This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/95ff131f-fe96-47bc-927d-1cbca1a01a0d.roa
File:                     95ff131f-fe96-47bc-927d-1cbca1a01a0d.roa (raw, json)
Hash identifier:          U3hMHsrWnOjJYWJDzEGzGbHwQfr9cIHGXimfZB/CQqc=
Subject key identifier:   47:13:0A:A6:DB:41:E5:C5:D8:B5:0A:C9:7B:12:17:12:E3:72:BA:7F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       563EDC9A944F3B7424E7FD76C89E308297C30A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/95ff131f-fe96-47bc-927d-1cbca1a01a0d.roa
Signing time:             Mon 24 Nov 2025 05:11:36 +0000
ROA not before:           Mon 24 Nov 2025 05:11:36 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a5a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3e:dc:9a:94:4f:3b:74:24:e7:fd:76:c8:9e:30:82:97:c3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:11:36 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=6ba9f55b885ed6d4c1df28e1a51466f44d4d3c547c083d24656858da210db46a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:e4:dd:87:bc:b6:84:47:86:3b:45:74:f7:
                    08:0a:24:40:91:b5:f8:74:bd:93:56:78:55:ba:09:
                    af:d1:0b:01:05:13:dc:f2:da:39:c7:b3:40:8f:3b:
                    1a:f6:1c:2c:90:e1:3f:08:ac:62:2b:06:59:28:84:
                    98:4d:47:f7:3b:23:41:de:62:d5:f9:0a:74:3b:de:
                    8c:b1:16:8f:73:a4:29:cb:ac:88:05:de:a7:a6:87:
                    95:cb:14:0d:bf:f1:2c:e2:a8:95:ea:b0:75:57:bb:
                    da:34:95:87:c5:e1:30:fb:e9:60:f2:7e:7c:1d:07:
                    6b:26:43:22:d3:21:d1:cb:5b:6d:74:95:bf:64:3c:
                    98:24:f0:8f:d8:4b:9f:fb:89:d9:ce:26:dc:90:d3:
                    ad:90:90:cb:16:a6:6e:24:ee:7f:40:96:b0:00:54:
                    a6:a4:17:38:f5:75:be:79:4e:52:48:90:55:77:15:
                    4a:21:3d:29:c7:43:a5:34:31:41:72:f3:8a:8d:17:
                    7a:c0:af:24:b9:eb:96:8c:1e:44:62:c3:c8:07:c9:
                    a9:8e:99:32:af:ce:64:65:d4:ea:b5:72:dc:29:dc:
                    57:72:07:30:2d:6a:88:21:e5:8d:7a:4c:93:22:83:
                    34:eb:50:03:02:ed:71:bd:eb:aa:18:08:9c:2b:3d:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:13:0A:A6:DB:41:E5:C5:D8:B5:0A:C9:7B:12:17:12:E3:72:BA:7F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/95ff131f-fe96-47bc-927d-1cbca1a01a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a5a::/47

    Signature Algorithm: sha256WithRSAEncryption
         71:5f:23:d6:19:6c:48:e4:8b:8b:d8:d9:04:84:bb:8f:b1:fe:
         12:cf:1a:c1:0a:55:4f:17:0a:25:dd:d1:07:95:e7:5e:c3:1a:
         14:b9:a9:31:16:51:10:a5:ff:07:56:24:09:a1:d7:05:fe:9a:
         b1:bd:6a:45:7a:4a:3c:c8:48:bd:9c:4c:49:d9:ec:15:83:4d:
         54:59:27:fc:9a:7c:c6:6a:de:61:88:75:e1:6e:4f:93:88:bd:
         26:97:0b:10:1b:bd:0e:20:08:a4:d6:23:1d:79:d0:e7:29:55:
         4a:0f:d6:3f:b8:b5:7f:a4:f5:01:ac:ea:af:d3:fa:90:84:9d:
         9f:e3:0b:ea:67:25:ee:d4:8a:56:64:0f:14:13:41:32:02:df:
         e1:68:90:f2:c0:78:95:db:d6:55:28:76:14:7d:94:2e:85:cf:
         8f:8e:82:21:f7:e8:98:21:a5:13:b8:03:6a:06:20:67:d7:f1:
         a8:f3:10:af:e4:c6:3f:34:08:b7:8f:97:ba:a9:32:df:5c:d4:
         1a:02:d5:21:d7:68:8d:45:b9:93:24:0f:64:e6:43:c1:8a:5e:
         2e:04:e6:a6:29:5d:a0:b3:8e:12:9a:a5:e8:dd:0c:fc:dc:07:
         e0:ac:4d:d6:51:60:6a:ea:be:e5:e6:2a:38:0e:ee:f0:3e:96:
         25:f4:d1:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:27:11 2025 by rpki-client