This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ab8f1d3-ea70-4b7c-8f3a-4888f66a702b.roa
File:                     8ab8f1d3-ea70-4b7c-8f3a-4888f66a702b.roa (raw, json)
Hash identifier:          w3ybp3dFEK82EZPtdbSlVuVrdQREy5GH8coaEuoPscM=
Subject key identifier:   79:64:3C:2A:D5:9E:8E:11:A3:F5:EA:E1:6F:B7:C1:CE:A3:39:74:D7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       08FF5D761609D5F9AF65BA15D655F5A66D8D07E0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ab8f1d3-ea70-4b7c-8f3a-4888f66a702b.roa
Signing time:             Mon 24 Nov 2025 00:30:48 +0000
ROA not before:           Mon 24 Nov 2025 00:30:48 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:134c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ff:5d:76:16:09:d5:f9:af:65:ba:15:d6:55:f5:a6:6d:8d:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:30:48 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=b97c18b3ef0b21dc164e33cf05d37af72d68c27d704d2168cf62b4393be4a018, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:82:27:9e:fc:df:51:af:16:fb:d9:66:78:18:
                    5d:b3:06:7b:9d:2e:d7:af:a7:34:f0:74:85:dd:e0:
                    59:e6:d0:77:e8:aa:13:63:d5:fd:54:f7:f7:1c:92:
                    07:4b:85:9d:de:90:50:e7:64:22:df:1d:6b:90:74:
                    e5:b5:40:a2:0b:4d:ed:7d:f5:0c:8c:0e:87:2b:72:
                    49:47:bf:71:e2:eb:37:79:53:b2:62:60:de:54:fc:
                    68:1a:ed:1d:2d:28:d0:84:e3:e0:f9:bf:f1:1c:d7:
                    5c:8a:b7:7b:13:c3:88:9d:5d:cd:a8:3f:20:d9:e0:
                    2a:33:d2:37:8e:bf:6e:02:70:ae:9b:67:f7:d8:55:
                    f6:39:9b:cf:82:b1:24:64:96:83:e6:22:f0:88:e0:
                    a0:75:4c:f0:2b:73:0c:10:1a:04:4e:49:92:5f:9c:
                    e3:21:a7:55:1d:1a:6a:d0:ca:3c:b6:80:f5:4c:f7:
                    a2:47:fe:3d:a8:4c:49:7c:ed:1b:8a:47:f0:14:6c:
                    81:ad:21:6c:86:d2:03:2d:dc:88:17:55:65:e7:f3:
                    f6:43:62:e7:b9:99:47:db:37:7a:92:fc:5f:4b:7d:
                    98:30:7c:f6:ae:d3:a1:99:86:d2:66:ee:8c:25:45:
                    83:43:62:52:f1:b3:f0:bf:6b:82:ea:da:57:73:0c:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:64:3C:2A:D5:9E:8E:11:A3:F5:EA:E1:6F:B7:C1:CE:A3:39:74:D7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ab8f1d3-ea70-4b7c-8f3a-4888f66a702b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:134c::/47

    Signature Algorithm: sha256WithRSAEncryption
         13:30:d7:3f:dd:33:34:ff:fc:5d:8d:42:78:c0:48:27:d1:34:
         dc:55:88:29:79:b2:82:a4:44:33:93:05:a2:3c:ab:9d:7a:6d:
         84:72:1e:15:53:37:ea:b8:0a:a6:e1:ef:90:6a:f1:cb:34:ed:
         1c:21:8e:0e:1b:65:57:16:ec:23:e0:15:e6:66:ae:ac:ad:07:
         5e:45:32:dc:7f:4d:85:d4:60:17:fa:21:e2:3f:1e:1f:78:c4:
         1f:85:e3:d8:82:38:e5:17:34:46:d0:f6:38:0d:17:40:98:f9:
         bb:6e:e7:98:53:70:6d:7a:68:8f:69:01:87:1b:ec:c0:30:2b:
         df:15:2f:a8:05:5a:77:38:22:a9:1e:19:6d:38:48:c8:dc:06:
         50:0b:43:6c:ff:44:40:89:b1:61:a5:52:26:12:20:84:ed:00:
         0f:7e:72:1f:d8:84:00:ef:6a:b1:ff:9a:a4:4e:8e:99:ee:d6:
         d7:ef:8f:08:e5:ba:e5:15:c1:b1:af:20:ef:c0:c0:9f:c4:09:
         4c:f2:8a:a8:5d:4a:07:7a:21:8b:31:06:fc:77:5d:57:21:8e:
         db:31:5e:00:61:c0:8e:44:3f:20:e8:52:d7:ba:55:ca:3d:66:
         89:1e:22:0c:b5:7f:ec:8f:39:be:3e:ac:5f:ca:94:fb:eb:05:
         bc:60:b1:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:34 2025 by rpki-client