This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aaf3d587-ad29-4d94-a5df-d0a25a539232.roa
File:                     aaf3d587-ad29-4d94-a5df-d0a25a539232.roa (raw, json)
Hash identifier:          Dertpu078EXAzBnrbhr1jfz7HIccH2nVNGcFfqPkOdk=
Subject key identifier:   35:9D:D4:78:B7:DC:E6:9A:30:17:82:D8:F6:BE:56:E5:F4:A0:F7:B8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       730AF6980E65D5FD5757618277493AD229BC5C50
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aaf3d587-ad29-4d94-a5df-d0a25a539232.roa
Signing time:             Mon 24 Nov 2025 00:30:47 +0000
ROA not before:           Mon 24 Nov 2025 00:30:47 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:13a8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0a:f6:98:0e:65:d5:fd:57:57:61:82:77:49:3a:d2:29:bc:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:30:47 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=51cc20df24c0d86818661c0b4d391fab3c8fe5ca289f2b935c7ddb32566ea22c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:d4:7c:11:98:9c:03:fc:a6:82:5c:b3:f4:
                    81:ab:96:1c:39:dc:2c:a0:89:ea:6e:c1:ef:89:f1:
                    fe:47:48:b1:a5:01:de:99:68:7c:54:36:07:5e:d5:
                    37:7e:4d:35:28:d3:a4:f1:74:1b:98:74:7c:9c:4a:
                    33:4d:0f:07:92:1e:7f:85:43:19:ff:5c:8a:a8:24:
                    e5:17:75:4c:b3:c4:5e:ad:25:1d:da:c4:1a:ce:76:
                    b5:7e:75:61:3a:63:e1:02:50:25:fc:2d:48:5a:40:
                    a4:19:67:03:89:c6:5f:61:cc:65:de:6b:c0:12:e4:
                    bd:9a:0b:1b:06:b5:5a:ca:8d:af:04:48:5d:d3:93:
                    1f:38:c8:96:5c:6e:a8:a2:17:44:1f:0d:f4:79:32:
                    31:33:f7:3f:3f:65:12:37:62:d6:e4:06:9c:da:84:
                    d1:58:3e:a5:c2:d4:a9:fc:14:fe:eb:74:46:a8:b8:
                    ac:a1:1d:df:13:39:37:e3:48:d5:13:b0:ab:3f:ed:
                    4d:29:8c:66:97:9c:2a:c1:25:3d:7c:3b:b5:27:d3:
                    f2:41:8c:1e:66:9f:0d:30:2b:af:d6:a0:58:77:71:
                    5f:5c:17:89:9a:5a:e9:d5:a2:07:57:e7:37:32:ce:
                    c0:6c:46:f2:3a:e1:11:d5:8f:4a:08:32:4c:a4:0e:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9D:D4:78:B7:DC:E6:9A:30:17:82:D8:F6:BE:56:E5:F4:A0:F7:B8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aaf3d587-ad29-4d94-a5df-d0a25a539232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:13a8::/47

    Signature Algorithm: sha256WithRSAEncryption
         a4:d5:9c:78:01:e3:f8:ce:f3:a6:7f:47:39:b3:32:e9:e9:7e:
         89:0a:41:29:0a:3a:74:dc:9f:31:b4:7c:ab:14:9b:6b:f8:f6:
         37:18:ef:f0:9d:1c:45:e4:f6:98:3c:49:0a:f0:70:74:af:92:
         31:3a:0c:4e:b6:76:15:7c:cd:e1:92:3f:5f:6f:f7:f7:bc:57:
         1b:f3:21:c1:94:88:16:28:23:83:f6:15:15:a4:bf:4b:a3:85:
         47:f8:20:48:4c:7a:e7:80:81:db:d2:69:d7:b8:12:86:10:de:
         25:8a:62:fe:28:e0:30:9b:5e:e8:1d:e2:8e:3b:bf:d2:c4:f9:
         d3:e3:d5:f6:df:de:e7:b7:91:c6:86:90:e9:10:98:e7:87:a8:
         14:d8:e5:db:16:18:11:7b:b7:9a:e6:2f:ee:1e:8f:a2:d0:6b:
         3a:29:70:87:d7:6d:b1:5c:d7:3d:c7:99:f5:e0:c5:29:52:62:
         98:85:2f:b1:f5:2c:e0:96:cb:ed:a4:48:e9:f7:13:30:61:48:
         46:e9:c8:bf:f1:02:96:58:c0:dc:60:8e:4c:68:48:db:23:17:
         ef:6f:c0:10:42:57:23:62:28:9f:87:c7:b3:4d:fd:fa:36:46:
         c2:ed:cb:59:37:fc:3c:7f:d1:d1:54:97:1e:78:13:c6:b4:4d:
         43:27:40:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:52:01 2025 by rpki-client