This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9310ee6c-1f32-492a-a6f2-4517a86b0be4.roa
File:                     9310ee6c-1f32-492a-a6f2-4517a86b0be4.roa (raw, json)
Hash identifier:          7VzWGHspkktTTF9IzO7NLJaxHJ+iWujzZ8qnV13h7Ds=
Subject key identifier:   76:CF:1C:38:A0:F3:DD:88:08:04:C0:02:E9:A1:85:D4:1D:04:BC:DF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       03661828013A74E1EFD9C8F096410F94D39368C1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9310ee6c-1f32-492a-a6f2-4517a86b0be4.roa
Signing time:             Mon 24 Nov 2025 03:00:05 +0000
ROA not before:           Mon 24 Nov 2025 03:00:05 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1c3a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:66:18:28:01:3a:74:e1:ef:d9:c8:f0:96:41:0f:94:d3:93:68:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:00:05 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=92d47d5962b78635cb5ed6cfbb60e7491881e74992a6cc495551cfc356b4734c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:90:d3:f3:e3:0c:35:f8:47:3a:9e:f2:25:
                    f9:38:97:47:3d:84:21:85:ae:67:83:8b:96:47:ca:
                    a0:fd:bd:6d:0d:70:89:11:cb:1a:31:5b:9b:e7:9b:
                    9c:be:9e:ab:71:03:95:30:bb:0c:40:58:bd:87:b1:
                    39:da:9c:d7:de:08:89:bc:c5:03:ca:b7:a9:82:f4:
                    f8:14:b2:ef:3d:8f:22:ac:f0:8e:0c:3b:a7:b2:f6:
                    55:57:a3:b7:a5:86:3a:c6:c0:11:c8:a3:1e:d3:61:
                    73:0f:42:47:17:50:0e:d6:74:b5:8d:3d:14:38:d3:
                    d2:a0:3c:83:af:a3:58:b7:85:23:81:88:97:0a:86:
                    59:dc:66:6d:4c:ba:39:0c:a3:5f:b9:0d:7a:2c:27:
                    b0:74:0e:70:a5:19:e5:ef:0f:55:88:d5:fb:88:e2:
                    2e:ab:02:66:71:59:3c:dc:86:2e:24:f2:b8:45:6f:
                    56:90:1d:39:f1:a2:cd:84:fd:56:cb:e9:c8:0a:74:
                    14:3b:18:13:46:1e:9d:71:a8:dc:50:49:96:83:5b:
                    77:a7:30:ea:6e:55:55:60:c1:29:65:33:51:34:90:
                    94:4d:bd:9c:94:ca:4d:00:3f:b4:f7:6d:1e:2e:49:
                    7a:9f:80:5a:d9:6e:31:57:d9:04:f8:9e:ab:04:5d:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:1C:38:A0:F3:DD:88:08:04:C0:02:E9:A1:85:D4:1D:04:BC:DF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9310ee6c-1f32-492a-a6f2-4517a86b0be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1c3a::/47

    Signature Algorithm: sha256WithRSAEncryption
         65:50:49:7a:d1:f4:f3:45:10:0e:83:aa:f7:8f:cd:53:40:8c:
         fb:a5:89:15:e6:0a:0f:eb:ec:6b:29:06:d4:10:1a:5b:fa:4b:
         ff:ae:79:18:8d:d1:32:c4:43:72:14:44:20:88:e8:ce:d6:e5:
         5c:2a:89:fe:61:8d:de:0c:f8:c4:c7:5f:19:03:4d:e1:44:24:
         d3:6e:03:f6:5c:98:6d:dd:08:70:c9:5e:85:ed:60:de:21:52:
         3c:49:ae:1b:89:78:24:df:47:6f:63:ae:6c:91:31:32:5e:11:
         25:d2:fd:32:7e:91:4e:bf:cd:e0:47:de:af:f7:89:72:b3:cc:
         04:55:a9:79:fb:6a:48:70:72:7a:bf:9f:4b:36:a3:de:9d:f6:
         ce:9b:90:39:e1:54:de:61:32:d3:8e:9c:93:1f:19:d2:76:ff:
         89:29:d9:34:ec:cd:e1:57:2b:5b:ff:a3:b7:af:17:11:97:26:
         de:71:91:ca:45:14:ee:45:72:cb:74:f1:ec:dd:39:10:9e:5c:
         f1:53:da:1c:e6:ad:e9:62:9a:04:1f:76:77:ee:31:eb:84:92:
         01:f8:1c:0e:40:fd:ae:34:99:ea:59:d2:a3:05:b3:0d:ae:50:
         5a:6f:a6:d1:4e:5e:0c:e1:d8:ed:cb:4f:34:dc:9e:f2:36:2a:
         d7:91:45:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:42 2025 by rpki-client