This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f753ba6-e219-4101-850e-5f16c593b393.roa
File:                     9f753ba6-e219-4101-850e-5f16c593b393.roa (raw, json)
Hash identifier:          K5lUbdm865t3FmKxWBp0Pbtp2kCEGNv92GoYQhXtLvE=
Subject key identifier:   A6:C5:DC:54:91:00:FA:9E:13:7A:8D:89:89:C6:1A:C6:79:1A:B9:04
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5A148973C3E609926479984BFD0F19A706075C90
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f753ba6-e219-4101-850e-5f16c593b393.roa
Signing time:             Tue 25 Nov 2025 16:21:02 +0000
ROA not before:           Tue 25 Nov 2025 16:21:02 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33c8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:14:89:73:c3:e6:09:92:64:79:98:4b:fd:0f:19:a7:06:07:5c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:21:02 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=51ba7c98055761d5b92ed6229b4c07219535e78f81af6a01538b6792a2da637d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0e:3f:59:e2:cf:95:ce:a8:b8:c4:de:b7:6c:
                    3e:e8:a5:fe:0a:09:3c:45:77:f6:88:fe:1b:a9:e0:
                    f3:3e:14:2c:73:59:e8:ce:e8:1b:9b:2c:07:f0:08:
                    2d:dc:cb:3e:65:8a:ac:a4:3e:09:e4:69:f6:77:31:
                    c4:31:b9:19:7f:8d:d4:86:50:c5:34:4d:6a:fe:5b:
                    52:d7:bc:a5:62:31:bf:be:35:23:08:09:5a:05:c9:
                    f8:d4:e8:51:29:50:13:cf:7a:e4:f0:74:30:2f:2f:
                    39:22:6a:15:fe:c0:60:33:ae:16:16:21:02:ff:9e:
                    a6:5d:9e:f5:01:4f:15:87:80:86:15:e4:b4:da:8b:
                    17:58:a4:1d:56:30:3f:09:e0:04:c9:26:49:a8:7e:
                    4e:0f:c1:5a:e9:ee:bf:19:2e:1d:26:4f:aa:56:67:
                    cd:76:70:3d:d3:ff:24:9f:b1:e1:01:a5:e9:73:f2:
                    2a:33:80:fe:5e:0a:19:22:08:0f:60:1d:6f:da:36:
                    32:e4:43:24:c6:00:be:15:a0:9a:4b:ea:12:35:f5:
                    81:0a:ca:93:af:06:ae:74:ce:31:47:50:c9:95:e1:
                    a8:cd:51:10:ab:e6:e6:c6:f9:1b:e0:72:9c:b4:7b:
                    fc:5e:08:80:25:6d:6f:53:96:78:38:22:43:ef:01:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C5:DC:54:91:00:FA:9E:13:7A:8D:89:89:C6:1A:C6:79:1A:B9:04
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f753ba6-e219-4101-850e-5f16c593b393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33c8::/45

    Signature Algorithm: sha256WithRSAEncryption
         1f:06:05:4d:a8:37:5c:d8:a1:8f:70:f0:1b:98:65:bf:14:d6:
         b1:6c:22:e2:36:7d:0e:6a:a9:62:f7:49:f8:70:20:e8:d0:3f:
         34:26:66:e5:0a:9e:f8:86:88:c8:5d:8a:69:63:3b:d0:ec:d7:
         e5:c6:47:f5:8f:bd:03:1c:5b:32:49:09:3d:e5:0b:41:3b:e7:
         28:fc:88:b7:69:a3:12:0f:81:49:f9:25:ca:08:0e:88:7f:bd:
         dd:1a:24:a7:31:6c:d5:ac:bc:09:16:7f:b0:62:92:a0:bf:4d:
         5e:7f:28:fd:ed:d1:92:76:d4:ad:89:22:88:d1:91:d7:10:78:
         0e:eb:ce:b5:51:57:2e:e3:aa:b9:e3:84:2a:22:91:3a:83:7f:
         ec:94:7d:69:ff:ad:98:3f:83:df:d6:64:57:0f:a9:5f:8a:e7:
         c6:86:b7:35:3a:c8:11:61:6e:1b:b8:20:d5:0e:eb:f2:0f:bd:
         e4:10:9e:ee:61:29:b9:97:38:34:3c:94:04:04:be:5c:3c:40:
         f4:29:13:e6:06:05:67:56:9d:5f:52:fe:8d:47:1f:53:8c:14:
         d0:93:57:f1:48:80:20:a5:82:38:b0:67:96:b8:d3:bd:05:26:
         3c:7f:5a:8d:13:63:2a:3a:48:81:53:81:2d:3d:83:50:bf:e1:
         03:ba:50:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:14 2025 by rpki-client