This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/889819f5-0852-43f3-b152-0bc184e00485.roa
File:                     889819f5-0852-43f3-b152-0bc184e00485.roa (raw, json)
Hash identifier:          iaNTvZs7AHb5K6PQuOZU/L3uSEyyMh3eus6QMzwIFRg=
Subject key identifier:   D0:FD:60:49:F2:3A:6A:D0:FB:B4:B6:E4:57:0B:3D:A1:B7:3A:10:EE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15EBAC20DEA97FEA89FC5F0A7693CC1884AE37CF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/889819f5-0852-43f3-b152-0bc184e00485.roa
Signing time:             Tue 25 Nov 2025 11:11:26 +0000
ROA not before:           Tue 25 Nov 2025 11:11:26 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c20::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:eb:ac:20:de:a9:7f:ea:89:fc:5f:0a:76:93:cc:18:84:ae:37:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 11:11:26 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=f87fb20fe294d85a28f69d83a7932474e7bfbe2b3ca6bd6b410da536cb205121, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:45:a8:28:20:fc:93:01:37:7d:bc:9f:15:
                    68:20:ac:9c:00:ee:d4:e2:29:5a:0a:ed:87:22:c2:
                    d6:b1:1d:c2:5d:1d:07:8c:c5:c4:77:52:2d:f0:95:
                    c6:c6:f1:37:ae:94:f2:03:ec:b4:25:85:d7:a4:e4:
                    41:71:8f:95:22:92:d4:4a:20:8f:e9:9b:02:46:ec:
                    a2:04:0a:a6:7d:aa:96:1c:f8:c6:ad:25:89:80:6b:
                    a4:08:5a:61:b7:af:d3:52:42:76:da:82:d3:f3:55:
                    58:46:a2:a6:b1:5e:bb:a2:fc:84:38:71:f5:3b:c5:
                    7f:90:4a:2e:65:76:14:b9:b2:e1:73:d1:f4:8a:3b:
                    0d:82:00:41:15:86:b3:92:bb:d5:ed:34:29:c3:d9:
                    71:f0:1e:20:fb:a1:fc:01:f8:5d:b3:11:10:79:a1:
                    dd:6f:62:4c:d4:49:74:a1:99:7c:e6:0c:a0:02:b2:
                    bd:e6:8c:8a:f7:47:6c:6a:ed:4c:91:b7:df:c7:92:
                    1d:e0:70:1e:22:fa:43:fd:2c:78:46:75:fd:24:81:
                    47:bf:01:50:ad:cc:ac:58:2e:c6:13:ec:7a:c4:4a:
                    c8:6b:18:8f:a2:fd:9a:45:8f:bd:0b:8a:f9:7e:f6:
                    43:9a:a0:ad:5c:ae:e4:80:24:fb:d7:05:bd:a7:13:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FD:60:49:F2:3A:6A:D0:FB:B4:B6:E4:57:0B:3D:A1:B7:3A:10:EE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/889819f5-0852-43f3-b152-0bc184e00485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c20::/45

    Signature Algorithm: sha256WithRSAEncryption
         c1:3d:1a:27:27:f0:fd:27:df:4b:c3:85:c6:2d:c6:00:1d:99:
         7c:4d:79:b3:2a:7f:b1:0c:c1:27:b8:9b:2b:e3:22:13:3f:72:
         73:2a:e1:a6:31:d5:48:9f:c5:b1:ab:f7:36:20:23:4d:f6:0c:
         16:20:13:40:8d:45:9e:95:e1:0d:72:37:8c:47:1d:4c:f1:6a:
         43:6b:69:87:56:a0:61:c8:ba:08:5e:06:75:cf:c2:34:99:ad:
         89:48:c4:45:96:be:84:93:a5:b0:26:32:89:0a:6e:2c:27:62:
         27:51:22:61:f5:0a:57:7e:bb:87:7d:11:6d:32:b5:7b:d4:65:
         b8:14:c4:06:79:47:53:e9:68:ed:90:95:45:1c:e0:f3:b3:a1:
         d1:d3:80:1f:a5:b8:52:f7:88:81:f1:d0:02:3f:db:05:18:e1:
         8a:d7:0b:f9:cb:9a:40:e4:5d:79:a6:3f:64:29:e7:07:a2:6a:
         c1:fb:bb:92:e8:45:0f:e0:f9:ea:1e:d5:4c:83:69:bd:51:b8:
         7b:a2:0a:c2:6f:65:69:87:2a:05:09:7d:9f:e1:ce:8a:2e:2a:
         25:99:15:a5:30:d7:24:f9:65:62:23:6f:c5:39:4f:19:6e:0a:
         c4:49:be:ce:74:35:87:b9:f6:0f:72:ec:a2:fe:90:9e:9f:d3:
         b9:fa:d9:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:10 2025 by rpki-client