This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/85c2ad4c-b131-4e1a-8706-33d5faaa26cd.roa
File:                     85c2ad4c-b131-4e1a-8706-33d5faaa26cd.roa (raw, json)
Hash identifier:          5hqxVcixjqbQg/XHOLqbUrsYTsKxpZ5KuTMEt/8psy4=
Subject key identifier:   4D:E2:BD:CF:2E:27:D2:43:9A:C0:5C:90:86:6E:7C:7F:EC:55:DB:71
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4270E288D647B37E67132C4BAA86FDB195BD36FF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/85c2ad4c-b131-4e1a-8706-33d5faaa26cd.roa
Signing time:             Mon 24 Nov 2025 08:10:56 +0000
ROA not before:           Mon 24 Nov 2025 08:10:56 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:199e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:70:e2:88:d6:47:b3:7e:67:13:2c:4b:aa:86:fd:b1:95:bd:36:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 08:10:56 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=5730d1d7425fa223c19bef503b48cccdb67ceae2e1a3914c4b6ec05ed5754211, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:38:e0:de:01:19:83:a7:58:71:05:db:15:
                    93:a6:6d:98:77:3b:ce:ef:c1:31:fe:ec:d5:57:73:
                    a8:9a:41:89:19:8d:d0:03:98:7c:2f:2b:ec:87:ad:
                    4e:a7:d8:a4:cd:6a:65:01:9a:7d:d6:c7:b1:da:47:
                    7b:1f:48:ad:46:de:5c:a9:8e:db:6c:9f:54:e9:88:
                    35:44:1e:4f:c5:43:07:fa:25:df:bc:94:2a:d9:0b:
                    85:e6:88:9d:17:2a:49:70:71:5d:f6:b0:36:b9:37:
                    20:14:6a:16:4f:4d:b8:53:20:6a:e0:16:b4:8b:1d:
                    09:78:cb:c0:fa:91:00:c6:e1:14:e4:a3:c9:96:1d:
                    11:dc:0a:1a:15:57:bf:dc:4a:68:e1:56:03:97:0f:
                    53:7c:1b:4d:6d:23:d2:50:f3:a8:b2:fc:f9:de:39:
                    7a:6d:a7:c3:3b:1b:88:cc:4a:0e:88:64:ce:6a:49:
                    75:df:f0:86:df:18:d5:03:90:0a:ce:e1:f6:f6:26:
                    12:5d:48:4d:79:48:dc:f2:ca:af:35:f8:57:cf:9a:
                    74:86:11:1f:b3:4f:df:21:e1:dd:73:95:ed:46:13:
                    62:61:a3:bc:97:af:e8:cb:d5:d9:2a:67:be:0a:65:
                    f8:8f:eb:1b:5f:b7:7c:e2:38:68:47:f3:b5:8a:74:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:BD:CF:2E:27:D2:43:9A:C0:5C:90:86:6E:7C:7F:EC:55:DB:71
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/85c2ad4c-b131-4e1a-8706-33d5faaa26cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:199e::/47

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:51:a5:b6:a1:ca:5a:97:00:fd:c2:e9:ee:f1:5d:b3:f8:
         21:0c:13:b7:37:bb:8e:2b:1e:2b:4c:6c:60:7e:e3:ad:f7:9a:
         5d:e8:c3:f7:ff:a9:29:3f:71:96:c5:d5:1e:b5:0f:3d:fe:8a:
         ce:93:f0:f6:04:c3:92:b8:81:81:41:3d:0f:ff:de:2f:23:64:
         03:96:2f:cd:5a:56:af:83:7b:94:de:76:1a:a1:cc:77:aa:a8:
         4a:2e:66:24:a8:f9:a1:e4:a9:0c:6d:d6:db:ab:3a:a1:1f:b8:
         77:25:78:28:91:af:1d:a7:6f:77:51:01:2c:77:8e:0b:ac:f9:
         32:08:66:53:67:75:d8:b2:3d:49:a4:24:16:9c:dc:3e:05:d9:
         df:81:cd:21:63:03:16:1d:71:57:71:72:58:e2:0d:53:d8:7d:
         92:2c:cd:2e:c2:b3:31:4f:da:2b:95:e2:dc:d2:c2:7c:a4:78:
         6c:ca:7e:3b:b1:d0:d7:23:ce:ec:e1:87:62:c5:96:e6:ce:91:
         ef:df:a6:fb:24:46:65:a3:63:bc:98:ff:9d:af:77:21:b6:1f:
         ee:00:c6:cf:29:12:d5:74:4e:4a:ac:5c:9a:7e:21:3a:f9:93:
         3e:a4:b0:76:d0:cc:90:98:4c:0c:1c:3d:57:1b:2c:38:f8:47:
         dc:7b:c8:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:13 2025 by rpki-client