This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a583abe8-fb5a-45b9-8f1c-fe55a8cae79e.roa
File:                     a583abe8-fb5a-45b9-8f1c-fe55a8cae79e.roa (raw, json)
Hash identifier:          q1ldGAEbUeSFjubp7oNsG6U/BAgulg8DT34qL7ZiBvI=
Subject key identifier:   6F:74:95:63:BA:A8:2A:76:AF:33:6A:10:30:37:D7:96:8D:A0:69:CD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0522CF47F2C9833CB0CE9F685B27DF238C3AD8EC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a583abe8-fb5a-45b9-8f1c-fe55a8cae79e.roa
Signing time:             Tue 25 Nov 2025 18:41:59 +0000
ROA not before:           Tue 25 Nov 2025 18:41:59 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34bc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:22:cf:47:f2:c9:83:3c:b0:ce:9f:68:5b:27:df:23:8c:3a:d8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 18:41:59 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=1b1dcd5db67aaf761f4bd44847ce4800b20cae5e78b06af8fe0afeb679f303ba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:2f:87:31:4d:2c:ad:09:8c:7e:11:8d:d9:
                    02:3e:8d:10:ad:24:53:00:5a:93:a1:d7:f3:2a:84:
                    80:d5:b2:bc:5d:d4:ee:6c:78:35:98:35:d7:f3:ca:
                    3a:22:e4:40:65:39:f9:dd:1c:27:d9:3e:b0:84:12:
                    1a:e1:6b:71:af:e4:b2:50:5c:20:81:bf:59:05:1d:
                    5e:7d:5f:ef:bb:a8:13:b1:62:b1:2e:97:24:e9:23:
                    f5:36:b3:a2:1c:02:57:07:29:07:1d:b9:65:be:37:
                    30:ef:e6:bb:4f:88:f5:cc:4b:4d:29:1a:58:3c:53:
                    27:24:42:02:17:65:37:74:5e:b3:f1:af:9d:4f:12:
                    f0:45:8e:0d:db:4c:9a:78:04:fa:88:1e:8d:8a:db:
                    44:6a:4d:f6:ea:de:d9:c3:75:9a:fa:7c:e4:ee:44:
                    4c:cd:e4:ad:9a:38:11:b8:0c:22:d0:c5:b2:17:90:
                    0f:76:d7:92:bf:89:d7:6a:b0:0d:94:bc:f4:a6:1d:
                    c5:a3:55:d5:f9:d1:6a:ea:7b:fe:a7:4f:06:db:12:
                    ac:1e:4d:02:f7:ba:4e:e7:cc:fd:ce:d8:a1:c1:b0:
                    eb:16:b8:1e:f9:50:ee:76:e2:f1:a6:8d:f4:68:0a:
                    ca:74:16:44:fd:14:60:57:5c:b6:99:f5:be:36:37:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:74:95:63:BA:A8:2A:76:AF:33:6A:10:30:37:D7:96:8D:A0:69:CD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a583abe8-fb5a-45b9-8f1c-fe55a8cae79e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34bc::/46

    Signature Algorithm: sha256WithRSAEncryption
         33:53:5b:8f:01:ea:c8:7f:3d:e1:50:b9:d5:9b:6b:bc:b7:ce:
         a9:de:9c:88:71:7c:08:00:f8:b2:44:46:c3:69:fc:bd:61:3c:
         44:e9:0a:5f:38:46:9a:30:f3:8b:d0:51:57:c1:e8:cc:99:7a:
         4a:12:f9:85:85:41:68:8d:3f:60:3e:b3:71:60:96:71:f4:a9:
         bb:c7:fa:b3:de:6a:98:ff:9c:8e:36:fa:17:51:69:a8:70:2b:
         a8:c3:a9:79:8b:10:08:f4:37:5d:9a:28:25:a4:27:e1:7a:e6:
         09:c4:79:60:a7:94:78:ff:e8:e8:1e:cb:07:f0:f4:8d:f9:1a:
         b6:64:ed:58:99:e7:79:7f:ee:bd:9e:76:f1:1a:c7:7f:68:b3:
         69:f0:4c:dd:71:7d:e7:51:af:32:26:4d:c2:42:6c:75:eb:c9:
         ab:41:83:97:71:97:1a:fb:a9:fd:28:2c:a2:79:a4:6d:70:28:
         53:e1:f9:90:38:5f:d9:a0:85:f4:12:00:c8:14:a9:18:d3:bd:
         72:84:bd:9b:d7:ed:5a:6b:9a:b2:bb:8b:5d:0c:ed:41:a1:b3:
         7d:05:e6:3a:b4:1a:90:f3:d1:6c:8e:4e:c0:3e:04:8c:87:74:
         d6:f9:34:63:1e:8e:95:e7:a0:a4:85:64:2e:90:d6:5c:28:6e:
         53:e5:6b:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:59 2025 by rpki-client