This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa
File:                     a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa (raw, json)
Hash identifier:          612BFya4KgNjLrDgu58TjM4GUR8rdammva06ktoSt1w=
Subject key identifier:   22:C1:6E:BF:D6:9D:49:70:76:FF:3F:69:A8:CC:0A:DB:74:6B:17:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3A06DEBDB90C57274853FB896C3FA704E72AB06A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa
Signing time:             Mon 24 Nov 2025 05:40:47 +0000
ROA not before:           Mon 24 Nov 2025 05:40:47 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c46::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:06:de:bd:b9:0c:57:27:48:53:fb:89:6c:3f:a7:04:e7:2a:b0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:40:47 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=08be1dc5744166eb44b7373cc5f5446fcc184c3007722bd8256e6774d0bd759b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:72:7c:da:2a:76:7d:3a:f2:4f:7d:3e:0b:
                    cb:f5:17:78:0c:37:e8:7c:c5:db:13:a9:c2:32:33:
                    cf:71:c7:5c:85:5d:65:dd:bd:62:6a:99:c3:6a:88:
                    6f:d1:a3:d9:48:36:bb:a1:99:66:16:07:fa:90:a0:
                    52:10:71:4c:c7:2f:bc:35:e7:06:e4:cb:18:8b:e8:
                    7d:e4:4a:88:8b:92:63:4f:5a:e7:1b:17:16:7f:e0:
                    90:01:d5:76:6b:d4:b1:77:a3:d8:9d:12:b6:7e:92:
                    f5:09:fa:cb:de:cc:6c:09:f7:e7:84:0b:be:e7:67:
                    69:26:f1:69:ab:bf:19:69:92:8a:72:4b:a0:8c:49:
                    97:72:99:0e:68:af:fa:23:51:98:64:11:45:59:b2:
                    79:89:43:0b:69:83:ee:ac:6b:0b:27:3b:15:1c:45:
                    b0:a2:b6:b1:46:b7:fd:46:a6:d1:32:a7:26:2b:3c:
                    d4:f5:6a:82:54:fa:dc:9b:fd:d8:ca:e8:ac:37:fe:
                    ac:ee:42:83:37:c1:68:6a:f1:6b:81:1a:9e:cb:73:
                    67:0e:6a:95:ca:14:8d:8d:12:67:dd:e2:cd:91:97:
                    c3:f8:39:61:02:8c:df:ac:75:20:04:50:4c:53:07:
                    7a:31:9a:7d:82:ca:ae:bb:50:61:fa:6f:f5:52:b6:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C1:6E:BF:D6:9D:49:70:76:FF:3F:69:A8:CC:0A:DB:74:6B:17:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c46::/47

    Signature Algorithm: sha256WithRSAEncryption
         96:fd:e6:43:c3:c5:44:33:17:7b:89:9d:28:29:09:6d:3f:e8:
         5f:4a:2a:23:e7:b3:e6:4d:92:41:44:05:f2:0e:71:ef:f6:fd:
         a1:76:ea:63:47:6e:ca:b0:39:56:d9:c6:61:4a:f2:36:7a:ff:
         9f:8d:9a:a9:43:6e:22:cd:4c:15:77:17:b0:6c:11:61:24:b8:
         37:a4:17:21:2b:f5:40:95:29:2f:c5:03:22:27:56:8b:98:db:
         cb:16:95:8a:35:5d:87:82:ed:aa:8d:1e:07:7b:a6:48:24:f8:
         3e:d5:85:fa:29:91:74:af:6f:bf:ff:22:e6:20:7e:66:cd:a7:
         d4:53:27:aa:7a:d1:f5:16:c1:cf:83:7f:cd:be:cb:73:2e:4c:
         70:dc:e4:b6:5c:ca:31:15:7c:bd:2a:c2:20:c8:8f:8e:26:49:
         56:93:93:dd:2d:2e:e2:7e:95:3c:b6:2b:70:69:44:56:99:1c:
         89:9e:29:8e:8d:aa:67:59:35:45:72:2b:6d:2c:fc:ec:ed:f7:
         6c:68:ce:e1:ce:0b:b5:81:7f:9a:69:b0:c3:b3:4d:c1:00:53:
         cf:d9:d4:9a:76:07:e2:72:eb:3c:9a:22:ad:fd:cb:dd:07:d2:
         07:3a:e9:f0:d7:d4:db:24:6b:35:e9:ff:bd:04:89:5a:14:30:
         2b:ee:00:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:02 2025 by rpki-client