This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae95a965-bc28-4d5a-a484-88c611b77ee2.roa
File:                     ae95a965-bc28-4d5a-a484-88c611b77ee2.roa (raw, json)
Hash identifier:          Itx50//KLEhsrcitm01G8VN/JbazNqR/jGqfyrc6kK8=
Subject key identifier:   7F:D1:24:C7:AA:95:67:DB:3A:E6:81:9E:26:41:53:F5:2C:F5:1A:A6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       77AB9D264A02E2068866C499101B12A9B3F2136E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae95a965-bc28-4d5a-a484-88c611b77ee2.roa
Signing time:             Mon 24 Nov 2025 03:31:32 +0000
ROA not before:           Mon 24 Nov 2025 03:31:32 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fe4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:9d:26:4a:02:e2:06:88:66:c4:99:10:1b:12:a9:b3:f2:13:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:31:32 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=ea4b0aa37c583e96c74e07d49119868f81c07fe19d0d9d5a1da6129b88468d8c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9d:11:77:bc:a6:a1:ca:df:a8:5e:da:7f:72:
                    02:05:f6:08:0b:e7:40:66:19:fc:4b:f7:7d:22:03:
                    0b:8c:60:da:5a:0c:6b:33:e1:bb:1c:13:2a:e6:a5:
                    16:a0:f7:5d:2a:68:61:e0:ee:2e:8b:1b:98:29:6d:
                    5e:38:44:07:4f:14:aa:7a:96:d1:2c:4c:c6:dc:6e:
                    73:74:fe:ec:c6:bc:60:35:4f:04:43:57:6c:4d:d4:
                    e1:c0:24:fa:68:e0:17:3a:00:f6:00:83:af:e0:06:
                    65:a4:eb:b9:86:47:cf:79:27:ac:bc:4f:95:79:c0:
                    79:78:64:ef:03:73:12:73:be:40:76:df:81:bb:a2:
                    d5:42:ee:09:03:7d:01:7b:59:b8:1e:48:59:4c:b5:
                    f3:66:84:4c:68:83:bf:96:85:a1:98:cb:c5:a8:21:
                    e5:09:a4:bc:3a:72:99:e5:87:70:af:a5:34:97:2c:
                    60:45:c4:32:82:28:6d:1c:fb:00:43:07:d1:bf:09:
                    56:58:18:24:a8:3c:c5:6e:b4:f7:7d:a8:6f:79:bc:
                    c6:91:04:1f:84:1a:55:df:cd:d1:ca:62:9f:13:24:
                    fa:99:38:87:ac:57:70:f6:80:58:98:e9:dc:ac:02:
                    3f:87:8e:15:2f:29:92:87:ba:82:ca:a6:eb:53:14:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D1:24:C7:AA:95:67:DB:3A:E6:81:9E:26:41:53:F5:2C:F5:1A:A6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae95a965-bc28-4d5a-a484-88c611b77ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fe4::/47

    Signature Algorithm: sha256WithRSAEncryption
         af:49:97:ee:a5:8f:24:96:90:07:30:d8:64:9c:d5:cf:10:fd:
         bc:02:68:1d:74:47:06:c3:29:6e:a1:c8:be:e9:80:bd:e6:cd:
         33:66:0f:3f:fe:e5:cf:d0:7f:c9:85:69:6c:25:6d:92:68:e0:
         b8:a3:b3:a2:ca:59:82:2d:58:18:df:0f:90:84:46:b5:56:6c:
         eb:2b:33:d4:c0:21:81:d3:4a:45:c8:6f:af:eb:1e:45:62:6a:
         85:b8:63:9d:a9:c8:79:56:92:7f:98:2c:e0:bf:5c:c8:49:8d:
         5c:56:cb:87:84:50:5d:1f:67:6a:ed:e8:bb:2f:81:23:4e:a5:
         e7:8a:d1:0d:98:05:75:32:20:21:41:f9:0f:4c:40:d2:c3:99:
         fd:c9:59:c5:f2:cf:70:26:6b:9a:08:48:88:a5:a7:11:32:5f:
         1e:53:9e:10:af:57:88:9a:44:73:83:b7:d0:cc:b2:58:fc:94:
         7a:4d:b1:72:7c:84:47:fa:b1:33:d5:4c:66:2e:50:5b:06:e0:
         fd:ed:0b:66:26:e1:45:55:47:e3:4f:a1:d4:d8:63:4c:28:e5:
         ca:ef:7d:f2:13:d0:8d:ec:d9:d4:fb:fd:10:f7:87:1a:d0:29:
         b4:b3:9e:67:c7:61:3c:64:9a:c0:ea:f9:71:d1:1a:ad:1d:cb:
         36:9b:bd:61
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUd6udJkoC4gaIZsSZEBsSqbPyE24wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDMzMTMyWhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYTRiMGFhMzdjNTgzZTk2Yzc0ZTA3ZDQ5MTE5ODY4Zjgx
YzA3ZmUxOWQwZDlkNWExZGE2MTI5Yjg4NDY4ZDhjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpnRF3vKahyt+oXtp/cgIF9ggL50BmGfxL930iAwuMYNpa
DGsz4bscEyrmpRag910qaGHg7i6LG5gpbV44RAdPFKp6ltEsTMbcbnN0/uzGvGA1
TwRDV2xN1OHAJPpo4Bc6APYAg6/gBmWk67mGR895J6y8T5V5wHl4ZO8DcxJzvkB2
34G7otVC7gkDfQF7WbgeSFlMtfNmhExog7+WhaGYy8WoIeUJpLw6cpnlh3CvpTSX
LGBFxDKCKG0c+wBDB9G/CVZYGCSoPMVutPd9qG95vMaRBB+EGlXfzdHKYp8TJPqZ
OIesV3D2gFiY6dysAj+HjhUvKZKHuoLKputTFEITAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUf9Ekx6qVZ9s65oGeJkFT9Sz1GqYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2FlOTVhOTY1LWJjMjgtNGQ1YS1hNDg0LTg4YzYxMWI3N2VlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAL+QwDQYJKoZIhvcNAQELBQADggEBAK9Jl+6ljySWkAcw2GSc1c8Q
/bwCaB10RwbDKW6hyL7pgL3mzTNmDz/+5c/Qf8mFaWwlbZJo4Lijs6LKWYItWBjf
D5CERrVWbOsrM9TAIYHTSkXIb6/rHkViaoW4Y52pyHlWkn+YLOC/XMhJjVxWy4eE
UF0fZ2rt6LsvgSNOpeeK0Q2YBXUyICFB+Q9MQNLDmf3JWcXyz3Ama5oISIilpxEy
Xx5TnhCvV4iaRHODt9DMslj8lHpNsXJ8hEf6sTPVTGYuUFsG4P3tC2Ym4UVVR+NP
odTYY0wo5crvffIT0I3s2dT7/RD3hxrQKbSznmfHYTxkmsDq+XHRGq0dyzabvWE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:29 2025 by rpki-client