This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9005026f-c513-4afb-981e-2abec7e51ce1.roa
File:                     9005026f-c513-4afb-981e-2abec7e51ce1.roa (raw, json)
Hash identifier:          f9y29xAEwP7o1f7uh5yhUblJQ9w96Pn257NK5QtjMZQ=
Subject key identifier:   1B:97:FE:1E:07:CC:18:9D:88:E1:12:08:78:53:D8:8E:9A:DB:DD:BA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       78DC6EA3DDC4E34A210EFDC0FD5B48B5F8414840
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9005026f-c513-4afb-981e-2abec7e51ce1.roa
Signing time:             Tue 25 Nov 2025 08:31:24 +0000
ROA not before:           Tue 25 Nov 2025 08:31:24 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1430::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dc:6e:a3:dd:c4:e3:4a:21:0e:fd:c0:fd:5b:48:b5:f8:41:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:31:24 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=4f260b423e2c56389ae267d6ad32ab151d7c45751bd30997878d8149411446c2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:94:f3:c2:3a:0c:17:3f:12:ba:79:c2:e7:b6:
                    d0:74:8c:a7:16:54:2c:72:db:a9:7b:6c:7e:12:e7:
                    1b:69:26:b4:97:90:71:67:e8:ee:fc:ae:ed:5c:29:
                    a3:cb:e9:0d:04:88:49:7d:bf:fd:06:76:b4:29:d0:
                    14:d2:47:28:0d:32:af:92:46:54:31:46:25:2c:e3:
                    48:c1:e8:af:7f:9d:61:a7:4a:dd:f5:aa:13:6b:24:
                    5a:0f:c7:6c:52:29:bc:d6:6c:04:b9:c4:55:72:b0:
                    71:4f:2b:b4:b3:58:55:72:31:4a:91:b9:eb:df:f6:
                    ad:0e:49:d0:e1:0b:43:d0:aa:a2:7c:5c:67:0a:02:
                    a9:b9:92:86:62:5f:bb:3b:44:e2:7e:6f:9e:00:ce:
                    ed:29:7c:f2:6b:12:c4:22:dd:95:28:a0:56:8d:64:
                    dc:ff:33:89:05:b7:88:81:9c:f1:dc:c5:1b:9e:3c:
                    b4:95:77:4b:1c:6f:c4:52:82:28:9a:7a:b5:09:6e:
                    c9:8f:07:14:a4:df:2a:d1:49:a3:0b:b4:e9:c0:68:
                    b1:c4:5f:35:52:cf:d9:61:66:c3:12:73:68:32:56:
                    91:3c:d7:47:29:4a:4e:6a:c9:36:35:9a:0e:96:0c:
                    a0:d4:41:fa:ea:3d:33:b8:a7:09:39:36:13:bd:37:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:97:FE:1E:07:CC:18:9D:88:E1:12:08:78:53:D8:8E:9A:DB:DD:BA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9005026f-c513-4afb-981e-2abec7e51ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1430::/46

    Signature Algorithm: sha256WithRSAEncryption
         32:2a:49:e4:d7:21:67:41:53:fe:6c:04:c4:8b:1a:85:83:ef:
         2c:cb:9e:98:0c:e2:da:9e:8a:61:9b:8b:e6:53:13:05:c4:8f:
         a4:9b:2f:43:02:17:2d:3e:e1:bf:e3:4e:40:66:8e:b4:cb:06:
         60:3e:71:ee:5f:b6:c4:bb:45:3e:3c:e5:88:5e:d8:b5:72:5b:
         00:e8:83:70:80:ad:fd:53:e7:f2:5a:a6:53:0d:09:27:17:d9:
         34:ee:d6:9d:2c:51:44:cf:71:7a:a2:3d:ea:43:55:33:58:65:
         17:4d:f9:e3:0d:08:2d:fd:6d:f2:6e:6b:a4:ea:23:df:c6:38:
         49:b9:ef:07:22:39:13:34:eb:2d:fa:3b:f5:b3:e5:71:89:b7:
         cb:58:ad:88:8e:0c:95:25:40:9c:67:b2:d6:a4:04:f9:09:0e:
         97:02:ed:d7:37:ec:dd:84:c2:e3:b5:c9:a4:aa:97:45:da:15:
         3e:34:d0:50:e2:1b:1b:6d:07:3b:58:1a:f7:38:16:f4:c2:24:
         45:e9:51:55:06:6e:49:da:48:3a:dd:f2:75:47:e3:cb:4e:a7:
         2c:73:2b:eb:8e:e4:8e:b2:c4:d8:9b:cb:76:35:44:70:ec:90:
         54:8a:51:49:8c:bf:4f:67:de:ad:6f:c2:fd:ba:7e:82:85:d6:
         91:85:88:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:52:44 2025 by rpki-client