This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9be00ba3-e666-4bc8-b24b-2042e8474186.roa
File:                     9be00ba3-e666-4bc8-b24b-2042e8474186.roa (raw, json)
Hash identifier:          qAqJVYYQm6hCFI529bK6zVMQnFH4ZSO3qLhncyMVeVY=
Subject key identifier:   70:65:28:11:6F:C2:11:89:A4:A4:2C:2C:59:B8:E8:56:2A:60:7F:01
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       58D756CD1F325E011BEDE31EB7A2D01E8BB127FA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9be00ba3-e666-4bc8-b24b-2042e8474186.roa
Signing time:             Tue 25 Nov 2025 04:11:34 +0000
ROA not before:           Tue 25 Nov 2025 04:11:34 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3760::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d7:56:cd:1f:32:5e:01:1b:ed:e3:1e:b7:a2:d0:1e:8b:b1:27:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:11:34 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a3bab2b0b5f621aaddc2e04475a317bca6b72e4f1af31bbc59c660ff19abcdbd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:11:02:bc:c7:09:4b:63:00:c5:30:fa:46:3f:
                    0e:c7:b9:28:d2:8d:c2:40:53:9e:91:22:42:54:b5:
                    1b:69:b0:7f:2f:0e:2b:c9:f6:f1:60:06:0e:92:71:
                    02:43:73:fc:6b:05:99:17:ee:67:ee:ad:9c:e3:37:
                    ef:15:83:3b:6d:33:4a:48:83:c8:10:71:77:5f:7e:
                    3a:37:79:f6:92:93:a6:8d:6d:10:cc:92:19:8d:46:
                    b1:43:45:55:82:00:4a:1d:e8:29:31:43:24:8d:fd:
                    4a:9e:bb:a0:4c:29:d2:b1:b3:e9:d8:e6:82:3e:bd:
                    73:20:2f:da:73:c4:58:87:e8:e6:d3:fb:33:0c:3e:
                    ec:f8:65:e8:3f:38:a3:bb:80:d7:b6:ea:2e:29:da:
                    72:79:de:6b:bc:bc:94:56:35:b6:d2:63:83:3d:b3:
                    8a:f8:95:69:8c:5f:4f:b1:a2:77:97:82:fe:44:30:
                    ff:96:34:9e:f2:b5:a9:62:bf:21:2d:79:b7:ac:2a:
                    dd:d4:b3:45:de:64:69:6b:a0:56:56:33:34:be:26:
                    1b:bf:91:6d:a4:71:3c:86:2d:81:d7:b2:f0:1f:91:
                    16:cd:a9:21:c7:e6:1d:1f:c1:30:01:e8:90:79:f0:
                    bf:84:f8:c4:3d:5c:f6:48:31:0c:c4:ba:ce:59:e5:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:28:11:6F:C2:11:89:A4:A4:2C:2C:59:B8:E8:56:2A:60:7F:01
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9be00ba3-e666-4bc8-b24b-2042e8474186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3760::/45

    Signature Algorithm: sha256WithRSAEncryption
         ba:f3:1f:d0:28:cc:a7:e5:86:c0:5f:ac:11:4a:28:5f:6d:0a:
         75:9f:a7:4c:c1:15:d8:62:40:a7:ad:6a:5c:2c:79:aa:ad:33:
         af:70:1d:20:d3:5f:04:6d:b2:b8:11:01:33:d2:be:2e:bb:1f:
         41:cf:2c:bb:d9:56:3d:c6:d5:a0:3d:d4:8c:23:58:c0:10:11:
         ea:1d:05:ba:60:81:4b:0c:eb:73:e4:cf:31:b9:6e:b7:0c:b7:
         62:7e:20:d9:23:ac:d6:6c:67:4b:1d:1b:6b:cd:c1:cd:eb:07:
         6a:c7:72:7c:33:40:53:4d:54:07:ef:4f:7e:8c:8f:78:09:9b:
         92:24:4d:f4:f5:68:c7:29:a6:12:a9:f9:c3:6b:3f:9a:5e:62:
         67:d0:fd:1c:d5:ac:ba:fd:a4:4d:1c:7d:4f:0d:81:1c:ce:aa:
         9d:6b:35:60:da:b4:0b:a7:d1:33:60:55:fe:7c:a1:3b:e5:63:
         8f:2c:33:82:c8:bf:78:a0:5b:93:db:88:35:51:15:15:ee:75:
         4a:bf:bf:e2:ff:eb:d8:e9:14:63:a6:b8:0e:4d:6d:23:34:07:
         4b:41:48:fe:0a:96:70:19:8c:5e:8f:99:29:08:7b:01:88:c4:
         1a:30:35:7e:a3:20:7e:50:33:76:31:a8:54:2d:bd:60:4b:7d:
         19:92:ac:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:10 2025 by rpki-client