This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a71547a0-72ba-4f1c-a47a-7a98c6caab41.roa
File:                     a71547a0-72ba-4f1c-a47a-7a98c6caab41.roa (raw, json)
Hash identifier:          LUL7g98uswspE59NsIaNbGBJxm5YX/OXDYDaSvFa7Fg=
Subject key identifier:   F8:6F:0F:59:42:B9:9F:D7:73:6B:B3:55:82:12:40:1E:DA:F8:CA:45
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       08F64D5761688734153A11BC37031155C77D4019
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a71547a0-72ba-4f1c-a47a-7a98c6caab41.roa
Signing time:             Tue 25 Nov 2025 14:52:11 +0000
ROA not before:           Tue 25 Nov 2025 14:52:11 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ce8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f6:4d:57:61:68:87:34:15:3a:11:bc:37:03:11:55:c7:7d:40:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:52:11 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=f27eb54eb583e9eea26acf28e126c1b514697703fe8d4192e9f72a1886e2ee91, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:5c:bf:88:b2:84:45:42:e3:05:86:8a:7a:
                    59:fb:5c:5f:2b:37:87:8d:60:61:14:72:9f:7b:33:
                    42:01:e3:d5:e4:2e:6d:2c:6d:cb:08:f9:3c:c4:3a:
                    69:fe:1b:c1:73:44:0d:08:82:b7:27:99:3b:a0:98:
                    ed:94:32:0d:95:61:5a:9f:87:ab:ec:39:3e:b2:2c:
                    76:8f:a3:f2:8b:e3:8e:c0:20:2c:b1:8c:cc:72:17:
                    99:73:d1:a9:08:16:80:62:58:89:d7:dc:1b:d2:23:
                    18:2f:8f:37:95:f8:3b:b3:cd:92:6f:53:bc:d7:a0:
                    ac:b4:f0:96:89:ac:ac:b1:fb:20:be:af:24:01:5a:
                    79:85:55:b5:45:84:48:94:88:7e:7d:34:6d:56:0d:
                    3a:7a:4a:a2:dc:cb:28:7e:d3:35:f3:b0:ba:8a:23:
                    82:29:c4:12:61:5b:24:8a:4c:ac:56:f3:5f:0b:16:
                    1c:36:1d:54:b7:f9:2a:be:a5:51:45:b4:07:32:ff:
                    a8:98:2a:59:ba:7a:fd:b1:27:fc:06:d4:f7:5c:74:
                    7f:ba:40:f4:d0:6c:a4:bf:1b:97:42:da:82:0a:ec:
                    d1:99:47:c9:2c:7e:a3:a0:3d:8d:ef:c0:06:ba:81:
                    0b:40:58:89:aa:74:18:83:c9:09:04:78:54:99:23:
                    49:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6F:0F:59:42:B9:9F:D7:73:6B:B3:55:82:12:40:1E:DA:F8:CA:45
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a71547a0-72ba-4f1c-a47a-7a98c6caab41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ce8::/46

    Signature Algorithm: sha256WithRSAEncryption
         58:90:47:4d:ec:0f:5e:f8:c1:42:83:55:56:0e:8a:55:7f:1b:
         b8:f7:20:4e:3d:7c:1f:66:c8:97:15:dd:df:ec:4a:49:58:f3:
         07:53:e4:aa:c3:ee:00:4e:33:57:de:05:0a:14:c6:56:30:10:
         9f:4c:11:28:12:a6:03:a7:be:a1:ae:a5:3d:2f:66:53:cf:8b:
         7e:5e:38:9a:14:a6:05:d1:f4:9e:ce:05:04:3f:96:1b:af:47:
         b9:c1:5d:07:6c:d9:b9:6d:ee:96:f9:a4:18:b3:d3:74:97:d2:
         4d:0e:c9:d6:c9:f9:db:90:93:e7:92:d6:a5:f7:48:d5:b3:41:
         5a:fe:9c:e6:88:ce:af:53:38:0a:bc:b0:47:29:8c:d9:50:7d:
         97:19:07:0a:e9:7d:2f:0a:48:97:ca:8f:f9:07:cf:0f:d7:8f:
         ce:0f:af:14:ba:a1:68:a0:ff:23:15:04:b2:dc:62:44:9a:70:
         91:c7:35:02:9b:07:5f:a5:8f:49:d0:49:1a:9e:d1:d2:bf:35:
         51:52:78:7e:ff:67:2f:4f:e7:87:ee:6b:81:60:5f:7b:db:a5:
         08:17:36:c1:95:83:98:36:ac:a8:3b:e6:ea:95:f2:90:a7:e4:
         f5:e9:a1:e0:c2:3f:6b:90:f3:03:7d:f0:7f:7d:81:69:94:d3:
         16:8c:97:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:44:05 2025 by rpki-client