This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/89933c19-deff-4ba9-a6ab-e6efd5043b3c.roa
File:                     89933c19-deff-4ba9-a6ab-e6efd5043b3c.roa (raw, json)
Hash identifier:          JFVd15eC52xl5UvVKNhNa5gcSmlxykNZ8alCw+J61ho=
Subject key identifier:   B3:5B:22:4B:10:98:C2:97:66:F5:BC:E7:C8:97:38:AC:3B:2E:C6:54
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6BD6174FCCB86270F353919250482B8801CBEE39
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/89933c19-deff-4ba9-a6ab-e6efd5043b3c.roa
Signing time:             Tue 25 Nov 2025 07:20:11 +0000
ROA not before:           Tue 25 Nov 2025 07:20:11 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f12::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d6:17:4f:cc:b8:62:70:f3:53:91:92:50:48:2b:88:01:cb:ee:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 07:20:11 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=2ce04f94bf411cdc7591196547bd3b2a91a98d336932bc66a5efdde8b9b3dba0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:10:3f:ce:31:e3:c9:aa:d9:18:72:47:5b:
                    06:9b:6c:71:c1:d8:93:a2:2d:a2:e0:dc:da:58:c2:
                    57:ba:49:7e:22:93:ab:21:d8:73:92:79:46:4b:83:
                    00:54:e0:5b:35:4e:a1:9a:5c:19:14:93:7d:78:5d:
                    40:a7:c1:bb:80:ad:4a:eb:60:47:7f:b0:e9:54:69:
                    e3:4b:68:1a:c5:59:04:97:0b:4f:a6:3c:2a:56:60:
                    2c:db:16:1c:a7:69:23:c7:66:0b:6b:66:0e:c6:b8:
                    b2:d7:7f:6c:55:cb:13:65:ab:64:10:ad:6f:ba:59:
                    86:07:69:88:d8:b0:e1:d8:81:1f:e4:91:33:61:5c:
                    5b:46:dc:4f:97:25:64:ae:19:ac:25:44:f0:52:c4:
                    e9:7c:b9:89:45:20:18:be:38:70:5d:e1:31:e9:2f:
                    07:6a:00:dd:a7:11:2a:04:c7:11:dd:50:c3:50:35:
                    4f:73:fc:bc:ad:72:dd:1b:8f:58:26:91:10:de:64:
                    79:77:5b:92:f3:c2:fd:c5:25:d3:ce:81:9c:b5:6c:
                    0d:6f:9f:49:17:91:f0:38:ba:00:81:ca:31:e1:b3:
                    25:ea:2b:46:ec:65:d1:9a:bb:27:24:cf:e2:c0:bf:
                    38:88:fe:69:e1:f0:af:aa:c5:a1:92:80:39:f1:5b:
                    b2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5B:22:4B:10:98:C2:97:66:F5:BC:E7:C8:97:38:AC:3B:2E:C6:54
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/89933c19-deff-4ba9-a6ab-e6efd5043b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f12::/47

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:e7:c1:e7:de:7f:fa:ed:90:b2:b4:6b:44:3e:56:b8:92:
         a4:1d:48:0f:9b:8f:c1:50:bb:e9:18:f9:d5:ac:d9:58:8b:2c:
         8b:3e:ac:27:32:96:0a:e1:16:4e:8a:20:b7:82:50:d0:35:bc:
         c5:59:89:4c:ee:46:7e:d6:2f:7f:ea:52:a1:cd:74:0e:56:da:
         69:a4:f3:31:40:64:ab:9d:70:31:39:ae:2c:5f:55:53:98:1d:
         7f:fa:ee:dc:ca:35:9d:a2:cf:7b:93:c6:8f:75:9c:ae:be:78:
         c4:f9:04:34:cc:53:1a:f9:5e:36:0f:ad:35:c7:86:b8:5e:08:
         af:1c:eb:74:ec:c4:6a:63:16:63:f2:04:2c:c2:ef:56:64:e7:
         02:f1:19:6d:e8:55:f1:22:45:ff:f9:ac:85:29:fa:6c:5d:63:
         f1:06:ec:b3:7f:cf:38:87:07:7d:db:28:4a:b0:69:78:fb:84:
         e6:14:64:3e:12:53:09:45:99:d0:53:90:4f:08:37:4a:58:7d:
         59:73:f0:d7:9c:28:7d:b2:45:51:dc:05:d2:18:e6:49:23:b6:
         fc:c7:a9:d5:90:17:fc:ea:9a:53:89:7c:ae:b9:c0:c2:cd:69:
         04:6d:82:45:a7:12:84:89:40:9d:fb:41:c2:ba:45:8d:72:e2:
         cc:c6:a7:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:53 2025 by rpki-client