This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d9aa82a-0b12-4511-b670-01228202d004.roa
File:                     9d9aa82a-0b12-4511-b670-01228202d004.roa (raw, json)
Hash identifier:          yUj9QcJf8413/rp4SzaSTUpZaKBzCxRMo/WN888o488=
Subject key identifier:   FE:DE:39:CD:17:39:87:6D:FE:D6:1C:F1:CD:00:E9:6A:89:FF:64:93
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2027EE862D1B29D902BE2FA5EAEBF142844070B8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d9aa82a-0b12-4511-b670-01228202d004.roa
Signing time:             Tue 25 Nov 2025 09:20:53 +0000
ROA not before:           Tue 25 Nov 2025 09:20:53 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b24::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:27:ee:86:2d:1b:29:d9:02:be:2f:a5:ea:eb:f1:42:84:40:70:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 09:20:53 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=63ef48413aa215eb9926b2b7df78842ba62bcdd18587a530de984677d5a817ec, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:3a:a9:84:16:a0:48:43:1b:4f:d3:d8:69:
                    3c:52:d9:ef:7f:b1:aa:38:24:21:b5:59:72:bd:df:
                    1b:cc:c3:86:3b:40:80:d7:a2:c3:24:ba:fd:ff:a5:
                    59:2d:67:9d:51:05:b2:56:85:ac:db:18:fa:5c:01:
                    14:a2:1b:51:da:01:c4:1f:43:ed:aa:6b:45:b1:24:
                    3b:07:59:d7:ff:85:db:6a:77:a6:c9:68:ae:cf:a8:
                    65:b8:d0:7e:4e:50:cf:f0:1b:c4:b7:d1:ff:5e:aa:
                    86:03:da:ed:50:59:dc:66:d2:29:d4:a4:a6:0f:08:
                    70:c9:98:33:8c:19:e2:af:62:5c:34:95:fe:b0:d4:
                    1c:22:80:ac:6e:9f:1e:57:4d:96:0d:2d:9e:c9:4d:
                    51:53:23:0f:2b:8b:f7:b7:89:71:f3:74:7f:84:70:
                    bd:c2:41:5e:74:00:a4:4c:c3:d9:34:63:d8:2e:1b:
                    7b:24:38:3c:88:13:10:c2:25:38:75:cf:0c:a0:e1:
                    0c:95:69:43:7d:1c:6c:71:d6:6b:1a:7d:80:6f:bd:
                    5e:4f:4a:0b:b3:00:fc:3d:bc:63:79:35:c9:83:ae:
                    35:99:3a:9e:6d:5f:5c:00:73:df:d2:be:3c:e4:d7:
                    b2:ad:2c:2f:26:b7:b8:49:e8:9d:88:08:8b:d6:80:
                    46:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DE:39:CD:17:39:87:6D:FE:D6:1C:F1:CD:00:E9:6A:89:FF:64:93
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d9aa82a-0b12-4511-b670-01228202d004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b24::/47

    Signature Algorithm: sha256WithRSAEncryption
         48:73:22:62:5e:91:2b:4b:0e:3b:41:7e:aa:bd:55:c2:f6:06:
         fb:7d:dc:11:68:9b:2a:aa:92:61:80:ea:50:bc:9b:ea:c9:e6:
         76:35:01:7a:0d:c1:39:37:92:bb:a9:ec:30:f1:5b:6c:e5:97:
         f2:f0:0b:2e:09:1c:7f:38:2d:22:22:7a:22:b6:96:0f:64:14:
         99:9c:3f:a2:f7:5a:d3:b3:17:60:a3:0b:9c:21:3f:05:52:15:
         b1:0c:87:75:ea:cd:a1:af:2f:1d:f1:c8:ed:8c:32:bb:9b:8a:
         f8:84:90:34:d4:09:75:98:6b:8a:0c:c3:67:e1:11:65:77:e1:
         83:26:aa:0d:71:14:d0:dc:66:03:7c:02:06:ff:63:46:61:3a:
         ba:23:c0:55:e0:6e:13:49:0f:12:ce:6b:b4:ba:96:90:48:a1:
         2d:e7:51:ee:fe:e1:98:69:94:8f:78:21:32:0d:98:5c:7b:73:
         cf:13:25:5a:d1:47:80:0e:25:8d:31:dd:40:eb:7d:d4:25:c3:
         92:44:4f:f7:42:43:7a:b5:52:f9:b1:f6:32:af:8d:33:b6:97:
         20:ac:a4:5a:d7:d4:61:71:b3:0b:e1:1d:01:1f:f2:56:c8:32:
         3d:fd:8e:5c:ea:02:22:5d:98:f8:ce:30:14:4a:1c:fa:78:51:
         3a:5e:35:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:00 2025 by rpki-client