This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af4165be-b7a6-4afe-b924-7154b2ddb56c.roa
File:                     af4165be-b7a6-4afe-b924-7154b2ddb56c.roa (raw, json)
Hash identifier:          PdCgUSfAHNK2PKKsakdQUGX5nzQpsKcNLL1sgDH8ldQ=
Subject key identifier:   9B:DB:A1:D0:4D:C3:F2:A9:B5:AE:1A:33:F4:7F:36:A5:82:B6:18:E2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       734679614DB5CDE9262FE8153E5C6DFB61FB88D3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af4165be-b7a6-4afe-b924-7154b2ddb56c.roa
Signing time:             Tue 25 Nov 2025 05:00:59 +0000
ROA not before:           Tue 25 Nov 2025 05:00:59 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b70::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:46:79:61:4d:b5:cd:e9:26:2f:e8:15:3e:5c:6d:fb:61:fb:88:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:00:59 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a2bd40d13ce45f69ab1e1456fd3b875fffb24130f5542c72a0ddb2dd525f2399, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:50:de:47:dd:e8:8f:15:16:34:9a:ea:ff:
                    1d:58:dc:c7:a3:a2:33:47:3a:36:e6:b3:94:7b:fd:
                    ea:68:b6:c5:b7:55:90:22:77:70:d5:59:1c:44:c5:
                    37:ed:02:f5:14:c3:3e:ff:11:ea:fa:60:83:03:33:
                    af:0f:18:11:3b:fe:35:64:f3:e5:2e:d9:04:fc:c9:
                    9b:3d:2b:9c:10:a4:0a:05:9f:6d:9f:c5:4e:26:4c:
                    ed:d0:41:56:02:dc:37:8d:4d:c3:2c:e6:b2:c2:f3:
                    65:30:90:bc:31:3d:c8:7a:34:98:cb:9e:c2:a3:3f:
                    68:f7:90:93:6d:f5:57:1e:fd:13:07:06:96:ac:40:
                    1d:74:27:49:43:4f:31:de:6e:de:d0:f5:41:b7:48:
                    05:66:fc:8e:6d:73:ee:07:6f:55:d1:67:02:fe:fb:
                    01:ba:67:ba:1b:08:7d:8e:cd:d8:21:c2:6d:90:36:
                    57:bc:49:ea:03:ae:de:6d:ac:40:b0:25:22:03:44:
                    4a:2f:c7:45:06:35:03:4c:05:97:61:d3:21:a5:e2:
                    fa:67:50:13:dd:66:04:83:fa:6a:50:00:ab:dc:17:
                    c5:ad:49:73:16:6c:6d:28:21:4b:18:63:c0:e7:9c:
                    fa:0c:41:e2:f8:f4:54:80:9a:b8:c9:25:48:44:fa:
                    1c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DB:A1:D0:4D:C3:F2:A9:B5:AE:1A:33:F4:7F:36:A5:82:B6:18:E2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af4165be-b7a6-4afe-b924-7154b2ddb56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b70::/47

    Signature Algorithm: sha256WithRSAEncryption
         5e:e7:6b:a4:3c:9a:11:d9:cb:57:0b:e2:be:eb:52:36:23:06:
         2b:b3:7b:01:58:38:14:3f:68:41:06:fe:67:74:d4:c0:c0:17:
         af:62:b0:de:80:ba:b9:65:e1:4d:6f:97:ba:cd:ce:c3:23:29:
         1a:a6:2c:b8:70:40:c4:3c:5b:1e:1e:3e:a7:0d:f7:28:d3:d5:
         8b:34:3e:37:4f:c0:57:eb:8c:1f:2b:6b:86:0d:aa:af:5d:f1:
         f1:47:51:ca:67:88:27:a1:d1:46:67:8e:59:e7:01:60:be:1e:
         ba:c8:78:67:a9:bb:a3:1e:ef:3d:c3:49:17:c5:ba:9f:dc:63:
         cf:5e:71:c2:c8:85:13:31:31:56:a1:45:c5:10:28:5c:92:72:
         c0:44:69:44:a4:6d:c8:ae:7e:a5:22:c9:a9:48:08:55:20:7b:
         ec:bd:5b:a9:2f:f5:de:38:6a:40:49:45:ea:8c:f4:2f:55:c8:
         02:9f:46:fb:e8:e0:45:68:3e:02:d0:83:4a:48:01:cf:d0:b6:
         9f:85:76:09:a3:9a:25:3d:05:f1:56:c3:f8:ce:4a:e4:e2:ff:
         69:78:65:55:4f:0c:6e:13:0a:5e:f6:31:83:8e:82:a8:ba:2f:
         8b:46:b3:7d:9d:d6:3b:e5:2f:db:35:e7:c4:c7:d8:bc:30:c2:
         a5:a3:f1:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:17:04 2025 by rpki-client