This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ae35eac-7a1d-4e42-911c-40de3fb70a59.roa
File:                     8ae35eac-7a1d-4e42-911c-40de3fb70a59.roa (raw, json)
Hash identifier:          +XFdOMCWfJnAgKagwkPGzPl86T7jn96IDIm1Gz2/hdY=
Subject key identifier:   B7:BC:F0:23:79:FD:B1:1D:E3:16:E1:38:5E:A7:25:B1:FE:7B:B8:F4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6D53A9ABD42A1E55AA21B62F495B612B094740D4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ae35eac-7a1d-4e42-911c-40de3fb70a59.roa
Signing time:             Mon 24 Nov 2025 06:01:20 +0000
ROA not before:           Mon 24 Nov 2025 06:01:20 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cbe::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:53:a9:ab:d4:2a:1e:55:aa:21:b6:2f:49:5b:61:2b:09:47:40:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 06:01:20 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=a5a29cd43ab9c5262ad6b2238cad07806b418d243cc8856a90288bbdce14733f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:53:6f:3a:55:5a:8f:a2:b3:75:99:59:18:1e:
                    c2:2d:1c:f2:ab:23:b6:50:95:40:4e:34:11:76:2b:
                    c3:a6:28:b5:3f:44:ce:c3:56:1b:57:8b:62:38:5a:
                    19:78:b7:cd:17:94:fd:96:87:0e:41:48:f3:fb:fa:
                    5f:60:bd:11:18:b7:16:12:a8:ed:07:fb:2e:17:26:
                    fc:22:da:61:51:aa:f2:a5:22:6d:a2:8f:8f:9b:1c:
                    0f:3a:76:40:29:18:57:37:f6:fe:a0:54:1d:a4:c1:
                    76:5b:f3:6b:73:89:83:d8:93:86:aa:d6:16:87:64:
                    81:aa:15:8b:1e:e9:06:05:cc:dd:2b:62:85:73:ff:
                    f3:09:e3:7a:13:80:ac:80:44:00:13:1a:2c:d9:7e:
                    5d:40:c6:05:0e:b2:56:bf:fb:f7:1a:b4:f4:0e:9e:
                    38:0a:00:af:64:1d:9e:24:a5:fe:6c:b1:47:b7:f3:
                    da:0f:59:f9:3f:b5:d4:d1:41:45:e4:10:a4:56:df:
                    b9:9d:47:85:ec:37:67:f6:34:47:1e:9f:93:33:ac:
                    2c:ce:5b:5f:ab:b6:df:b4:97:0d:ff:c9:0f:2a:3b:
                    43:82:03:98:05:8d:ef:a3:1b:22:29:36:ab:a0:a6:
                    d5:90:74:a4:5b:dc:33:e4:0c:eb:dd:ba:17:f5:b8:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BC:F0:23:79:FD:B1:1D:E3:16:E1:38:5E:A7:25:B1:FE:7B:B8:F4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ae35eac-7a1d-4e42-911c-40de3fb70a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cbe::/47

    Signature Algorithm: sha256WithRSAEncryption
         4c:71:fc:6d:85:f9:75:4c:fe:7d:88:e0:dc:68:d6:9a:ca:17:
         be:49:4e:8e:0f:cf:15:56:81:d6:4a:35:41:b8:9f:c8:7d:7d:
         72:30:17:12:ed:0c:14:10:a0:ba:87:ca:7c:08:bb:9f:30:be:
         8f:58:3c:2d:0c:9b:dd:b4:f3:76:d6:ab:08:f4:8f:74:12:27:
         13:26:1c:d5:76:ec:e3:49:17:76:6d:2c:26:32:ee:8a:64:f2:
         cb:ac:85:08:5f:37:b6:f2:c0:35:20:e0:68:8c:bb:eb:92:9d:
         36:f2:b7:60:69:4b:3d:dc:ca:b3:99:75:0e:7a:3c:93:d6:6e:
         c1:12:06:cd:e1:39:e2:ca:ed:41:29:e8:44:86:09:0e:63:6e:
         0b:29:53:21:3b:8b:d7:be:68:ec:21:8d:38:a4:b2:73:09:fa:
         41:b7:25:78:78:08:e7:a1:57:5a:dc:d5:e9:ab:2b:f4:c4:b0:
         18:52:6a:a0:0c:b8:cf:00:b3:25:e4:16:88:13:a1:77:98:ba:
         46:7b:bb:76:e8:84:c3:c9:9f:1c:c8:a5:14:04:02:ba:1c:80:
         03:1a:e5:c2:b2:26:54:81:06:2e:bb:e0:77:b3:1c:3d:de:4f:
         81:b3:0c:ee:7e:1f:6d:6a:92:1f:ad:2c:8a:e9:5e:78:fe:20:
         68:d4:7e:a9
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbVOpq9QqHlWqIbYvSVthKwlHQNQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDYwMTIwWhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNWEyOWNkNDNhYjljNTI2MmFkNmIyMjM4Y2FkMDc4MDZi
NDE4ZDI0M2NjODg1NmE5MDI4OGJiZGNlMTQ3MzNmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTU286VVqPorN1mVkYHsItHPKrI7ZQlUBONBF2K8OmKLU/
RM7DVhtXi2I4Whl4t80XlP2Whw5BSPP7+l9gvREYtxYSqO0H+y4XJvwi2mFRqvKl
Im2ij4+bHA86dkApGFc39v6gVB2kwXZb82tziYPYk4aq1haHZIGqFYse6QYFzN0r
YoVz//MJ43oTgKyARAATGizZfl1AxgUOsla/+/catPQOnjgKAK9kHZ4kpf5ssUe3
89oPWfk/tdTRQUXkEKRW37mdR4XsN2f2NEcen5MzrCzOW1+rtt+0lw3/yQ8qO0OC
A5gFje+jGyIpNqugptWQdKRb3DPkDOvduhf1uMkBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUt7zwI3n9sR3jFuE4Xqclsf57uPQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhhZTM1ZWFjLTdhMWQtNGU0Mi05MTFjLTQwZGUzZmI3MGE1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALL4wDQYJKoZIhvcNAQELBQADggEBAExx/G2F+XVM/n2I4Nxo1prK
F75JTo4PzxVWgdZKNUG4n8h9fXIwFxLtDBQQoLqHynwIu58wvo9YPC0Mm92083bW
qwj0j3QSJxMmHNV27ONJF3ZtLCYy7opk8sushQhfN7bywDUg4GiMu+uSnTbyt2Bp
Sz3cyrOZdQ56PJPWbsESBs3hOeLK7UEp6ESGCQ5jbgspUyE7i9e+aOwhjTiksnMJ
+kG3JXh4COehV1rc1emrK/TEsBhSaqAMuM8AsyXkFogToXeYukZ7u3bohMPJnxzI
pRQEArocgAMa5cKyJlSBBi674HezHD3eT4GzDO5+H21qkh+tLIrpXnj+IGjUfqk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:13:16 2025 by rpki-client