This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8654180a-2628-4c85-9ef0-ea9ef3f5ccab.roa
File:                     8654180a-2628-4c85-9ef0-ea9ef3f5ccab.roa (raw, json)
Hash identifier:          cp+AwCu+YKCYiRfbU7HVSq01kaMZNOCqjsW9PAduKcc=
Subject key identifier:   AD:1F:79:67:28:D0:41:86:A3:EF:D5:E7:2B:B7:0A:8D:7F:C7:20:69
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46B07731F48E4B794F1C6DC270BE4C6297B82549
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8654180a-2628-4c85-9ef0-ea9ef3f5ccab.roa
Signing time:             Tue 25 Nov 2025 08:31:26 +0000
ROA not before:           Tue 25 Nov 2025 08:31:26 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:19d0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b0:77:31:f4:8e:4b:79:4f:1c:6d:c2:70:be:4c:62:97:b8:25:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:31:26 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=276389f33b4e11fd898cc1e4363fecb07a0d72ef6e36a78566a11820945274a2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:16:df:38:27:aa:4b:de:b0:ec:4c:68:11:
                    4b:de:25:27:37:45:cf:8f:83:08:87:2c:1b:f2:58:
                    95:6a:90:d1:4e:c9:fb:ee:8a:7a:d6:96:73:15:1b:
                    9a:36:11:d4:c2:e4:9e:fa:c0:d5:a9:1a:a2:b0:7c:
                    2c:00:38:1f:ad:4d:b9:2b:ac:d6:3b:a1:a6:32:c7:
                    27:fd:7d:92:b6:85:21:87:2f:74:15:2b:2e:e5:98:
                    e6:9c:6a:f6:35:10:ec:ae:08:19:2f:1c:35:5d:5a:
                    a0:96:7f:03:cd:06:92:fb:9d:46:c8:e8:17:e1:a8:
                    0d:81:91:ef:51:19:2f:3a:d4:de:ba:92:56:24:4d:
                    c1:df:ca:81:27:dd:85:ed:00:5f:a1:a6:de:d1:3f:
                    e6:fb:d2:39:f9:d5:62:52:f5:4d:4e:4a:f1:9f:97:
                    3d:30:ee:b1:5e:62:95:81:53:22:73:fa:82:8f:93:
                    0e:11:99:b3:da:d2:b1:1a:18:ae:68:c9:9a:b1:d0:
                    5f:b0:a5:d0:e9:85:6c:49:c9:a0:88:d9:36:04:dd:
                    75:84:a3:e0:5d:e1:1d:06:00:79:c6:89:ca:0f:28:
                    fb:0d:b3:55:c9:e2:f7:89:0f:76:4c:4b:88:f8:54:
                    1a:e2:b6:c9:41:26:6b:44:27:31:31:34:fe:67:11:
                    ec:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1F:79:67:28:D0:41:86:A3:EF:D5:E7:2B:B7:0A:8D:7F:C7:20:69
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8654180a-2628-4c85-9ef0-ea9ef3f5ccab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:19d0::/45

    Signature Algorithm: sha256WithRSAEncryption
         8a:7e:37:c4:e7:7f:a1:73:80:91:fe:c0:2e:32:f0:cb:41:f6:
         71:37:88:a7:8d:a4:9b:cf:29:5e:84:0d:bd:a2:81:d0:1c:96:
         c8:13:a1:35:52:87:a2:a7:5e:c0:4a:c6:50:d5:cc:05:51:d5:
         c8:9f:11:74:99:df:4c:d6:34:32:43:1b:84:87:ca:ee:21:d3:
         9d:43:f0:3c:37:d0:0a:02:58:ab:bf:5a:2d:dd:65:66:90:27:
         7c:53:47:ed:ab:78:d4:9f:74:4b:89:d9:15:a3:0a:10:fa:97:
         a2:07:33:d9:12:7a:64:7c:a2:52:0d:65:54:22:a8:11:37:f1:
         d9:01:57:09:49:d6:ea:5c:2e:68:0f:b5:e3:36:3e:3c:04:b7:
         a3:7d:05:ed:c4:dd:6f:f7:58:4d:e4:59:74:c8:21:37:bf:3b:
         03:7c:aa:76:c4:43:45:df:de:1e:64:69:65:f0:56:21:18:cf:
         d1:8f:fb:c2:44:02:b7:f7:fc:3a:67:59:cb:0c:4e:4e:0c:8f:
         59:64:75:9d:c2:38:f0:8c:c5:a4:e7:fc:dc:ab:6b:32:28:e7:
         64:e7:05:b5:cc:e9:99:b1:9e:51:03:cd:ba:62:e4:96:11:2e:
         b4:45:36:d9:ce:69:c4:25:bf:ac:9c:b0:97:b0:06:f0:30:c1:
         26:a7:d1:98
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURrB3MfSOS3lPHG3CcL5MYpe4JUkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDgzMTI2WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzYzODlmMzNiNGUxMWZkODk4Y2MxZTQzNjNmZWNiMDdh
MGQ3MmVmNmUzNmE3ODU2NmExMTgyMDk0NTI3NGEyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGnxbfOCeqS96w7ExoEUveJSc3Rc+PgwiHLBvyWJVqkNFO
yfvuinrWlnMVG5o2EdTC5J76wNWpGqKwfCwAOB+tTbkrrNY7oaYyxyf9fZK2hSGH
L3QVKy7lmOacavY1EOyuCBkvHDVdWqCWfwPNBpL7nUbI6BfhqA2Bke9RGS861N66
klYkTcHfyoEn3YXtAF+hpt7RP+b70jn51WJS9U1OSvGflz0w7rFeYpWBUyJz+oKP
kw4RmbPa0rEaGK5oyZqx0F+wpdDphWxJyaCI2TYE3XWEo+Bd4R0GAHnGicoPKPsN
s1XJ4veJD3ZMS4j4VBritslBJmtEJzExNP5nEewRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrR95ZyjQQYaj79XnK7cKjX/HIGkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzg2NTQxODBhLTI2MjgtNGM4NS05ZWYwLWVhOWVmM2Y1Y2NhYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAGdAwDQYJKoZIhvcNAQELBQADggEBAIp+N8Tnf6FzgJH+wC4y8MtB
9nE3iKeNpJvPKV6EDb2igdAclsgToTVSh6KnXsBKxlDVzAVR1cifEXSZ30zWNDJD
G4SHyu4h051D8Dw30AoCWKu/Wi3dZWaQJ3xTR+2reNSfdEuJ2RWjChD6l6IHM9kS
emR8olINZVQiqBE38dkBVwlJ1upcLmgPteM2PjwEt6N9Be3E3W/3WE3kWXTIITe/
OwN8qnbEQ0Xf3h5kaWXwViEYz9GP+8JEArf3/DpnWcsMTk4Mj1lkdZ3COPCMxaTn
/NyrazIo52TnBbXM6ZmxnlEDzbpi5JYRLrRFNtnOacQlv6ycsJewBvAwwSan0Zg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:11:45 2025 by rpki-client