This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83edb609-aa67-4062-ae18-0eced8887fe4.roa
File:                     83edb609-aa67-4062-ae18-0eced8887fe4.roa (raw, json)
Hash identifier:          bcxQO+QNnqm1NjZ8SyoTR8NORVGL4iP5ndsQX1AetaM=
Subject key identifier:   3A:F5:AF:7A:01:C2:11:04:99:81:30:6B:B3:2F:DC:69:FD:09:6C:24
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E5C04D08435105B9A92942BA51CAAD7B4425143
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83edb609-aa67-4062-ae18-0eced8887fe4.roa
Signing time:             Mon 24 Nov 2025 01:01:25 +0000
ROA not before:           Mon 24 Nov 2025 01:01:25 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1bea::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5c:04:d0:84:35:10:5b:9a:92:94:2b:a5:1c:aa:d7:b4:42:51:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 01:01:25 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=4391691ecfaa88c5dcf2657ffc77f9a60826ffc3e5c70da3e6fc2b3f0200937d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:2e:7f:52:a1:c1:85:80:eb:cf:01:69:57:
                    cb:57:bb:50:16:23:bf:2b:5e:04:49:67:03:43:f4:
                    ed:05:03:c9:c0:90:2c:2e:d0:9b:7b:94:8f:89:a9:
                    fa:3f:0e:6c:68:56:7b:c7:ae:da:96:a1:4c:77:10:
                    a4:05:d1:4b:cb:72:58:af:61:4b:81:a8:27:ba:7d:
                    07:68:f3:22:61:50:db:15:42:6d:ef:81:51:4a:56:
                    26:03:6f:d6:25:71:af:86:e4:3d:40:11:df:67:ed:
                    7b:dd:3b:3c:46:51:9c:d1:85:2a:a8:ce:6b:6d:ac:
                    b6:57:2a:cc:0a:1a:71:8d:59:c1:4a:99:11:95:84:
                    3d:4c:75:e8:f5:61:a5:4e:21:19:31:0c:9d:71:ca:
                    33:b7:cc:a8:e4:d4:51:63:a5:eb:b0:64:ff:34:bf:
                    35:28:e5:6a:b5:90:26:ed:b0:cc:18:b5:8e:df:96:
                    ca:e7:46:24:87:1e:c1:e6:1f:54:11:01:d7:e6:68:
                    6e:90:b7:be:e9:ac:32:90:6f:9d:ea:e5:25:72:46:
                    5a:8b:bd:25:11:84:28:ca:aa:43:b2:2f:8c:b2:0d:
                    b9:ee:0d:42:5f:b1:54:b4:87:44:9a:17:b6:c8:2a:
                    b7:09:bf:56:18:d5:bc:3f:63:0d:d1:a0:89:61:5f:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F5:AF:7A:01:C2:11:04:99:81:30:6B:B3:2F:DC:69:FD:09:6C:24
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83edb609-aa67-4062-ae18-0eced8887fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1bea::/47

    Signature Algorithm: sha256WithRSAEncryption
         09:b1:6c:29:1c:b2:a5:17:08:89:99:82:46:d6:fd:35:81:ba:
         c6:14:57:68:d9:f5:26:16:e0:44:f8:19:75:df:a5:03:28:b1:
         3c:a1:d3:42:a7:37:a0:e6:04:4d:30:2c:b0:be:a0:14:e9:00:
         66:c3:48:a3:84:ee:f1:9c:4f:63:61:a5:01:d3:a0:82:a5:97:
         fd:c0:1c:cc:af:88:66:d8:5e:ef:36:2b:6d:5d:18:e1:c3:47:
         49:73:ca:12:61:f7:2f:d3:d6:75:77:5c:b9:b2:a0:4e:b8:28:
         46:93:a6:af:f9:6f:46:d4:48:dd:f7:9d:a7:19:83:a3:92:4d:
         71:62:94:06:ca:31:3c:7f:9d:80:15:70:5e:cd:d7:56:14:bc:
         b8:f0:03:e9:64:07:ca:8b:3e:b4:17:7c:0b:a2:a7:8c:ea:33:
         1b:ca:11:2f:00:ed:0a:df:77:4a:2c:e4:2a:41:28:3c:b2:68:
         4d:25:ae:22:35:76:26:11:d1:c0:7e:d1:34:20:96:63:71:f1:
         ef:70:fe:49:76:8f:b8:bd:23:1b:d6:02:70:dc:33:f4:be:d9:
         87:de:4d:95:3c:ad:e8:2b:cd:fc:e5:73:a0:6d:35:95:13:af:
         ea:07:04:3a:91:46:51:d0:51:3d:ae:f6:19:3a:65:d0:de:9b:
         27:6c:63:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:50:50 2025 by rpki-client