This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c81e489-fcfe-4b75-8547-c6fa81843451.roa
File:                     9c81e489-fcfe-4b75-8547-c6fa81843451.roa (raw, json)
Hash identifier:          M2KTxvkFj41zW3dU+t+Alhw5vEkXNa17InWdOOl3+fA=
Subject key identifier:   E3:68:5D:DC:41:F7:45:30:53:B6:9F:AD:F3:E3:CA:8D:8D:1D:F8:65
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4E00E39C9FEC4EB7420C1ED256FA00213CA92D59
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c81e489-fcfe-4b75-8547-c6fa81843451.roa
Signing time:             Tue 25 Nov 2025 06:40:14 +0000
ROA not before:           Tue 25 Nov 2025 06:40:14 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3bb8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:00:e3:9c:9f:ec:4e:b7:42:0c:1e:d2:56:fa:00:21:3c:a9:2d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:40:14 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=0e87ad4b9cd69a5f4632d1deeaeee0b09e054be7ac3223bd01556b7f8a74b5b7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:c4:1b:86:b3:c2:aa:c0:e1:ba:3e:a7:1a:
                    22:e2:a0:c7:29:2f:ee:ed:29:8f:b0:6c:e9:b3:68:
                    f1:09:54:ea:81:af:dc:fd:14:c3:54:7c:6d:7f:ec:
                    0b:1c:59:4c:a4:03:fd:97:93:cf:28:6b:d5:36:82:
                    29:7d:d2:7c:1b:b8:ba:bf:83:37:61:f4:68:d2:b6:
                    e3:66:e1:09:c9:5b:2e:4d:f0:df:f5:ea:c3:d7:07:
                    4b:a0:eb:07:55:a5:05:de:4b:4f:30:00:e1:94:ae:
                    73:77:1d:93:93:2e:7f:47:62:bf:27:a1:fe:82:88:
                    b4:c1:05:c4:f1:ad:12:9c:93:3c:43:dc:21:69:9f:
                    81:6d:51:e2:85:28:45:33:a8:e6:16:ea:9b:8b:23:
                    bb:8b:a7:7e:0d:6b:fa:63:dc:e6:55:78:ef:d7:2e:
                    53:e0:a6:f0:b0:d6:c1:f1:31:a8:11:47:44:f5:20:
                    52:0a:0a:b5:6d:a6:99:cf:0c:60:f8:42:3d:17:0a:
                    a8:57:11:ce:db:23:28:bd:05:51:54:82:64:30:69:
                    6d:30:c5:81:b9:68:b0:75:0b:d7:6f:b2:1d:45:5a:
                    57:88:34:52:c7:53:e2:e4:f0:fb:a1:f7:2e:2a:9d:
                    2e:ca:92:65:f5:09:5f:cc:1e:28:74:84:78:fd:11:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:68:5D:DC:41:F7:45:30:53:B6:9F:AD:F3:E3:CA:8D:8D:1D:F8:65
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c81e489-fcfe-4b75-8547-c6fa81843451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3bb8::/47

    Signature Algorithm: sha256WithRSAEncryption
         90:be:be:04:75:20:3e:eb:dc:37:79:b7:7d:4b:a5:b0:01:64:
         f5:5d:cd:35:51:48:eb:67:f7:fb:95:06:f8:d3:f4:e8:3f:71:
         9f:f9:32:bd:81:71:b3:a2:29:c8:1f:5d:4d:b3:04:97:a6:f1:
         d5:f5:11:92:c1:57:69:19:06:90:95:9b:52:5c:e2:11:48:d6:
         5d:ba:af:44:6e:9c:c4:88:98:f0:a7:3d:be:fb:d4:38:1b:df:
         94:39:57:fc:f8:b5:f3:5b:d6:0d:42:aa:04:f6:bb:32:81:e8:
         df:fe:dd:94:1f:fa:f3:e7:92:d9:e5:e1:f1:a4:43:6c:32:00:
         45:53:78:15:f9:62:50:29:c7:93:8c:4e:63:78:2f:77:56:92:
         d2:4f:06:4d:06:2c:e7:f6:b8:ab:c1:70:f4:6e:45:3c:7a:58:
         c1:2b:bd:dc:0c:2f:05:c2:c9:0d:c2:6c:4f:66:06:f9:65:75:
         5a:ed:e5:0c:4f:27:cc:e6:e9:28:e4:04:3a:db:ca:0d:6f:fc:
         17:1b:29:04:08:ab:83:9b:2d:de:37:1b:e7:f9:9a:c5:3f:1e:
         b5:29:f7:ea:e7:4f:d8:f1:35:e4:7f:49:42:07:21:48:64:4d:
         bf:f1:31:25:aa:5a:e0:3b:84:0c:b0:59:eb:ff:f3:55:5b:44:
         69:78:f1:5b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTgDjnJ/sTrdCDB7SVvoAITypLVkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDY0MDE0WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZTg3YWQ0YjljZDY5YTVmNDYzMmQxZGVlYWVlZTBiMDll
MDU0YmU3YWMzMjIzYmQwMTU1NmI3ZjhhNzRiNWI3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCu5MQbhrPCqsDhuj6nGiLioMcpL+7tKY+wbOmzaPEJVOqB
r9z9FMNUfG1/7AscWUykA/2Xk88oa9U2gil90nwbuLq/gzdh9GjStuNm4QnJWy5N
8N/16sPXB0ug6wdVpQXeS08wAOGUrnN3HZOTLn9HYr8nof6CiLTBBcTxrRKckzxD
3CFpn4FtUeKFKEUzqOYW6puLI7uLp34Na/pj3OZVeO/XLlPgpvCw1sHxMagRR0T1
IFIKCrVtppnPDGD4Qj0XCqhXEc7bIyi9BVFUgmQwaW0wxYG5aLB1C9dvsh1FWleI
NFLHU+Lk8Puh9y4qnS7KkmX1CV/MHih0hHj9EfQdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU42hd3EH3RTBTtp+t8+PKjY0d+GUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzljODFlNDg5LWZjZmUtNGI3NS04NTQ3LWM2ZmE4MTg0MzQ1MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAO7gwDQYJKoZIhvcNAQELBQADggEBAJC+vgR1ID7r3Dd5t31LpbAB
ZPVdzTVRSOtn9/uVBvjT9Og/cZ/5Mr2BcbOiKcgfXU2zBJem8dX1EZLBV2kZBpCV
m1Jc4hFI1l26r0RunMSImPCnPb771Dgb35Q5V/z4tfNb1g1CqgT2uzKB6N/+3ZQf
+vPnktnl4fGkQ2wyAEVTeBX5YlApx5OMTmN4L3dWktJPBk0GLOf2uKvBcPRuRTx6
WMErvdwMLwXCyQ3CbE9mBvlldVrt5QxPJ8zm6SjkBDrbyg1v/BcbKQQIq4ObLd43
G+f5msU/HrUp9+rnT9jxNeR/SUIHIUhkTb/xMSWqWuA7hAywWev/81VbRGl48Vs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:05 2025 by rpki-client