This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b9432d3-2e41-494f-aae4-4a11535b1b93.roa
File:                     8b9432d3-2e41-494f-aae4-4a11535b1b93.roa (raw, json)
Hash identifier:          NODzNlsr9ZP8Cmwx5ZAN3FJzXzbRLtC+Uj5L3Kq3VLs=
Subject key identifier:   BA:44:C9:50:04:67:4C:5C:4F:DB:59:B5:29:7E:A5:BF:62:8C:3B:FD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5146571AE129F0855A63BAE5805858C86AE0E8E3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b9432d3-2e41-494f-aae4-4a11535b1b93.roa
Signing time:             Tue 25 Nov 2025 04:11:00 +0000
ROA not before:           Tue 25 Nov 2025 04:11:00 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e70::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:46:57:1a:e1:29:f0:85:5a:63:ba:e5:80:58:58:c8:6a:e0:e8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:11:00 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=085561d2daa3bc7e27729bd9f0f4d2dc2b3c7517895e897f3e8420d5125bb235, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:c1:ca:81:25:a5:47:77:f2:c3:1f:77:d3:
                    64:09:28:6e:e3:66:13:5e:5f:49:46:6a:de:b3:73:
                    09:b2:55:67:97:db:a2:99:ec:42:65:df:43:7f:42:
                    ed:ad:36:55:7e:f5:28:60:74:af:14:fa:51:d3:15:
                    d2:df:ef:47:06:85:22:a6:96:e8:e9:c0:84:b9:58:
                    92:b7:3c:64:9a:d5:fd:e5:c5:75:ac:00:10:f3:ae:
                    ea:4b:9c:d0:a7:f5:4b:5a:73:56:35:40:5f:f6:d6:
                    79:5e:b2:4f:d2:3b:d6:3c:82:8b:63:19:22:24:e3:
                    78:a1:f3:2f:28:db:ca:43:43:08:9b:24:30:ad:ae:
                    1d:d0:40:e3:c6:e5:84:66:bf:77:ad:14:76:e9:e1:
                    c1:57:a2:a4:c7:2c:8c:62:6e:3c:ba:1e:63:92:32:
                    84:2c:49:ad:81:25:d1:89:79:3e:c3:a7:b3:13:dd:
                    f5:af:f0:51:9a:86:4c:3c:a7:7c:95:22:59:e2:54:
                    4c:62:27:8e:43:cf:b2:e6:9e:52:7c:a1:48:48:b9:
                    8e:88:c0:47:26:7e:e2:d7:61:40:6f:76:64:70:6b:
                    bc:78:f2:a2:5a:1d:a2:d6:6a:3c:d4:af:65:a0:74:
                    62:ea:8e:e4:ea:c6:bc:4e:a4:0b:7e:15:c7:71:48:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:44:C9:50:04:67:4C:5C:4F:DB:59:B5:29:7E:A5:BF:62:8C:3B:FD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b9432d3-2e41-494f-aae4-4a11535b1b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e70::/46

    Signature Algorithm: sha256WithRSAEncryption
         23:e5:91:3f:06:34:d9:94:a1:65:be:e4:38:09:a4:8a:e7:e4:
         5d:72:73:21:ec:7d:b3:65:0f:b1:8e:ae:1d:c1:c2:b5:b4:61:
         58:61:40:ed:fd:be:d3:c6:27:36:a7:25:df:9a:a2:74:53:b7:
         6e:7d:8e:e3:b2:45:54:a9:93:89:cd:b3:cf:7c:b0:a0:e6:80:
         07:83:65:84:5e:d9:69:40:d5:a1:b7:fb:9c:3c:07:1c:e3:29:
         59:30:af:b0:05:ec:91:a5:17:14:b4:43:81:3b:e8:35:c6:50:
         90:da:d5:4c:be:c2:bb:a3:a8:72:3f:46:fc:60:16:ec:43:d6:
         e0:2c:c9:47:74:9f:53:22:a0:e4:a7:c5:4c:92:67:2a:b4:0f:
         8c:af:fe:5c:ff:ed:d2:c7:8f:a6:98:5d:03:07:2c:8f:72:04:
         4f:7f:5f:ef:82:d1:b6:a2:bb:36:14:8d:8d:6d:78:cc:d7:9b:
         2e:01:0a:d7:7c:06:65:90:e0:98:8e:00:69:62:bd:16:2a:96:
         98:86:8e:9a:94:cc:2e:b3:ef:ee:83:12:8c:82:ac:e2:23:ba:
         25:92:bf:9b:21:05:d7:cf:b2:f1:f8:18:07:21:84:ca:cc:dc:
         c8:42:13:a3:c7:81:24:3d:65:b2:4f:cd:67:1a:90:75:4a:2c:
         6e:41:90:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:15:10 2025 by rpki-client