This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88327301-3bb9-489e-ae93-065cf32434fc.roa
File:                     88327301-3bb9-489e-ae93-065cf32434fc.roa (raw, json)
Hash identifier:          tUg6M6f6dilfeoWZGE21PQBp5ajhvIKUYeME3oVJjKg=
Subject key identifier:   56:04:40:CA:4E:79:15:2C:66:BF:5A:D4:1D:21:D8:66:78:40:49:36
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       60BE71CB5FBB1DBB8E40BCFFF7635E13B8FCA2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88327301-3bb9-489e-ae93-065cf32434fc.roa
Signing time:             Tue 25 Nov 2025 17:11:58 +0000
ROA not before:           Tue 25 Nov 2025 17:11:58 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1550::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:be:71:cb:5f:bb:1d:bb:8e:40:bc:ff:f7:63:5e:13:b8:fc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 17:11:58 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b5612036c31431446d0d68c6f2e6413540c03e95a35acd32ebcc46040a0e8709, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:d6:ea:d2:1a:26:a7:c5:19:f4:6f:2e:f2:
                    97:1b:73:03:82:ef:fc:e3:37:9a:ab:fb:8f:22:e0:
                    45:45:7e:3a:40:47:b0:7c:60:0f:f3:7e:6a:47:4f:
                    c5:dd:20:4e:b4:ec:59:16:81:74:70:89:19:46:33:
                    42:0c:86:6e:c5:42:59:b2:ad:72:ea:9f:53:0d:32:
                    6d:ab:25:43:c5:0d:3f:7a:2f:34:05:25:a0:e7:13:
                    d3:b8:7f:70:eb:83:a2:60:18:52:8f:55:ea:36:25:
                    e7:dd:78:c3:60:cd:39:f5:8c:7b:06:1f:0a:01:d4:
                    bc:d4:4c:59:27:10:97:a7:0a:bd:6e:7e:07:03:42:
                    a3:dc:ee:84:c8:d5:db:71:86:ac:bb:bf:ec:2e:2d:
                    d9:3c:38:40:74:25:3f:21:3c:da:09:a1:f6:06:70:
                    cb:20:4b:e6:09:aa:3c:69:1a:8f:90:73:07:90:9e:
                    f4:3b:65:ae:15:18:65:b2:92:f4:43:24:43:af:99:
                    d7:6b:30:2f:5d:f4:f5:5f:ba:40:96:90:70:fc:84:
                    b7:08:e7:56:e6:36:b8:c4:0c:a7:26:d2:3a:7a:23:
                    03:a4:90:8f:0d:93:bc:72:ad:e7:9f:7f:23:67:06:
                    35:d3:f2:c4:98:b3:cd:54:a6:0c:ba:93:e9:30:93:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:04:40:CA:4E:79:15:2C:66:BF:5A:D4:1D:21:D8:66:78:40:49:36
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88327301-3bb9-489e-ae93-065cf32434fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1550::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:5d:fa:bd:ff:9d:3d:96:d5:92:cd:21:15:3b:54:4f:c8:81:
         3d:47:be:b9:ea:30:99:ec:3d:40:a3:8f:37:23:48:b5:21:41:
         80:02:ba:07:89:27:d6:b6:48:d6:67:12:f2:05:32:b1:b0:d7:
         7b:47:cf:11:0c:f8:4e:b2:87:ff:d4:d2:d7:05:91:63:e3:e6:
         b8:54:7b:51:57:93:33:20:af:5f:68:49:6f:41:f2:f6:1d:09:
         65:b3:4d:ff:dc:65:ff:3d:68:35:b0:14:21:dd:cf:4d:1c:7c:
         d9:a4:f9:c7:41:58:02:54:c9:6e:13:bf:ca:a5:a6:09:63:6a:
         19:81:97:f1:31:e9:a3:19:77:f3:de:ee:05:f7:e2:28:7f:b4:
         bb:38:c8:1d:9b:dc:4b:b8:3e:2b:cc:ef:70:82:96:59:11:59:
         4d:34:b7:e8:3a:8a:ba:bd:86:b3:db:d7:2a:4c:9b:2c:ee:8a:
         1a:7a:ed:04:ff:f8:f3:08:40:b8:03:ee:4b:24:8a:af:21:7f:
         38:77:b9:ca:59:e7:35:9c:26:09:f4:75:e3:00:ba:fa:4b:97:
         15:1c:83:03:b9:0d:ac:e9:c2:9a:9e:72:36:bb:57:43:29:d0:
         1c:69:be:fd:a9:cf:35:0a:51:d8:26:54:41:cf:22:91:5d:b6:
         ee:f9:c4:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:45:10 2025 by rpki-client