This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aff0e07a-e7f7-4d36-87ed-ed9786b7be7b.roa
File:                     aff0e07a-e7f7-4d36-87ed-ed9786b7be7b.roa (raw, json)
Hash identifier:          9YTBJdLWO3srU34gUu7upTpMh3FNwbO8o/3kB7Cy7qk=
Subject key identifier:   8F:55:07:29:15:57:D2:03:EA:F4:0D:01:7E:AF:4A:36:B9:C0:CC:4C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       38F14B8D81F1AA34D8EE53B6970E6CFCF32CDA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aff0e07a-e7f7-4d36-87ed-ed9786b7be7b.roa
Signing time:             Mon 24 Nov 2025 00:52:16 +0000
ROA not before:           Mon 24 Nov 2025 00:52:16 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a62::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f1:4b:8d:81:f1:aa:34:d8:ee:53:b6:97:0e:6c:fc:f3:2c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:52:16 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=e766835400e110756fedba54798bdb26dc3814c0619fede437d862b94675cbb3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:92:ec:50:e6:17:b6:7a:fe:87:82:b1:30:
                    ad:76:d1:3e:30:33:d6:98:c7:3d:57:3c:37:b5:19:
                    33:da:22:fc:1d:95:43:f3:e5:48:fd:f9:cd:42:ae:
                    af:9e:4d:0e:cb:89:ff:f1:45:76:56:25:a1:1b:54:
                    52:d5:55:b7:13:2d:91:f0:1a:3d:cf:ed:72:1e:cb:
                    99:b5:c0:bb:31:b7:9c:d7:7d:3f:8c:07:d3:bf:e7:
                    6c:e9:96:1e:25:f3:d2:45:85:26:12:be:5e:c4:0c:
                    70:2c:f7:1e:27:ac:90:13:25:67:85:eb:2e:be:c3:
                    f1:73:7e:3b:9e:5e:93:4d:61:43:88:55:1c:bd:24:
                    4b:df:aa:62:3a:66:12:a5:39:b1:da:c2:4a:dc:aa:
                    e9:ed:62:be:c9:5f:b0:81:fc:36:e1:de:49:87:5c:
                    b7:ce:63:0c:03:a7:d9:db:2e:4e:55:75:57:09:10:
                    f5:95:b6:34:20:b9:61:4b:27:6d:6c:94:55:b6:f8:
                    b5:06:f4:5e:48:35:35:dd:36:4f:6b:9c:bd:ab:7a:
                    76:14:1a:30:fa:4a:05:20:05:2e:f7:ab:6a:e2:0b:
                    2b:76:a1:f9:4e:7c:64:2b:15:a6:e2:1e:ee:7d:e3:
                    97:4a:96:4a:17:85:78:ef:24:bf:ac:87:4a:fe:6e:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:55:07:29:15:57:D2:03:EA:F4:0D:01:7E:AF:4A:36:B9:C0:CC:4C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aff0e07a-e7f7-4d36-87ed-ed9786b7be7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a62::/47

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:d7:4b:dc:f2:0d:81:1c:57:c9:07:49:c4:c1:a1:e4:d1:
         6c:4a:f3:4d:18:84:4f:8f:45:02:23:89:f4:06:0c:ad:d1:17:
         e4:19:fe:97:ff:0c:db:d4:7c:5c:16:4c:1c:c6:5e:c0:df:85:
         59:c8:f4:2a:4b:05:ed:23:90:8d:20:35:8d:bb:dc:aa:c3:f7:
         8a:d2:4a:70:46:04:43:35:ae:59:e8:7d:5d:3f:97:1e:3f:f7:
         98:b7:e0:e2:a9:42:31:67:a4:b8:8b:d3:8f:b1:a7:58:4a:48:
         f1:a9:e0:26:c5:3a:34:98:01:92:0e:0a:52:b6:2b:37:19:e2:
         cb:8b:6a:c8:55:c2:9e:c3:7c:b8:c9:2a:ba:b0:eb:51:00:75:
         8f:91:12:bd:12:84:fb:9b:27:8e:72:88:de:c5:0d:1e:94:b2:
         25:a5:90:1d:bd:ca:df:c4:50:89:65:c8:67:ce:08:73:21:59:
         79:aa:50:48:f8:54:43:ff:e7:75:94:e0:a6:ca:a9:f4:c3:59:
         9a:13:0c:69:ad:05:80:d7:d9:bc:08:e0:52:4b:37:7e:74:08:
         8b:1e:c8:19:61:fb:43:dd:8d:b8:c0:e9:71:fb:c4:00:a0:69:
         1d:8e:5c:24:7d:ce:b2:88:bf:28:0f:ce:5b:f5:de:c4:ed:5c:
         01:98:80:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:45 2025 by rpki-client