This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9246f00d-0400-49cc-885b-119d7327d6d0.roa
File:                     9246f00d-0400-49cc-885b-119d7327d6d0.roa (raw, json)
Hash identifier:          G0M9fRLuTuoFE5OTlUwSmw1EQS7bPZMq1Kq50wIYHRY=
Subject key identifier:   9D:C8:CD:22:60:3A:05:F7:DA:C2:C3:7E:4D:0A:2B:12:31:30:17:EB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15CEA7A4799412EAD3A0272AC8BCB9537F1B21BC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9246f00d-0400-49cc-885b-119d7327d6d0.roa
Signing time:             Tue 25 Nov 2025 14:10:48 +0000
ROA not before:           Tue 25 Nov 2025 14:10:48 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1388::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ce:a7:a4:79:94:12:ea:d3:a0:27:2a:c8:bc:b9:53:7f:1b:21:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:10:48 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=02ee9d6507c9a07048f51a78beaaab1b4d85838c3ced738f97c2bc58d81a7fce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:08:d5:f8:63:0b:5c:f1:ef:95:7d:1f:92:
                    6e:19:54:dd:4d:a2:10:3f:5d:b1:68:c4:c5:02:7d:
                    fd:a1:9d:0e:c8:79:ab:8c:46:bf:dc:29:5a:f3:ed:
                    85:b3:fd:75:24:61:90:a6:f3:a8:6e:92:d6:c6:6c:
                    d5:43:e2:ef:91:d6:06:d4:a0:cb:0a:12:c8:39:85:
                    df:9f:45:18:99:3a:11:9a:1a:3a:fa:ca:d5:ae:37:
                    e6:77:69:f9:e9:7a:8a:d3:e7:c5:1a:15:39:3f:56:
                    f9:ae:c2:dc:a1:4e:4f:01:3e:bf:96:f6:62:5f:3f:
                    21:29:e1:a1:a6:53:03:24:6e:a7:be:fb:fe:1e:83:
                    8a:09:0e:d2:f0:92:44:f8:b5:79:f8:f6:53:33:d7:
                    e7:6d:07:00:fd:82:46:96:b0:66:3e:c8:b3:8a:b8:
                    4b:d8:eb:9c:4c:a5:d8:b1:d3:7d:53:9d:f6:d0:fb:
                    bb:87:cc:7a:6a:c3:93:13:2f:61:9a:0b:df:3a:02:
                    6e:b0:3b:17:bf:94:1e:b9:14:c8:1c:ea:6f:96:09:
                    4f:ec:1d:7c:8d:08:b6:c8:10:46:b9:9c:7e:09:5b:
                    e9:1b:b3:de:19:7f:c4:83:91:c5:05:86:c2:a4:27:
                    43:e5:fc:3b:04:0f:5c:9b:03:7a:41:6f:32:c2:7e:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C8:CD:22:60:3A:05:F7:DA:C2:C3:7E:4D:0A:2B:12:31:30:17:EB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9246f00d-0400-49cc-885b-119d7327d6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1388::/46

    Signature Algorithm: sha256WithRSAEncryption
         92:39:24:70:54:f1:3a:68:4c:f4:df:83:ba:28:9c:63:4a:a1:
         36:19:c4:db:53:8b:97:71:71:6d:8d:af:b6:0d:b1:11:c4:fb:
         18:ac:5c:78:59:0d:b5:03:27:58:1c:4f:8f:c2:41:aa:58:29:
         67:87:a5:60:51:51:24:0e:54:77:44:41:f2:55:3d:cc:b0:fa:
         51:24:fd:03:f8:5b:68:72:43:1c:d4:66:41:67:fc:78:0f:9b:
         20:1f:df:2b:22:d2:57:10:de:b9:4b:ae:f8:30:e9:ad:4b:5f:
         e5:ce:e6:7b:3b:29:c4:d6:81:64:a0:18:81:b2:0b:c1:50:e0:
         0f:b8:bd:07:19:8f:df:04:ca:79:20:7c:de:1d:06:bb:75:3a:
         a4:06:7b:33:89:8c:c3:a5:cc:f6:58:45:56:a9:47:b5:fe:df:
         26:7a:16:a8:42:75:85:58:e0:50:11:3c:14:32:85:2b:37:fd:
         3a:35:b2:53:8c:fe:53:36:74:b1:20:83:06:47:ae:6f:7a:41:
         86:99:0f:c7:d3:42:33:ce:09:b8:e6:f9:0a:4f:f3:15:8d:e0:
         ea:6a:15:33:d5:f2:df:f7:16:ac:7b:76:24:df:90:90:c6:5b:
         79:ff:55:b0:9d:93:b8:ad:0e:1b:1c:65:90:5a:7a:b6:3f:06:
         a5:88:a7:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:12:53 2025 by rpki-client