This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/844fd446-d2d6-4466-8b1c-c0db92394daf.roa
File:                     844fd446-d2d6-4466-8b1c-c0db92394daf.roa (raw, json)
Hash identifier:          qeF3L60Gwi2+Wk1iXe0FOOly3iNI0dSP3Drd3u2sm0A=
Subject key identifier:   85:42:6A:D1:FC:E4:92:54:A3:D7:61:52:1A:13:9C:27:0E:D7:44:6E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7A54249021777E7D707215E8EA60DE6AEB57C501
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/844fd446-d2d6-4466-8b1c-c0db92394daf.roa
Signing time:             Tue 25 Nov 2025 04:21:22 +0000
ROA not before:           Tue 25 Nov 2025 04:21:22 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39f0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:54:24:90:21:77:7e:7d:70:72:15:e8:ea:60:de:6a:eb:57:c5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:21:22 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=7f9f33b74f9c3e3e2cdae9d51c8f150aaa07e1719201e8f586e3109c1fc25bfb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:aa:f6:5f:7a:84:12:58:b8:87:53:7d:f6:
                    16:e4:ae:8d:97:7d:b4:1e:3f:8e:b6:54:de:75:3a:
                    f2:eb:a3:21:af:77:0a:53:2a:9f:bb:f2:5c:e0:91:
                    30:f7:6b:b3:45:29:52:00:65:b3:58:bb:ef:df:33:
                    f8:a1:53:6e:7f:66:e8:10:9c:eb:a4:36:16:df:69:
                    e0:70:6d:e3:9c:ee:47:15:0b:b4:2f:f5:64:95:08:
                    38:01:76:0c:97:f3:5f:b3:63:37:7d:c1:66:86:05:
                    6f:58:80:58:57:df:42:1a:65:aa:f5:cc:ee:35:ea:
                    8f:08:3d:96:c4:fd:a4:fc:b5:7a:0a:27:b7:1a:44:
                    e7:c1:68:b8:b3:38:5d:03:66:90:cf:bd:29:c2:0e:
                    2c:5d:03:06:77:d3:c6:27:70:60:13:4c:61:90:34:
                    a2:37:57:35:60:3f:f9:eb:bf:13:0c:be:be:d0:b8:
                    19:0d:c8:16:fc:93:3b:4e:04:b3:4a:99:b2:2d:04:
                    8d:9d:3c:29:06:db:36:2c:54:bc:1c:86:75:f6:4e:
                    31:93:20:9a:66:8a:c9:01:52:95:12:30:55:8a:5f:
                    2c:ea:db:29:4a:e2:ce:04:48:57:90:ca:2a:f3:21:
                    e5:59:08:a9:3f:2c:0a:b8:4a:0b:6f:3e:76:81:fc:
                    71:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:42:6A:D1:FC:E4:92:54:A3:D7:61:52:1A:13:9C:27:0E:D7:44:6E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/844fd446-d2d6-4466-8b1c-c0db92394daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39f0::/45

    Signature Algorithm: sha256WithRSAEncryption
         31:26:b7:04:12:08:94:f9:e1:ca:e3:92:2d:1e:a2:1e:b6:44:
         b0:a1:a3:ee:5e:9d:f5:ef:7c:7c:cf:4c:26:80:57:a5:6d:5f:
         55:8f:3a:b1:a3:55:67:69:8d:71:3b:85:0c:f6:54:69:6b:8c:
         6a:09:6d:3a:cf:bc:36:b1:44:22:e0:da:37:a7:73:3a:b1:f7:
         22:75:7e:9a:21:95:1c:fe:fa:fb:71:2a:7e:1b:1b:91:a3:64:
         dd:48:86:cd:de:47:7d:e5:c7:1c:fc:aa:f4:3a:dc:2f:8f:44:
         46:16:c4:e2:67:ea:db:c0:69:a0:b8:f3:87:3a:85:a6:4a:45:
         da:76:81:f3:60:ef:f4:57:87:ec:60:c9:cf:2c:26:64:77:f6:
         ab:8e:3e:f5:15:96:4b:79:63:1e:78:89:e2:d2:0d:26:02:59:
         1c:18:15:c3:29:43:4b:8c:01:4d:0b:1b:05:0b:bb:1b:2e:0e:
         b9:1a:ad:b1:95:86:91:be:39:1a:86:53:a4:de:d0:14:85:e6:
         fd:75:ca:74:d4:f6:3b:f7:23:84:e4:03:91:29:3c:b5:fe:cd:
         ca:2b:1f:07:65:e9:b4:95:8a:1a:7a:7c:8c:2e:66:99:a8:86:
         f0:bb:38:81:72:48:6c:e0:62:e9:a9:18:2f:4b:54:12:1b:53:
         cc:a0:ae:7f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUelQkkCF3fn1wchXo6mDeautXxQEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDQyMTIyWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZjlmMzNiNzRmOWMzZTNlMmNkYWU5ZDUxYzhmMTUwYWFh
MDdlMTcxOTIwMWU4ZjU4NmUzMTA5YzFmYzI1YmZiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/WKr2X3qEEli4h1N99hbkro2XfbQeP462VN51OvLroyGv
dwpTKp+78lzgkTD3a7NFKVIAZbNYu+/fM/ihU25/ZugQnOukNhbfaeBwbeOc7kcV
C7Qv9WSVCDgBdgyX81+zYzd9wWaGBW9YgFhX30IaZar1zO416o8IPZbE/aT8tXoK
J7caROfBaLizOF0DZpDPvSnCDixdAwZ308YncGATTGGQNKI3VzVgP/nrvxMMvr7Q
uBkNyBb8kztOBLNKmbItBI2dPCkG2zYsVLwchnX2TjGTIJpmiskBUpUSMFWKXyzq
2ylK4s4ESFeQyirzIeVZCKk/LAq4SgtvPnaB/HGLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUhUJq0fzkklSj12FSGhOcJw7XRG4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzg0NGZkNDQ2LWQyZDYtNDQ2Ni04YjFjLWMwZGI5MjM5NGRhZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAOfAwDQYJKoZIhvcNAQELBQADggEBADEmtwQSCJT54crjki0eoh62
RLCho+5enfXvfHzPTCaAV6VtX1WPOrGjVWdpjXE7hQz2VGlrjGoJbTrPvDaxRCLg
2jenczqx9yJ1fpohlRz++vtxKn4bG5GjZN1Ihs3eR33lxxz8qvQ63C+PREYWxOJn
6tvAaaC484c6haZKRdp2gfNg7/RXh+xgyc8sJmR39quOPvUVlkt5Yx54ieLSDSYC
WRwYFcMpQ0uMAU0LGwULuxsuDrkarbGVhpG+ORqGU6Te0BSF5v11ynTU9jv3I4Tk
A5EpPLX+zcorHwdl6bSVihp6fIwuZpmohvC7OIFySGzgYumpGC9LVBIbU8ygrn8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:02 2025 by rpki-client