This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/883e575a-007e-4f00-886b-95b742e04644.roa
File:                     883e575a-007e-4f00-886b-95b742e04644.roa (raw, json)
Hash identifier:          jJ8W6HU1BvvyrDSidLc6wJszohZYYhC2qaiOF2tsyhA=
Subject key identifier:   29:BF:F7:AC:46:56:62:9B:DA:A9:DE:B1:48:16:EE:74:A7:A0:65:5B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6A155E90CC535F366E4F91D793064B44A0D79BD4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/883e575a-007e-4f00-886b-95b742e04644.roa
Signing time:             Tue 25 Nov 2025 10:02:01 +0000
ROA not before:           Tue 25 Nov 2025 10:02:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:368a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:15:5e:90:cc:53:5f:36:6e:4f:91:d7:93:06:4b:44:a0:d7:9b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 10:02:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=139132773fd46104061fcd8f813442e77a148e7d549e102e655aefc51d695f55, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:16:b2:f6:0b:f7:a7:d7:ca:47:4a:af:49:
                    29:34:52:11:16:05:f6:eb:29:d6:3e:59:b5:2a:8f:
                    8c:d0:98:eb:a8:2a:bc:84:53:f0:d4:cc:c0:95:f7:
                    81:c3:50:69:63:41:24:48:54:4a:87:a5:8a:7e:24:
                    ad:14:f6:61:a8:32:d7:ac:db:21:62:f1:96:4e:a5:
                    04:dd:1d:06:d6:c1:fb:23:40:85:a2:8e:6f:21:cf:
                    8f:45:30:76:e4:3a:47:9e:56:d2:98:b2:ef:2e:4e:
                    cd:4e:4a:28:d6:30:a0:86:67:2c:39:f9:9a:1c:4a:
                    d1:f7:cd:b7:63:98:4c:54:ff:b5:22:96:0e:cf:0d:
                    00:f6:84:11:36:db:42:a6:1a:52:aa:53:95:20:ec:
                    51:27:68:59:cb:39:ac:ca:3b:4e:96:2a:b1:ea:ac:
                    c1:4e:9b:d1:d2:d9:21:4b:ec:2f:04:fe:9f:70:88:
                    97:59:7d:da:c9:b6:10:66:d0:e9:67:d3:d0:65:76:
                    81:1f:af:23:88:bc:6c:b4:82:97:8a:80:f4:87:fc:
                    e0:a6:4e:eb:81:fb:d2:1a:aa:1a:c4:93:e1:3e:11:
                    05:22:86:cc:11:5a:02:9c:cd:ac:36:8b:2c:30:cf:
                    b4:88:45:76:2a:7b:73:c9:c5:64:f8:d3:6d:dd:6a:
                    b8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BF:F7:AC:46:56:62:9B:DA:A9:DE:B1:48:16:EE:74:A7:A0:65:5B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/883e575a-007e-4f00-886b-95b742e04644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:368a::/47

    Signature Algorithm: sha256WithRSAEncryption
         92:eb:7d:c5:5a:02:39:f7:fc:2a:fb:04:77:de:26:fc:11:b3:
         e2:f8:93:7c:e1:92:01:62:77:9d:0f:8e:6d:f4:b4:f5:e3:73:
         84:6d:7a:2e:da:dc:28:74:2d:20:0f:86:df:14:fc:79:1b:55:
         0b:16:2d:a0:45:52:a9:c4:af:65:b5:12:4e:c4:3f:46:38:b8:
         9d:8d:23:62:6a:db:79:1a:ba:1b:7d:5e:57:30:38:11:e5:6c:
         6f:cc:29:f2:12:f4:ab:48:c5:ad:35:01:79:1e:8c:f9:2c:c9:
         0b:62:4b:55:e0:7a:3d:28:83:d7:86:e0:fd:ca:f4:8e:62:62:
         5d:11:bf:71:78:1d:6c:8b:be:7e:9b:e6:7c:29:69:82:1d:13:
         67:4e:1b:a4:d1:47:54:92:ad:79:11:cf:31:f5:b0:64:89:9f:
         b1:59:13:e6:5f:f6:88:31:c0:ce:d5:a7:2c:79:8b:34:b8:a4:
         af:49:e2:57:a3:b6:08:59:14:24:83:92:6f:b3:90:22:8c:dc:
         61:2a:3b:c8:07:48:49:6a:1e:27:17:00:a6:1a:6d:83:51:0e:
         97:37:b8:53:bf:82:af:d4:db:83:db:87:fe:3c:aa:6b:0a:38:
         76:f1:8a:94:67:34:5a:9b:cd:0c:5f:c2:4e:ed:61:9f:50:f2:
         87:c4:2f:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:43:39 2025 by rpki-client