This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c3eaa00-e47e-4d2a-a238-c5a40aad58e5.roa
File:                     9c3eaa00-e47e-4d2a-a238-c5a40aad58e5.roa (raw, json)
Hash identifier:          k/U8JI4/rEIfjg3xasW3z2IaboS2Ell/g0H2Ln+TlHg=
Subject key identifier:   04:29:57:D3:95:9C:EE:B4:AF:AF:0A:D0:76:41:B2:6E:D9:18:13:BC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1151F5CB5B0FCBD3C9EB467CFE054E6E970E2197
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c3eaa00-e47e-4d2a-a238-c5a40aad58e5.roa
Signing time:             Tue 25 Nov 2025 03:11:01 +0000
ROA not before:           Tue 25 Nov 2025 03:11:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3484::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:51:f5:cb:5b:0f:cb:d3:c9:eb:46:7c:fe:05:4e:6e:97:0e:21:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 03:11:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=09cdabfd1261577c48d25a9796f6ab14043ae91aebbddb50c1449efdaa95afdb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:12:7d:27:24:38:4f:48:5e:be:97:89:dd:
                    98:ab:ce:f6:36:72:da:dc:2a:02:a8:c7:a3:6c:b7:
                    58:05:6d:4b:af:9a:e6:82:37:bc:7a:ed:f4:c5:f3:
                    ad:f9:89:6f:15:4d:87:1e:4e:46:11:42:9f:6e:f9:
                    34:0d:ec:cf:01:cb:ce:b0:b0:f2:5b:11:eb:6d:d0:
                    a2:1a:76:be:70:dd:26:7b:97:8d:d9:c1:08:1c:8d:
                    2e:e5:49:ff:d4:4c:ad:6d:1f:4a:f5:21:53:91:15:
                    8f:d1:04:1d:1d:05:7c:27:62:51:46:c2:25:ab:57:
                    5e:b4:10:25:40:0e:a2:3a:cb:c0:1b:b7:61:47:51:
                    17:72:e9:9a:5a:8b:dd:3c:08:66:d3:f7:97:b4:36:
                    8a:b8:74:da:58:8f:da:06:bf:fe:37:86:9e:2d:5e:
                    94:bd:8d:01:44:f9:68:2e:69:7b:80:60:03:87:e0:
                    42:bc:50:79:4e:61:d4:e0:d3:a0:90:f0:87:6e:e6:
                    34:0f:ea:55:dd:3b:b4:fa:7f:50:28:30:5d:86:f0:
                    78:93:c0:64:27:62:f6:23:3d:8a:9c:6e:00:47:f0:
                    a2:41:18:c6:85:21:5b:3c:51:f9:25:9b:6c:0b:95:
                    77:f1:9a:df:8c:6d:5b:3e:44:dc:54:d3:f0:24:d5:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:57:D3:95:9C:EE:B4:AF:AF:0A:D0:76:41:B2:6E:D9:18:13:BC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c3eaa00-e47e-4d2a-a238-c5a40aad58e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3484::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:de:ba:5c:a1:dc:f9:3e:ce:4d:c8:d9:13:9e:ac:3a:8d:0b:
         8a:d1:d1:78:19:b7:49:4c:8c:6f:50:ee:0a:0c:9b:c5:2b:3f:
         9d:f8:f7:7d:bb:68:74:86:75:98:0d:89:75:f5:68:63:ad:27:
         1a:c9:f1:5c:b4:e1:95:45:58:8c:1a:71:e6:7d:56:9d:53:f5:
         1e:fa:b0:28:37:62:42:ab:8a:ac:a3:1d:24:91:3b:43:e4:26:
         bd:c3:8a:2a:a1:1c:8a:05:48:3d:58:93:f7:e6:02:39:87:f1:
         24:6a:5d:76:d6:60:0f:e1:d3:58:f5:40:2b:99:63:ff:3b:be:
         a5:26:89:f1:25:9e:d5:b9:28:1b:ab:ce:a5:dd:6d:ac:bc:9e:
         a8:a3:6d:15:ee:0d:72:51:c1:f3:b8:13:a3:0b:e3:c3:3d:3b:
         bc:fa:7b:d2:93:9b:ba:ff:b2:63:1c:aa:6e:1b:8e:58:8a:2c:
         2d:b8:c4:45:17:20:58:12:48:08:10:24:68:99:39:27:47:76:
         cc:06:29:4c:27:0b:a7:a6:15:3e:68:63:3d:d6:2b:fe:6e:20:
         73:1c:f3:8d:6b:18:46:09:95:8e:57:32:df:97:3b:b1:cc:29:
         bf:c0:03:ac:d1:1e:0a:d3:0d:53:34:99:b7:8c:4c:2b:c3:44:
         a3:d4:c7:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:06:49 2025 by rpki-client