:c4:20:2d:e5:f1:b3:a1:5f:7d:87:b2:91:1b:
                    21:4b:06:8e:ce:cb:6b:8b:5b:9c:70:f3:f4:2f:b5:
                    0f:47:3d:3c:40:98:78:47:3b:29:e2:dd:5f:3b:2a:
                    db:40:b9:6f:1b:06:77:4c:4d:32:8f:56:80:d3:6b:
                    d4:24:61:e7:3d:cf:7d:29:6c:c2:c0:a1:5f:c6:e2:
                    5a:6b:0f:81:79:b8:2b:ee:24:9d:97:92:0d:0e:fc:
                    32:8f:43:02:5d:f0:ad:00:73:d8:67:54:04:7f:9c:
                    fa:21:21:6c:36:f9:76:c7:eb:73:f3:84:86:cf:9d:
                    9b:52:ce:58:ad:1a:41:c8:f9:0d:73:51:3d:b9:31:
                    11:24:fe:2b:bb:4a:df:a3:20:5b:f4:3e:7e:b5:ae:
                    9b:2c:bd:64:1b:17:e4:6c:a8:b1:3e:15:7f:5e:3d:
                    1b:86:f2:77:1b:25:01:72:d2:a1:14:0a:ee:0f:aa:
                    2f:84:76:f5:fd:38:6f:9e:e7:7d:d8:7f:fb:6c:21:
                    df:69:5b:e0:b5:02:b1:9e:91:ea:dc:6a:d8:35:70:
                    ad:57:52:5f:0a:7a:76:be:bf:20:34:e3:7e:ec:ee:
                    b6:32:4d:6e:65:aa:d8:7a:4e:36:73:8c:44:90:ab:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0A:D1:DC:2F:58:6E:DF:65:88:78:72:6D:A0:58:E4:D5:41:84:3D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7f697c85-32fd-4de3-8d77-7761ce065bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:58:83:51:e4:5a:dd:f5:7c:38:21:30:96:f0:b6:62:45:68:
         9b:fd:e2:3f:79:d7:57:27:6b:1a:e6:f2:91:79:b6:bd:96:64:
         e7:74:10:aa:69:5c:ca:cb:3f:e5:59:86:63:e2:e2:61:b7:a8:
         03:49:b7:58:fb:4b:4a:8d:b5:8f:01:34:e9:5d:aa:75:e2:7a:
         23:08:b1:16:96:d0:4b:dd:ab:27:9e:c9:85:97:ff:88:2f:c6:
         c5:4a:36:c4:15:e2:97:d7:69:a9:c2:58:16:ce:07:52:12:6f:
         23:30:5e:4c:bb:a6:ff:f3:37:db:c7:f2:bc:b6:84:65:84:eb:
         9f:9a:2f:7a:20:29:e1:dc:d8:2f:f2:c2:0c:c9:1e:bf:7f:49:
         56:56:0b:ab:9c:dc:7d:a0:ba:fa:a2:8c:0c:79:a0:1f:79:f7:
         7b:1a:c2:15:b4:e7:76:f4:2f:7b:88:6d:c1:7d:c4:a3:ee:09:
         38:b7:cc:d9:a3:12:3d:c4:03:1e:7c:9d:c7:90:36:b0:e4:0d:
         d5:a3:6b:37:db:fd:24:c3:bc:8b:14:83:fa:7e:55:22:d7:67:
         15:1e:b8:07:0a:a8:8c:c6:83:c8:02:4e:a2:13:92:63:d5:d8:
         0c:4e:98:86:0d:94:40:0b:c0:ed:ce:cf:90:79:0a:2b:66:c4:
         04:15:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:11 2025 by rpki-client