This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3ab6b65-737d-4af6-a409-1adfaa7d43f6.roa
File:                     a3ab6b65-737d-4af6-a409-1adfaa7d43f6.roa (raw, json)
Hash identifier:          pE4l4jjf1UfQtvcvUbEeo8YHDeGzlOPMF9s7RoNeDDU=
Subject key identifier:   C1:B9:55:05:AD:86:1E:02:84:E7:17:F3:86:3E:A7:C2:05:B8:56:C2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7B3E735EA6DF00AFEC89E8F1A667874C16930F1A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3ab6b65-737d-4af6-a409-1adfaa7d43f6.roa
Signing time:             Tue 25 Nov 2025 10:32:21 +0000
ROA not before:           Tue 25 Nov 2025 10:32:21 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3928::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3e:73:5e:a6:df:00:af:ec:89:e8:f1:a6:67:87:4c:16:93:0f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 10:32:21 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a5fac5c0a57d065d9435fec0346a8dfcf68d30d5fb89c70e858fe6ab7131b03c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:77:a7:eb:d8:de:84:05:05:73:5f:b6:48:
                    61:fc:57:22:b9:e3:aa:d6:48:85:e7:b7:73:ff:f6:
                    bb:9d:21:b4:23:55:a1:3d:6b:c5:a2:22:a6:82:e8:
                    b2:46:15:12:1a:d4:31:ba:b3:6c:b3:cf:15:f6:6c:
                    d4:2e:2e:ac:b6:33:eb:83:2a:ea:eb:a8:12:ac:63:
                    d7:76:a3:06:bd:ab:44:c6:75:9d:75:4a:55:c9:e3:
                    a8:c5:59:cc:69:a1:08:e6:2b:22:0d:88:b4:25:34:
                    9a:9b:67:21:f8:16:27:72:ef:44:75:a9:d5:13:72:
                    d1:ac:83:d4:1d:62:92:11:a6:3f:7c:64:fe:24:3a:
                    6d:8f:22:e9:15:8c:9a:0c:39:56:7c:18:ef:66:aa:
                    5f:c5:92:9d:eb:34:30:d9:ac:97:9a:be:3b:c8:76:
                    3d:a4:b6:a8:5d:b0:37:ce:cc:6a:74:dd:dc:c5:52:
                    6a:6a:d8:9b:6f:10:16:fb:3c:8f:e5:c1:75:c4:00:
                    f4:e7:5d:12:a1:eb:80:31:1a:d5:06:a5:64:12:e3:
                    e9:fc:7f:af:a2:f4:de:0b:8c:fc:12:18:01:89:70:
                    30:13:f8:60:00:06:ab:fe:fe:05:4c:dc:14:d6:db:
                    b9:72:93:95:31:85:16:40:ae:da:aa:f1:6a:6e:7f:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B9:55:05:AD:86:1E:02:84:E7:17:F3:86:3E:A7:C2:05:B8:56:C2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3ab6b65-737d-4af6-a409-1adfaa7d43f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3928::/45

    Signature Algorithm: sha256WithRSAEncryption
         35:5c:82:16:2a:73:75:d7:31:b7:7b:9a:b8:c5:12:3b:cf:7a:
         02:8e:d7:06:24:77:83:3b:cc:ec:e9:0a:90:76:ca:7a:f3:65:
         78:ee:f5:25:d3:69:2c:6a:70:7e:24:64:bd:32:17:f6:e7:93:
         13:64:42:46:9c:97:e5:4a:c8:12:67:2d:8b:bc:0a:57:96:00:
         90:ed:40:3d:01:10:61:9f:90:aa:46:bb:f3:33:f2:d4:24:99:
         8b:62:56:c6:5d:42:95:a3:7b:d4:72:53:9e:d4:55:a1:55:76:
         4a:91:8c:ba:31:50:f0:02:92:7d:c5:a4:4a:5b:04:f3:51:85:
         61:7f:e0:a1:97:cb:c5:1f:7d:40:f4:53:f8:67:bd:16:46:fc:
         a8:14:36:ad:46:4b:5b:ce:55:ea:20:dd:61:5c:e2:be:00:55:
         ef:c8:34:30:0b:dc:11:fe:01:e7:24:43:a6:eb:24:c0:89:b2:
         e0:1b:94:7e:ea:e8:81:92:7c:4f:c4:10:8a:05:ea:a1:64:54:
         8c:47:68:24:eb:e2:f5:e6:fc:d9:62:a6:d4:0c:1a:b5:82:fd:
         77:99:6a:5a:11:b0:30:81:18:2a:0b:44:39:49:59:d6:ed:dd:
         a4:78:25:4e:a2:f8:a8:3d:a8:25:4f:d7:ca:1d:24:f2:7f:37:
         2a:6f:3a:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:16:02 2025 by rpki-client