This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad443dd8-3531-46bf-890c-6079d356b462.roa
File:                     ad443dd8-3531-46bf-890c-6079d356b462.roa (raw, json)
Hash identifier:          rD3Isme8/rzM6OOUEYJnZLXPVW6bekR0nyt0EMe30SQ=
Subject key identifier:   08:45:03:6C:2B:8B:C6:1F:85:B7:7E:EA:BB:63:C7:73:AA:50:A7:15
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       024D4D731ACD534C4C2554162F2CEDFB7C26AF1D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad443dd8-3531-46bf-890c-6079d356b462.roa
Signing time:             Mon 24 Nov 2025 04:50:58 +0000
ROA not before:           Mon 24 Nov 2025 04:50:58 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1b04::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4d:4d:73:1a:cd:53:4c:4c:25:54:16:2f:2c:ed:fb:7c:26:af:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:50:58 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=e331c8ee6044fc49ac1a131f0fcbc56fdad2808fc6dc1b0851e7d06dde08ccdb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:d7:ec:81:ec:ef:54:a4:47:a8:60:0f:2f:
                    be:6a:00:06:23:64:b3:3a:54:25:0b:24:7e:f8:5a:
                    28:76:17:d6:81:95:e7:f9:ee:08:18:71:8c:46:89:
                    4f:d4:95:b7:2b:b0:c9:0b:cd:f1:ab:a3:1f:87:24:
                    1d:bf:f0:53:f3:38:d6:3b:8f:a6:9c:e4:da:13:3b:
                    65:d1:e3:4c:30:e0:29:fe:e4:e4:2d:18:7a:7c:9e:
                    65:09:e1:ec:00:80:64:1c:c6:03:f4:c0:2c:00:34:
                    26:a1:67:b3:e4:a3:70:36:12:4b:10:23:68:75:f3:
                    50:62:55:98:d9:a0:61:4d:ef:0f:ac:74:99:03:34:
                    66:f8:9b:db:ba:04:f5:15:64:fa:35:a0:e0:11:ba:
                    99:6f:fe:15:4a:a9:30:86:1e:9b:fe:fd:bd:fa:c9:
                    7d:a6:d3:2f:aa:7a:90:2a:5e:86:bf:7b:a1:a0:47:
                    f2:4e:71:0d:0c:ca:d2:45:0a:49:11:df:68:be:95:
                    fa:01:f1:a7:50:09:8e:22:ed:65:ac:f0:25:97:1e:
                    ba:3c:43:6e:e6:cb:8d:9f:06:19:58:09:07:56:c1:
                    a6:df:a4:6d:23:2a:8d:c9:8c:1d:2e:df:75:d2:ca:
                    19:18:23:83:00:b5:77:f6:72:11:d6:96:91:37:e2:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:45:03:6C:2B:8B:C6:1F:85:B7:7E:EA:BB:63:C7:73:AA:50:A7:15
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad443dd8-3531-46bf-890c-6079d356b462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1b04::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:ef:15:89:9b:74:d3:2f:02:19:3c:33:f4:04:a2:02:44:
         43:dc:13:cb:bd:5c:7b:be:76:47:b5:16:98:d8:ca:67:18:41:
         9b:ab:16:be:f0:f4:d1:57:65:e5:ec:27:87:fa:70:72:79:17:
         91:bb:fe:8c:b7:77:1a:3c:8f:ea:1b:23:b7:0c:ea:fd:8f:98:
         16:29:5f:13:be:ce:7b:68:a9:63:48:b1:ef:ff:de:cf:08:56:
         bb:47:24:d7:b7:00:16:b6:e3:20:cd:b3:6c:36:f3:ef:50:87:
         4e:bd:7b:fc:d3:c7:40:87:e3:fd:06:96:db:37:ab:1e:2c:70:
         7f:40:c1:0f:bf:f2:ed:75:fa:79:36:89:1f:83:c7:0e:33:50:
         17:4f:f3:b4:4b:d0:67:fa:4e:65:48:d1:ff:14:4d:ba:68:aa:
         b9:6e:22:b1:29:97:35:dd:30:6c:25:72:e9:fd:6f:da:4b:db:
         ac:b3:19:1b:77:e0:21:dc:91:dd:f7:14:67:21:86:ec:a0:62:
         94:96:46:94:67:04:a8:eb:02:58:96:74:7b:30:20:c1:82:03:
         e7:00:30:2d:38:93:12:51:05:d1:95:a4:5d:94:b5:ff:a1:8f:
         88:17:65:b4:34:4b:61:4c:8c:8f:d8:a7:f6:6a:77:b9:46:39:
         97:44:1a:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:47:47 2025 by rpki-client