This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2a53e2f-76cc-44fd-978a-0b475a70d762.roa
File:                     b2a53e2f-76cc-44fd-978a-0b475a70d762.roa (raw, json)
Hash identifier:          1JSgbR05sYlhJm/QU8wXZ2UKBYRN32Mc8ObEftOBRxg=
Subject key identifier:   62:13:7B:3C:5D:58:60:2A:22:EB:00:5C:E4:D3:1E:6E:A2:61:8A:A9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6B862E62572CD4981F50FEB81A3C4ED7EA9F440D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2a53e2f-76cc-44fd-978a-0b475a70d762.roa
Signing time:             Tue 25 Nov 2025 06:20:06 +0000
ROA not before:           Tue 25 Nov 2025 06:20:06 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1b88::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:86:2e:62:57:2c:d4:98:1f:50:fe:b8:1a:3c:4e:d7:ea:9f:44:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:20:06 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=477e6db5c63549b351541186d6b6030b9c4c0b41e0235605835965f34e0d698d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:0e:f5:21:cb:d9:e6:09:28:bb:0a:71:35:
                    f2:5b:c9:87:bb:fe:e0:01:0a:0f:4f:78:97:b3:7f:
                    fe:8e:87:a3:41:0d:85:b6:5d:bd:1d:f6:78:cb:8b:
                    a5:17:40:06:0c:96:03:eb:ea:57:1b:d5:2d:16:03:
                    dd:f7:1c:e1:ba:56:c1:67:f4:50:49:aa:cb:fb:24:
                    6c:3b:51:ba:f8:f3:e5:81:81:ca:9b:fb:85:0f:08:
                    e3:ab:d2:b4:1d:8c:f1:71:aa:8d:1f:5f:b7:3b:6a:
                    73:99:fe:bc:8e:bb:b6:7f:b0:4f:f6:cb:a3:1d:5e:
                    cd:0e:23:45:bb:1a:60:cf:d4:f8:e4:c4:05:26:20:
                    26:af:81:67:c8:75:2d:fe:0e:24:e5:b3:bd:85:e6:
                    cb:f2:2d:31:ad:cc:19:7b:88:0a:f5:31:ad:66:8e:
                    3b:6e:60:91:68:88:de:20:d4:bc:17:c1:da:81:4f:
                    d9:f7:56:60:24:41:28:45:d2:a6:5a:4a:82:13:23:
                    af:12:38:69:41:22:81:8f:6b:02:bc:24:09:bb:56:
                    d4:d3:88:d7:5d:b5:2e:b6:99:56:12:3f:c6:75:53:
                    96:21:d7:be:b2:a9:93:f6:74:08:e7:32:e9:30:dd:
                    74:61:3e:90:23:a8:d3:39:90:cf:7d:6f:6e:ba:6c:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:7B:3C:5D:58:60:2A:22:EB:00:5C:E4:D3:1E:6E:A2:61:8A:A9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2a53e2f-76cc-44fd-978a-0b475a70d762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1b88::/46

    Signature Algorithm: sha256WithRSAEncryption
         ab:49:5f:78:27:f4:93:97:fa:7b:7a:ec:0e:4e:86:ef:47:d6:
         66:a5:69:0b:c7:a8:e8:78:94:57:67:9e:51:86:cd:a5:fa:ff:
         8b:f1:32:64:a2:38:1d:73:ca:18:01:ef:1b:f4:b8:b0:40:93:
         d7:98:98:f2:a1:cb:51:5f:4f:21:f1:1f:ba:0a:5b:f6:3b:93:
         28:1d:c6:8c:c1:1a:34:23:5e:1f:bf:af:30:30:2f:5e:97:48:
         9d:fe:e2:67:87:6b:c6:95:a8:f2:94:49:da:a2:7e:6d:c4:3d:
         aa:17:19:a2:cc:f1:31:7f:a5:82:6c:df:e8:8c:95:1e:56:88:
         fc:9c:2a:e8:26:8f:e6:1b:2c:59:0c:e0:85:ab:67:f2:66:e1:
         52:b1:5c:35:66:aa:41:81:ec:1e:c8:15:2c:45:c3:d9:40:25:
         73:3c:20:e2:8b:4b:9c:14:19:dd:ca:66:78:7a:3a:a3:10:00:
         5e:33:fb:be:8e:ef:9b:03:91:94:02:78:12:92:67:31:fd:81:
         a4:5f:83:52:dc:09:33:48:9a:9d:2d:bd:3e:37:a9:ba:4a:1a:
         2c:f0:81:3a:0a:1d:a7:8c:3b:6c:65:82:58:82:c5:5c:4c:df:
         10:32:5e:ab:5d:86:ef:cd:75:82:99:65:80:94:99:fe:d8:76:
         fb:18:19:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:31 2025 by rpki-client