This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2064814-6163-4de8-bca2-34ea8c35ab03.roa
File:                     b2064814-6163-4de8-bca2-34ea8c35ab03.roa (raw, json)
Hash identifier:          pxiwR3VLgNSR7XbbIv4RswztNcDCZG7ppXBRl0hE7qc=
Subject key identifier:   FC:C8:36:D3:BA:67:C2:76:0F:9C:F3:D5:80:22:CA:71:E4:E4:38:8C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       09712CA12A7B8284280E0A9FD1E62E356EC5F839
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2064814-6163-4de8-bca2-34ea8c35ab03.roa
Signing time:             Tue 25 Nov 2025 08:41:34 +0000
ROA not before:           Tue 25 Nov 2025 08:41:34 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a18::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:71:2c:a1:2a:7b:82:84:28:0e:0a:9f:d1:e6:2e:35:6e:c5:f8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:41:34 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=03e0044de549dc09467e53b5cc962e6312b4913a472189d6215dbd0891c53e2f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:fb:51:d4:08:40:1b:14:47:86:c5:54:c9:
                    d4:68:3b:11:d5:10:79:93:83:bf:ee:ab:a9:c6:cc:
                    3f:ff:84:de:c1:3d:fb:4b:63:1b:8f:de:e7:39:38:
                    3a:b7:e1:b5:75:64:96:b0:b0:ab:f7:81:42:05:3a:
                    0a:97:ff:d4:08:e9:08:a1:2d:44:a6:28:9e:e6:0b:
                    b8:2e:df:5a:9e:5a:ff:ff:27:32:80:b3:70:1e:9b:
                    a1:18:58:2a:c5:b7:4b:c5:b3:5a:92:c3:fd:24:74:
                    97:1b:65:d4:1f:49:c6:e5:52:9b:ee:0e:66:7a:cc:
                    f1:14:6e:5d:61:cc:a9:78:43:76:73:72:e3:5c:7b:
                    2c:b8:92:be:c2:ef:4c:5d:8b:26:e9:28:16:3c:cf:
                    14:da:da:7a:54:c8:f0:aa:9c:02:14:ad:60:64:d2:
                    df:fb:9a:75:0c:5c:03:38:99:92:0f:d6:2b:b8:f9:
                    35:13:41:e7:c1:7c:05:74:f0:fd:d5:6d:2b:0c:45:
                    3b:d7:95:b6:a2:b8:43:31:80:c0:b3:f3:62:27:19:
                    04:65:9b:48:e0:52:d0:b5:2c:15:63:ac:8a:dd:3f:
                    ac:a4:6b:6a:fa:40:ac:87:a7:58:22:10:05:86:b2:
                    45:c2:bf:02:6e:9d:e4:e3:0d:f2:8c:95:d0:0d:71:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C8:36:D3:BA:67:C2:76:0F:9C:F3:D5:80:22:CA:71:E4:E4:38:8C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2064814-6163-4de8-bca2-34ea8c35ab03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a18::/46

    Signature Algorithm: sha256WithRSAEncryption
         39:77:fb:5c:32:95:85:65:f0:56:61:cb:be:c4:43:05:61:3f:
         ce:b6:8e:f1:cb:c5:cb:ac:70:2c:b4:06:71:34:ca:5e:38:55:
         1e:48:62:e7:7a:d0:a2:2a:ac:03:a2:2b:3d:8b:63:a1:5a:1a:
         65:26:87:9b:2f:8d:bd:6e:8d:58:22:a1:90:ec:d6:5b:38:5d:
         b7:c7:5d:cb:3f:4e:b0:0a:87:e1:d0:f6:b2:67:59:1c:d8:b4:
         5e:82:3f:e0:4a:59:cf:fc:77:5c:63:ee:1e:4d:e5:40:cb:ca:
         ae:e3:8e:71:64:2d:6b:cf:c8:33:57:c9:73:54:a4:75:ca:d7:
         48:97:b0:d4:0c:46:6c:2d:ef:f4:48:2b:13:5d:9b:a3:04:2d:
         36:a7:d8:64:c4:66:bd:fe:22:2e:8e:62:d1:61:59:30:5c:06:
         f4:08:08:e2:94:ad:99:c1:b2:e1:10:6b:ab:0c:68:2e:21:af:
         cb:0d:0b:e0:fc:a3:3a:ee:5d:9a:32:28:83:1f:05:67:d4:75:
         ab:8f:28:2d:7d:82:96:dc:77:e8:93:a7:81:4e:c8:46:b0:6f:
         01:04:3e:e4:1a:38:db:7a:b7:a7:c7:0a:d1:ed:96:59:4f:b5:
         d0:65:60:09:e0:28:91:cf:ab:88:35:d4:04:10:71:66:b3:87:
         fb:ff:f9:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:50:12 2025 by rpki-client