This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4c3519b-0dd6-47ff-9849-4fa624d247f1.roa
File:                     a4c3519b-0dd6-47ff-9849-4fa624d247f1.roa (raw, json)
Hash identifier:          lK2mGwgysxoKzYSyx3nPQi7DijyM4VjKympzfWj5xcA=
Subject key identifier:   D4:27:29:C1:42:F6:E6:4F:52:BB:29:E4:5B:C6:8E:1D:33:BA:5F:B6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5EE424D7507BDF1DC16D1A224F131FB96007D510
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4c3519b-0dd6-47ff-9849-4fa624d247f1.roa
Signing time:             Tue 25 Nov 2025 05:51:54 +0000
ROA not before:           Tue 25 Nov 2025 05:51:54 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37f8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e4:24:d7:50:7b:df:1d:c1:6d:1a:22:4f:13:1f:b9:60:07:d5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:51:54 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=382cf1a496d2efadef580c2f49a46856b427be3f4117972346c83b8dd3bcc5fc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:a0:af:d5:ad:fc:87:09:70:ac:41:7c:b4:
                    26:65:c8:c4:4d:9f:f0:ab:d6:e6:90:e7:9d:23:6c:
                    fe:ae:ef:08:5a:9b:af:14:c9:1a:f1:0d:a5:a7:20:
                    2a:fd:ed:44:6b:ff:be:6b:11:a1:95:80:ef:28:3a:
                    4a:22:16:92:db:15:ec:aa:58:c8:00:0f:a1:68:4f:
                    16:01:6f:1a:30:a5:66:25:0e:ff:c0:75:f0:0c:0a:
                    23:04:bd:af:9f:46:6d:7e:8a:41:a2:c3:cd:09:bd:
                    c2:0a:8b:ae:d5:34:bf:a4:50:bb:b4:ec:8d:8b:04:
                    f7:04:0b:ed:0d:b5:de:75:77:f1:ec:a1:7e:bb:54:
                    d7:35:ee:f5:7e:89:bb:d4:ce:1d:3b:88:09:41:7f:
                    4b:92:1b:96:5e:64:6a:d8:32:de:ab:62:1b:ae:cd:
                    33:d7:26:4e:ef:d0:75:3e:1a:91:b9:01:27:98:33:
                    94:09:80:53:59:d6:ca:a3:da:8f:11:ae:59:8a:6a:
                    17:71:93:a5:72:eb:ae:7d:55:4f:7d:3b:16:85:a5:
                    f0:55:41:ff:c4:17:a6:ba:cd:9b:e6:2c:81:31:63:
                    dc:0e:ef:26:0c:ad:22:aa:34:e0:fb:c6:36:d7:b4:
                    2b:4f:d8:cd:a6:ff:52:bb:c9:1b:fc:0e:50:21:04:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:27:29:C1:42:F6:E6:4F:52:BB:29:E4:5B:C6:8E:1D:33:BA:5F:B6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4c3519b-0dd6-47ff-9849-4fa624d247f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         97:dd:a6:9e:8e:02:76:8e:0a:ef:44:0e:71:4a:3f:a0:73:34:
         61:37:58:b3:e7:6b:76:eb:ae:d5:ec:7a:5b:9c:5c:19:37:bf:
         d6:9e:3e:c8:98:ab:a1:99:1d:6b:2b:20:af:07:e8:8b:29:37:
         78:25:fc:79:6b:ee:81:d1:5a:9b:d6:d9:7a:58:67:95:ae:03:
         e4:bd:51:b8:0a:91:ff:56:04:50:f3:7e:50:d6:63:06:35:89:
         1e:f1:9d:ee:08:72:60:6e:48:2a:59:38:c2:36:95:5e:3e:81:
         83:92:36:a9:46:f3:a5:16:c4:db:55:31:68:62:d7:63:77:22:
         fb:63:70:5b:f7:2b:4d:88:69:61:83:cc:4a:28:6b:6c:d0:cd:
         16:b2:ef:9b:e3:f2:c1:71:0a:de:2a:9b:ab:e0:3c:9f:ca:d5:
         1b:5f:f7:b3:ca:ca:46:3a:d4:45:24:36:c7:91:b4:7f:3b:e6:
         da:f0:dc:40:0f:13:bb:41:9c:e2:4c:7e:cb:61:e4:d2:c4:fe:
         e5:86:ca:f7:dc:c8:51:21:0b:71:e0:de:56:0a:cf:f4:2f:d2:
         db:83:f5:b3:7d:56:fb:f4:7b:fe:9d:f8:26:ea:a6:14:c9:83:
         88:f5:21:30:60:83:2e:3b:a7:d0:b1:76:f1:6e:d4:9b:cb:12:
         a0:af:5a:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:24 2025 by rpki-client