This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87bb972c-e710-4e09-9397-1e1c2121dac8.roa
File:                     87bb972c-e710-4e09-9397-1e1c2121dac8.roa (raw, json)
Hash identifier:          vSy1bbhXYWP6nGol1/yyvSN3x4teTJQvtlzdbJWSTxg=
Subject key identifier:   F3:CA:38:B1:39:FA:8C:1D:69:3B:19:6E:98:37:7B:D8:12:C1:4A:B3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       26CA5645860C0778BB338173FB9A22F84368530E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87bb972c-e710-4e09-9397-1e1c2121dac8.roa
Signing time:             Tue 25 Nov 2025 08:11:08 +0000
ROA not before:           Tue 25 Nov 2025 08:11:08 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ca:56:45:86:0c:07:78:bb:33:81:73:fb:9a:22:f8:43:68:53:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:11:08 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=4ff7861cd7d72208774ba4cbedaedb4dd89a88d4f74919a41be6ffafbd6c6b4f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:be:0a:8d:8a:ee:e1:40:00:99:6f:41:aa:
                    2e:f8:96:1a:97:b7:eb:b5:04:52:e4:6e:b1:72:ef:
                    e2:a3:e8:e4:e3:3f:cb:af:7a:5d:f0:d7:5d:3d:c7:
                    c3:a5:4d:78:5a:7a:50:38:22:75:3f:7c:fc:39:13:
                    8f:bb:76:c2:68:22:ff:32:a5:4c:33:be:cf:62:34:
                    3c:6d:18:4e:1c:2b:ed:93:d4:eb:07:0a:3e:77:67:
                    1b:e3:92:2d:a8:2f:f9:60:b1:ca:e7:be:5f:c1:15:
                    6c:65:42:d9:9e:95:51:ea:b3:42:78:ea:2f:09:37:
                    71:a4:77:7a:01:57:e7:80:05:47:c3:2f:cd:9e:7c:
                    17:5d:84:da:23:e7:b3:d7:16:c4:59:6f:ac:8c:82:
                    c1:79:0b:fe:b8:37:77:6d:d2:c3:f9:e3:8c:50:f7:
                    0b:c4:95:05:3d:c9:b0:fe:ef:2d:e3:03:b7:eb:c4:
                    ab:f3:a1:9a:af:ae:3c:9b:dd:a5:db:49:fd:63:24:
                    bd:23:bc:3b:fe:93:21:bc:e4:1b:05:86:22:0f:bd:
                    76:49:73:b1:91:3c:41:ba:2a:51:f4:4a:e4:ad:71:
                    0b:66:ba:7e:ea:70:35:db:5f:e0:ec:ab:db:b9:ba:
                    e8:9e:11:30:50:0b:24:88:42:e7:87:76:f4:81:7a:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CA:38:B1:39:FA:8C:1D:69:3B:19:6E:98:37:7B:D8:12:C1:4A:B3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87bb972c-e710-4e09-9397-1e1c2121dac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:e0:84:a3:df:8f:70:96:75:3d:4b:40:b5:68:cd:b5:ff:93:
         ec:c9:ac:8d:79:d1:9c:22:62:74:83:91:af:82:96:59:4f:9f:
         1c:d7:03:77:d2:cc:e5:f5:33:63:24:5f:96:b5:2a:81:42:70:
         0d:a9:9a:2e:68:0d:62:2b:52:d7:73:ad:55:cf:8b:b1:63:ad:
         8a:6a:da:77:17:4f:81:0a:ac:e5:8f:00:e4:87:66:b8:98:39:
         a9:f8:79:66:c4:06:b4:0e:5b:e6:14:db:09:c3:c2:b9:71:1a:
         96:31:06:d1:84:bf:8f:8a:34:c7:c8:9f:5e:a9:cb:56:21:16:
         81:f7:1c:72:84:55:38:f4:b9:d2:b9:de:07:d2:db:a3:15:01:
         ef:71:12:12:b2:98:89:f3:d2:a7:68:96:71:50:8a:de:55:fd:
         7e:5a:f4:02:08:1e:27:55:df:1f:1d:e3:89:40:08:27:57:46:
         46:f4:1e:60:2c:79:bd:7a:fa:7b:a2:66:ed:76:f0:0d:1b:04:
         e4:b8:77:93:44:31:f3:e8:5f:2b:fc:41:8f:04:0e:32:79:cf:
         60:f3:39:ab:55:b9:60:63:f1:02:13:a2:ac:16:2b:15:bf:ea:
         65:37:4f:f7:41:0b:95:00:d4:fe:c0:a8:fd:fa:f1:ed:3d:d7:
         a5:b1:c0:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:01 2025 by rpki-client