This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a1be338-066e-4a9a-b53e-10f1e29e8134.roa
File:                     8a1be338-066e-4a9a-b53e-10f1e29e8134.roa (raw, json)
Hash identifier:          +Dovie08QPfBhUNDRQUk1+yUN9bwYEcf/WP0lrDozW8=
Subject key identifier:   A6:83:5E:85:17:62:83:2F:C1:0F:F8:D1:EE:80:AE:3B:94:12:87:97
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4D92ED63DCFC96821E07591ADE23574133117D0F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a1be338-066e-4a9a-b53e-10f1e29e8134.roa
Signing time:             Tue 25 Nov 2025 16:51:16 +0000
ROA not before:           Tue 25 Nov 2025 16:51:16 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33bc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:92:ed:63:dc:fc:96:82:1e:07:59:1a:de:23:57:41:33:11:7d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:51:16 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=e87ff61deb25a8a461e29df3f6d7e6fa5cd5d674e5baf95cc6e03360ca13ddc2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:ea:de:8a:6a:16:f5:16:b8:df:e8:49:3b:
                    7d:2c:76:40:6a:72:de:ef:ba:d8:b1:bb:19:a7:7b:
                    4d:2f:2a:80:3c:ed:55:7c:91:cf:93:cc:90:f6:3a:
                    ff:90:72:41:12:6e:65:dd:ce:ed:24:89:41:08:d6:
                    27:d1:65:0b:0c:1d:6a:57:a1:2e:78:6f:e6:91:80:
                    da:a9:d2:d3:93:e6:dd:a1:5f:24:f2:15:59:c5:29:
                    27:76:61:0e:31:3a:03:11:a0:92:ae:1b:c9:c9:c7:
                    21:ef:ff:3c:2c:2f:ac:da:6f:a2:fe:ca:55:13:22:
                    00:ee:2e:f5:26:ab:6b:2a:a3:73:5e:14:af:f2:38:
                    5e:63:c0:13:37:cd:72:e3:60:61:d0:83:e1:3c:a9:
                    3e:9f:35:82:ec:12:b1:58:52:63:f6:8d:ea:dc:dc:
                    30:f6:d8:d8:71:3c:66:14:db:92:eb:d1:37:4a:34:
                    bc:02:fa:bb:19:0c:38:fb:8c:4b:64:71:48:cf:3b:
                    b4:29:7d:4a:f5:d9:a2:d6:dd:98:e3:01:2d:ff:31:
                    88:80:af:4d:97:5b:e9:87:85:cd:a1:a3:44:03:f4:
                    80:86:c6:83:02:53:dd:b0:46:c6:9b:84:20:61:ea:
                    2b:f5:95:bd:8d:e5:b6:64:48:74:25:0a:6d:5c:17:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:83:5E:85:17:62:83:2F:C1:0F:F8:D1:EE:80:AE:3B:94:12:87:97
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a1be338-066e-4a9a-b53e-10f1e29e8134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33bc::/46

    Signature Algorithm: sha256WithRSAEncryption
         c3:65:d6:d9:17:15:33:3c:77:5b:e8:d0:91:da:fe:45:8d:72:
         c5:65:a3:13:1a:10:96:2f:97:90:8f:95:52:7e:5b:a8:9c:9c:
         f3:e0:aa:6b:b6:74:f5:35:7c:d0:50:c5:cf:79:b3:12:2b:51:
         51:0e:22:4a:5d:69:5c:9a:1b:4f:46:9c:35:a5:a2:9b:06:97:
         88:bb:ca:6d:d1:a3:92:21:33:4e:b1:af:d0:f7:56:33:60:34:
         3c:73:66:08:17:e6:d6:24:35:10:ef:3d:29:d8:24:98:2f:19:
         e2:fc:3d:2d:26:76:86:a6:30:b5:47:24:b1:bd:bd:d3:b7:08:
         43:06:59:36:7e:92:f3:c4:98:13:45:ab:09:93:57:83:a5:2f:
         1f:6f:b0:8a:90:a8:44:0c:b4:30:c0:41:4b:3a:fd:51:29:45:
         b4:09:a3:3e:80:25:1f:78:d3:20:9f:40:35:8b:ac:57:76:7c:
         b3:c3:e1:59:ad:02:f2:6b:9a:8c:09:66:10:2e:73:a6:c0:2d:
         5b:5c:4d:b4:49:60:9f:87:ea:bf:2d:01:41:d6:99:83:2e:ce:
         41:d2:52:b4:a4:72:2b:71:19:17:6a:08:ac:e8:80:5c:cd:3c:
         96:7e:96:f0:a1:1f:f4:07:05:24:75:78:f7:c4:50:a3:b8:17:
         d4:cf:a8:b5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTZLtY9z8loIeB1ka3iNXQTMRfQ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTY1MTE2WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlODdmZjYxZGViMjVhOGE0NjFlMjlkZjNmNmQ3ZTZmYTVj
ZDVkNjc0ZTViYWY5NWNjNmUwMzM2MGNhMTNkZGMyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLz+reimoW9Ra43+hJO30sdkBqct7vutixuxmne00vKoA8
7VV8kc+TzJD2Ov+QckESbmXdzu0kiUEI1ifRZQsMHWpXoS54b+aRgNqp0tOT5t2h
XyTyFVnFKSd2YQ4xOgMRoJKuG8nJxyHv/zwsL6zab6L+ylUTIgDuLvUmq2sqo3Ne
FK/yOF5jwBM3zXLjYGHQg+E8qT6fNYLsErFYUmP2jerc3DD22NhxPGYU25Lr0TdK
NLwC+rsZDDj7jEtkcUjPO7QpfUr12aLW3ZjjAS3/MYiAr02XW+mHhc2ho0QD9ICG
xoMCU92wRsabhCBh6iv1lb2N5bZkSHQlCm1cF7hlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUpoNehRdigy/BD/jR7oCuO5QSh5cwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhhMWJlMzM4LTA2NmUtNGE5YS1iNTNlLTEwZjFlMjllODEzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAM7wwDQYJKoZIhvcNAQELBQADggEBAMNl1tkXFTM8d1vo0JHa/kWN
csVloxMaEJYvl5CPlVJ+W6icnPPgqmu2dPU1fNBQxc95sxIrUVEOIkpdaVyaG09G
nDWlopsGl4i7ym3Ro5IhM06xr9D3VjNgNDxzZggX5tYkNRDvPSnYJJgvGeL8PS0m
doamMLVHJLG9vdO3CEMGWTZ+kvPEmBNFqwmTV4OlLx9vsIqQqEQMtDDAQUs6/VEp
RbQJoz6AJR940yCfQDWLrFd2fLPD4VmtAvJrmowJZhAuc6bALVtcTbRJYJ+H6r8t
AUHWmYMuzkHSUrSkcitxGRdqCKzogFzNPJZ+lvChH/QHBSR1ePfEUKO4F9TPqLU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:30 2025 by rpki-client