This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1e24600-61e3-4b10-b801-43a42afbd690.roa
File:                     a1e24600-61e3-4b10-b801-43a42afbd690.roa (raw, json)
Hash identifier:          ysHtLzifYyvvYiTlSTbJD1ZVjN/ZlN31G8GbbOmtHj4=
Subject key identifier:   E1:A1:7F:2A:97:EC:DA:E7:11:B8:CE:C2:FB:23:51:10:F8:FC:0E:11
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       29A442306A90B8052DF1CB865CD7349B308EF841
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1e24600-61e3-4b10-b801-43a42afbd690.roa
Signing time:             Mon 24 Nov 2025 02:11:46 +0000
ROA not before:           Mon 24 Nov 2025 02:11:46 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a0a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a4:42:30:6a:90:b8:05:2d:f1:cb:86:5c:d7:34:9b:30:8e:f8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:11:46 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=0d76458f73c30d912f93d48444ccec82b9c2699c74a41a35b714ee887c8fd4a1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:4d:a1:39:89:03:e5:84:55:71:16:c3:c3:
                    4e:59:4b:5f:3f:8c:14:1e:65:cb:2a:fe:f6:42:97:
                    26:fd:29:86:3b:8a:63:3f:a2:5c:fe:94:ba:14:76:
                    d4:76:a6:e6:bc:44:86:e3:4a:04:d0:09:b6:3b:70:
                    e2:36:4b:21:8e:04:49:3b:91:d8:1b:66:5b:97:66:
                    aa:79:94:3c:3b:09:f2:3e:b3:91:5e:e5:2c:bf:21:
                    8e:cf:f5:2d:31:1b:2e:fb:a9:ac:19:8d:2f:04:55:
                    c2:fe:fc:dc:f6:47:8c:1f:9e:4a:96:ef:e6:52:c5:
                    d6:af:73:2f:4a:f3:67:5d:4d:f4:60:5c:41:b7:5e:
                    cc:ec:eb:cb:6c:a4:07:b2:ab:16:47:b8:40:cc:50:
                    d1:b5:7f:eb:2e:89:67:99:19:63:6c:d5:ac:d2:90:
                    9b:b7:1d:f3:92:42:fd:b7:89:d7:77:a1:3d:1c:7a:
                    e3:21:8c:ef:a9:15:b3:24:12:1b:b3:54:6e:8f:50:
                    96:45:87:75:12:bd:ea:59:b7:8b:11:f3:68:3f:71:
                    b7:97:35:78:58:5a:34:7d:30:b0:c3:c5:c8:43:d9:
                    14:09:23:24:1a:98:91:24:c2:7c:71:1f:1b:7c:29:
                    45:02:90:e7:ab:74:6d:c2:8a:da:01:b0:34:ee:f0:
                    ff:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A1:7F:2A:97:EC:DA:E7:11:B8:CE:C2:FB:23:51:10:F8:FC:0E:11
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1e24600-61e3-4b10-b801-43a42afbd690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a0a::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:2a:d7:38:fe:28:c9:84:b1:c8:53:16:31:68:21:75:3e:
         32:31:81:a4:a9:72:c9:8e:80:ee:98:a9:59:ec:84:ba:90:8a:
         7a:27:80:17:12:7d:08:39:5c:20:5d:46:41:60:73:00:b1:1f:
         d9:b0:39:19:1e:58:aa:60:8b:2c:9c:8b:20:8f:39:d5:97:2b:
         20:51:b6:5a:ef:6b:9d:4f:57:35:3f:ed:f6:95:7c:83:16:b8:
         b5:19:4b:7f:73:d0:97:3d:9f:46:f8:f1:78:48:15:6c:b4:6c:
         63:72:d8:58:ef:54:fb:7b:2c:8a:f5:ec:15:26:0f:be:b6:64:
         ed:33:a3:f5:d5:a6:4f:60:4a:fd:1a:80:6d:78:12:9a:fe:cd:
         bb:f6:0c:ea:57:6d:ff:44:c1:a1:48:9e:b4:48:b2:ab:bc:7a:
         d1:9e:0f:77:3f:52:c0:00:48:26:dc:d3:91:70:52:af:e2:75:
         57:d0:45:ed:4f:21:f6:0b:90:ca:06:8b:37:63:0e:b4:64:e1:
         88:ab:41:7c:fe:60:ff:3b:7c:ad:7c:d3:fa:f2:f0:4d:ae:7c:
         fc:60:58:9f:cf:0c:f3:d0:ea:79:77:d6:d7:a3:ad:b2:00:fe:
         e1:27:ab:04:9a:22:78:5b:02:b0:36:7e:a5:b1:1f:55:df:12:
         e6:50:24:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:07 2025 by rpki-client