This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8adbdb69-3556-4cbe-a1ea-5386ef5a6596.roa
File:                     8adbdb69-3556-4cbe-a1ea-5386ef5a6596.roa (raw, json)
Hash identifier:          7quQ83tvbFodiVAOd84dREsnrQb7uAumuXfGQvxFfUE=
Subject key identifier:   36:8A:89:BC:D1:D9:9C:38:BB:5E:03:2C:7B:B3:94:DC:A1:2E:E1:CF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3C5589A02180169A649B1F3AC34401201C1D372B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8adbdb69-3556-4cbe-a1ea-5386ef5a6596.roa
Signing time:             Tue 25 Nov 2025 18:31:43 +0000
ROA not before:           Tue 25 Nov 2025 18:31:43 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1710::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:55:89:a0:21:80:16:9a:64:9b:1f:3a:c3:44:01:20:1c:1d:37:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 18:31:43 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c897205f71bf6486fd050ac41794451fb3950bb7e577fd1163ceaf21803319e5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:ca:72:f4:be:bc:17:08:31:43:8a:aa:98:
                    be:35:7c:a2:3c:9f:11:36:84:19:14:4e:2a:77:2b:
                    c7:ae:cf:ae:48:99:9e:47:d9:77:5c:e8:31:4f:d1:
                    10:98:3e:16:0c:75:97:49:11:70:fb:39:be:e4:d5:
                    09:53:ad:66:9a:07:10:7c:a0:d7:36:78:5f:11:06:
                    17:10:8f:51:de:c2:14:6a:99:4d:2e:7b:cf:0c:60:
                    f6:e4:c4:da:14:39:08:48:e5:93:11:66:a4:33:8d:
                    b4:91:8e:3e:41:5c:ae:43:4d:2a:fb:22:ff:38:25:
                    b1:a8:81:5c:71:d9:41:91:e2:6f:da:62:ed:74:59:
                    90:ac:9c:25:7f:cc:b7:97:af:1c:21:2d:6a:71:cf:
                    4e:60:8d:ff:e0:0a:9d:69:89:c3:a9:64:dc:da:8a:
                    6b:42:db:e6:35:fe:9b:a5:cc:e6:c6:4b:58:43:f8:
                    39:b5:e0:c7:d8:2c:81:75:22:b2:ae:2d:ff:4f:66:
                    72:2a:6a:e8:0d:1d:9d:c7:16:e9:dc:8c:12:dd:10:
                    cf:b7:2a:7a:73:14:e2:e5:e9:e0:05:a3:cc:75:ac:
                    86:49:ab:a3:45:c6:a4:31:25:3b:b5:d3:80:91:98:
                    15:5c:f8:3f:06:a3:90:4b:0b:d5:55:28:84:cf:56:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8A:89:BC:D1:D9:9C:38:BB:5E:03:2C:7B:B3:94:DC:A1:2E:E1:CF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8adbdb69-3556-4cbe-a1ea-5386ef5a6596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1710::/46

    Signature Algorithm: sha256WithRSAEncryption
         22:40:2d:47:4b:45:e0:ef:64:11:35:13:f0:cb:9a:7e:d6:d7:
         3e:dc:89:a1:37:bc:06:3a:b5:bc:d2:ee:3a:8b:4b:a5:39:b2:
         67:7a:08:72:d1:6f:5b:6e:e0:14:dd:44:63:c2:db:4a:3a:a3:
         ab:18:8f:81:0d:b0:07:d7:19:17:4f:3a:a6:20:68:0a:3e:6b:
         ea:83:31:7d:9b:88:68:95:4f:e9:06:62:44:8e:a4:2e:c3:c4:
         14:d2:9e:ce:00:72:82:37:b2:2a:0c:a2:b5:86:06:1f:8b:9d:
         6e:0b:f7:83:e1:b2:f2:50:33:e2:e4:a6:78:8b:95:aa:9f:d3:
         7c:08:da:87:a0:6b:0d:52:27:25:e1:68:71:63:76:4c:48:62:
         62:cf:6f:ea:f2:d5:18:cf:12:90:2e:0f:df:a3:69:e4:29:7a:
         43:29:f3:c3:f7:3c:fc:ab:98:65:24:4c:b2:9d:3e:5b:41:e2:
         06:9e:07:58:71:e7:91:43:a8:a1:21:24:bc:1a:41:f2:9c:ea:
         23:77:3c:c2:85:8b:ab:2a:dc:35:3e:98:8a:95:70:a7:1b:dd:
         fa:a9:85:e6:c1:50:a1:96:26:c9:d6:a7:35:b9:d4:ce:6b:76:
         82:7c:8f:e7:59:a9:9b:96:57:25:cb:5d:fe:db:09:e7:20:69:
         06:b9:46:97
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPFWJoCGAFppkmx86w0QBIBwdNyswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTgzMTQzWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjODk3MjA1ZjcxYmY2NDg2ZmQwNTBhYzQxNzk0NDUxZmIz
OTUwYmI3ZTU3N2ZkMTE2M2NlYWYyMTgwMzMxOWU1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJYspy9L68FwgxQ4qqmL41fKI8nxE2hBkUTip3K8euz65I
mZ5H2Xdc6DFP0RCYPhYMdZdJEXD7Ob7k1QlTrWaaBxB8oNc2eF8RBhcQj1HewhRq
mU0ue88MYPbkxNoUOQhI5ZMRZqQzjbSRjj5BXK5DTSr7Iv84JbGogVxx2UGR4m/a
Yu10WZCsnCV/zLeXrxwhLWpxz05gjf/gCp1picOpZNzaimtC2+Y1/pulzObGS1hD
+Dm14MfYLIF1IrKuLf9PZnIqaugNHZ3HFuncjBLdEM+3KnpzFOLl6eAFo8x1rIZJ
q6NFxqQxJTu104CRmBVc+D8Go5BLC9VVKITPVvkLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUNoqJvNHZnDi7XgMse7OU3KEu4c8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhhZGJkYjY5LTM1NTYtNGNiZS1hMWVhLTUzODZlZjVhNjU5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAFxAwDQYJKoZIhvcNAQELBQADggEBACJALUdLReDvZBE1E/DLmn7W
1z7ciaE3vAY6tbzS7jqLS6U5smd6CHLRb1tu4BTdRGPC20o6o6sYj4ENsAfXGRdP
OqYgaAo+a+qDMX2biGiVT+kGYkSOpC7DxBTSns4AcoI3sioMorWGBh+LnW4L94Ph
svJQM+LkpniLlaqf03wI2oegaw1SJyXhaHFjdkxIYmLPb+ry1RjPEpAuD9+jaeQp
ekMp88P3PPyrmGUkTLKdPltB4gaeB1hx55FDqKEhJLwaQfKc6iN3PMKFi6sq3DU+
mIqVcKcb3fqphebBUKGWJsnWpzW51M5rdoJ8j+dZqZuWVyXLXf7bCecgaQa5Rpc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:20 2025 by rpki-client