This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa
File:                     a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa (raw, json)
Hash identifier:          OujDncv+VvbZRpByNEgIgg3A+DIDhi2o7VjkegbTyKQ=
Subject key identifier:   75:25:EE:A1:C5:CB:E6:AB:42:EA:3D:9A:CA:9D:3B:28:78:40:01:C1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       23D10829B33A88A4306F3D0765A70C67A3A67C91
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa
Signing time:             Tue 25 Nov 2025 04:50:58 +0000
ROA not before:           Tue 25 Nov 2025 04:50:58 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a0c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d1:08:29:b3:3a:88:a4:30:6f:3d:07:65:a7:0c:67:a3:a6:7c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:50:58 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=f59e3229b6b11427303e98fffa84311a6b84fb3500be3fc8ca544a5664e0a33b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:a1:2f:d8:2a:ee:b8:36:25:96:9c:50:20:
                    eb:fc:4a:3f:4a:e7:f4:73:22:e5:18:2d:bd:d2:c3:
                    6d:85:44:f9:30:5c:d4:3a:11:e5:fe:4b:87:da:ac:
                    46:2d:3f:5f:6d:65:46:37:ac:fe:73:98:e7:29:d9:
                    ec:73:14:c6:c2:61:ed:a1:13:f4:10:2c:09:85:04:
                    2b:5b:06:9c:10:06:11:a8:f8:4d:90:b9:9c:46:34:
                    2a:d5:d2:98:17:0f:db:97:a7:02:ae:22:9f:49:49:
                    4e:b4:8d:bc:5f:67:22:a9:8c:06:e4:d4:b9:d6:05:
                    2b:b4:55:9c:32:06:a2:09:78:59:0d:7d:eb:f9:09:
                    d9:d2:89:0a:38:ac:93:a6:3e:d7:d6:3c:94:fd:51:
                    1e:fb:99:59:bd:67:97:cb:d5:28:28:b1:60:62:18:
                    fe:16:46:a1:2c:93:73:fc:7e:a6:87:9f:5c:02:80:
                    42:d5:cd:80:f0:5d:eb:9e:99:fb:f6:ea:22:f6:26:
                    92:fe:13:d6:c2:16:86:5f:7e:09:c1:b2:ff:d1:bf:
                    ad:de:85:86:e9:e6:63:cd:a5:a0:76:c6:0b:ee:31:
                    72:55:b5:c4:70:a1:99:14:2a:49:46:3c:a3:47:4d:
                    ff:c1:0c:2b:7d:33:c0:3b:d5:f2:05:5e:01:6b:c1:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:25:EE:A1:C5:CB:E6:AB:42:EA:3D:9A:CA:9D:3B:28:78:40:01:C1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a0c::/46

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:8f:d0:96:ab:67:db:8f:46:14:d6:03:d4:c8:b8:b3:4d:
         4a:35:73:af:72:0e:47:aa:cd:63:5e:a5:f2:ff:16:1b:6a:91:
         26:84:da:c8:ad:83:53:8f:af:bd:c5:5f:c0:c3:16:08:50:b1:
         10:ee:d7:b7:31:fd:f4:ca:e2:1a:67:e4:ca:49:9f:7f:1e:9f:
         e4:97:3a:85:3d:77:ff:a2:05:c0:83:2b:e2:1b:5e:cf:16:a4:
         00:b2:73:0b:e9:6f:fd:0a:5e:64:71:d8:ab:ca:0a:9f:ae:04:
         9f:48:f8:11:f3:14:14:47:c4:8e:a8:67:7d:44:e7:58:9b:b7:
         57:ee:40:d5:e7:42:0c:54:a0:6e:b4:e1:3a:11:d8:84:4b:f0:
         4a:92:68:33:09:6f:b8:4c:6e:28:4f:bb:8a:56:20:6b:c6:e9:
         66:b0:b6:4d:74:ac:86:0d:71:47:8c:ef:dc:03:57:cc:76:d7:
         02:31:1a:25:ea:0e:f0:37:5e:8c:df:aa:3c:2b:32:1c:40:f6:
         63:eb:4e:95:93:33:03:65:4d:9f:f2:c5:fc:31:59:6c:f0:08:
         14:19:05:a9:06:86:2b:74:65:b3:42:df:83:3e:1a:bd:07:d1:
         9e:a6:ee:3c:67:b2:d5:8f:d7:2b:eb:6a:b9:2b:4f:8b:6c:f8:
         91:15:bb:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:06:53 2025 by rpki-client