This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aba39001-33b7-4573-b3b4-72cfa86f253f.roa
File:                     aba39001-33b7-4573-b3b4-72cfa86f253f.roa (raw, json)
Hash identifier:          gAnU6oCgh1QGWwbjVaN0aBidiK0heS+PMGFtvlLescc=
Subject key identifier:   CC:7D:01:FE:23:24:86:A7:CA:71:3F:62:72:44:0B:95:21:23:58:A1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6078F9BF0FABFDEBD516340805534D26146A9B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aba39001-33b7-4573-b3b4-72cfa86f253f.roa
Signing time:             Tue 25 Nov 2025 06:31:01 +0000
ROA not before:           Tue 25 Nov 2025 06:31:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b0c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:78:f9:bf:0f:ab:fd:eb:d5:16:34:08:05:53:4d:26:14:6a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:31:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b184805291330b232dff4190867ba7692292dc7c9cdbc8a4280cf89a41782220, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:e4:30:70:c7:5d:51:1c:49:2d:d2:91:f6:
                    eb:6c:0a:6d:76:25:a1:ad:ee:52:ea:26:1e:5c:27:
                    e6:2b:23:6e:1d:ae:bd:25:a4:e4:aa:98:01:c6:de:
                    90:79:e3:d6:b7:ed:9c:7b:cc:39:3b:ba:f1:1c:fb:
                    ec:23:7b:5a:b7:57:21:09:ce:92:ef:ff:84:76:2e:
                    53:10:85:cf:1f:e9:40:21:2c:bb:28:0a:e0:56:33:
                    a3:f6:73:87:36:87:f8:b2:87:95:76:d8:e8:5d:f8:
                    a1:33:3c:51:59:23:84:7a:d0:f4:7a:38:e9:d1:ba:
                    e8:40:bc:38:22:9a:b2:bf:e1:4b:20:68:1f:d2:5a:
                    ea:31:22:9a:3b:ab:7b:c3:f0:7b:d3:ad:09:d1:8e:
                    7d:ab:e1:df:ad:81:31:3a:8b:30:49:29:56:26:87:
                    ae:e4:ef:b9:cb:80:dc:34:17:33:c9:52:ad:6c:a7:
                    96:e3:57:f0:0a:05:bb:68:1d:cc:04:f7:a3:0b:74:
                    dc:bf:db:e8:74:81:5f:1e:f5:dc:b6:06:16:80:61:
                    76:41:bb:5d:73:fe:7d:1f:d8:dd:62:e3:8f:35:8a:
                    41:84:2c:40:78:11:9a:94:9d:44:24:02:c9:df:d5:
                    94:00:d9:fb:35:6c:86:d7:e1:7c:10:33:0d:90:60:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7D:01:FE:23:24:86:A7:CA:71:3F:62:72:44:0B:95:21:23:58:A1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aba39001-33b7-4573-b3b4-72cfa86f253f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b0c::/47

    Signature Algorithm: sha256WithRSAEncryption
         90:f5:19:6e:39:4b:8b:4c:96:bd:e3:1d:47:1b:08:3d:5a:23:
         24:36:8d:9b:ad:32:6a:8a:a6:aa:dd:ce:6a:d1:86:59:b8:46:
         ad:99:6d:e3:d7:c4:43:87:61:e7:94:94:8a:07:6f:f0:7f:66:
         6c:45:bc:f7:41:bd:65:c3:a6:ba:3f:e3:8a:f9:b4:89:fd:ae:
         8b:4f:b5:78:bc:d9:0c:35:40:ff:ef:f7:e2:47:1d:59:bd:0c:
         64:96:04:7c:31:b1:b4:1b:9e:ba:55:42:80:6f:53:59:e5:b0:
         ef:65:1c:6c:a8:06:9e:2c:0d:ee:65:11:29:4c:7d:71:4c:a2:
         57:d3:00:1d:99:df:16:ba:ef:98:37:3e:f0:ce:3c:9c:86:fc:
         31:f2:a7:d7:de:44:ce:4f:b3:c4:3a:a1:ad:d7:17:6f:ca:99:
         38:c5:61:fe:ce:18:ad:b8:29:f6:93:a7:d4:e1:b1:57:5d:bf:
         86:83:57:5c:c9:c3:d9:0a:4e:f7:80:dc:08:7a:50:c8:18:2a:
         ea:f3:d5:26:6a:3e:2d:eb:b6:67:ac:e2:80:b6:85:a4:4d:55:
         b6:bc:2f:38:d9:f0:55:56:ed:65:45:25:68:4b:d3:c2:57:8c:
         23:5f:35:25:e0:f6:de:57:8d:58:e6:e4:76:53:a3:62:43:a1:
         67:df:0f:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:16 2025 by rpki-client