This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c05ed90-3195-49b4-9874-e5b28669cde5.roa
File:                     9c05ed90-3195-49b4-9874-e5b28669cde5.roa (raw, json)
Hash identifier:          1fAKOhAFQV3gwKk/ARokVfJGxQQsobLrIjqWarCH7fk=
Subject key identifier:   87:DC:E1:BF:F3:42:9B:55:1A:47:7B:1E:8D:12:8E:91:D9:9F:0A:DF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5F206FC8A4D8EC1D8D2168C7C50BA77213E81DF2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c05ed90-3195-49b4-9874-e5b28669cde5.roa
Signing time:             Tue 25 Nov 2025 11:12:04 +0000
ROA not before:           Tue 25 Nov 2025 11:12:04 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1558::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:20:6f:c8:a4:d8:ec:1d:8d:21:68:c7:c5:0b:a7:72:13:e8:1d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 11:12:04 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=bc9c619608bf93aaac19663b808620519f61cd4f813d8581d8fc11ea97bf406e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:2a:17:ca:60:f3:e0:e4:80:e5:68:74:41:
                    69:8e:59:68:69:db:ce:9f:77:94:40:dd:83:76:67:
                    6f:6d:6c:40:8f:ca:1e:b0:d7:34:f9:02:09:af:f2:
                    4a:13:f8:3f:b4:8a:03:20:69:2f:79:86:3e:27:0e:
                    f6:2a:fc:1e:13:ea:b0:94:a9:cf:38:36:62:77:ff:
                    56:ec:3a:c2:c4:e7:2e:70:f0:6a:6d:13:db:30:27:
                    f2:1b:10:df:2e:10:6c:4e:c9:13:f9:ce:b7:f9:8d:
                    cd:88:97:54:19:1b:14:f1:a7:fe:91:47:15:42:2d:
                    a5:3a:ab:7c:c1:0e:15:80:24:ec:c0:a8:13:bf:77:
                    c3:20:98:89:de:db:22:2f:44:76:86:87:c7:eb:30:
                    9d:3c:b4:74:08:55:d9:64:da:25:9b:b5:86:3b:ce:
                    d1:0a:8f:24:7d:e0:51:75:c0:56:0b:20:d7:af:fe:
                    68:bf:12:c7:51:ac:0e:90:5d:ac:1b:66:40:9a:7d:
                    e2:f2:12:2d:ca:1c:ab:77:95:da:5b:90:b1:34:49:
                    ea:34:1e:b9:d6:ad:71:fc:80:9b:a5:3e:0a:3c:51:
                    66:29:be:5c:56:dd:6e:1c:03:dc:36:01:e1:c4:fa:
                    76:eb:34:d1:d5:b9:31:d4:e3:6e:d4:e1:0b:de:79:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DC:E1:BF:F3:42:9B:55:1A:47:7B:1E:8D:12:8E:91:D9:9F:0A:DF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c05ed90-3195-49b4-9874-e5b28669cde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1558::/46

    Signature Algorithm: sha256WithRSAEncryption
         2a:2f:21:48:96:73:a3:1f:e2:45:36:10:ee:4b:8f:38:3c:11:
         16:d4:e8:89:cf:90:37:ae:96:2b:bf:97:2f:31:8b:c8:3f:cc:
         d5:86:b6:91:fc:dc:fe:d5:0a:08:43:39:b4:f4:16:20:df:5f:
         8d:fd:aa:63:f7:35:4f:2e:bd:ea:37:89:77:aa:88:82:a3:d8:
         7e:76:5b:55:52:9a:a8:d6:bd:ec:52:43:b0:71:ab:97:08:22:
         a9:db:5c:cb:80:67:39:b4:e2:7d:65:b8:23:e4:43:cd:f0:b3:
         a8:a2:1d:29:c9:76:21:2b:b5:17:ff:5d:e8:ab:22:8a:8b:61:
         41:9a:01:15:f3:05:5a:dc:26:42:a2:7b:0e:ec:e1:36:c9:59:
         2d:f8:e0:54:8f:bd:22:a0:45:1f:93:4b:16:93:52:75:db:68:
         2b:a5:79:1b:43:ef:5c:81:2d:55:36:82:9d:e9:e4:cd:26:fd:
         bc:b1:0c:01:38:88:40:88:23:f0:51:95:5e:61:3b:6b:19:bf:
         f6:c6:58:92:be:5e:15:25:3d:75:1f:2e:ab:25:5b:f2:cb:5a:
         42:b6:8b:cb:c0:9f:c8:3d:e3:79:f7:32:4d:98:27:3d:ff:af:
         1f:52:61:7b:3a:b5:a8:c1:9c:4e:f9:f0:0a:65:84:ef:0d:2b:
         9b:dc:1d:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:43:42 2025 by rpki-client