This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2f0fde3-0667-45f8-81da-4b0a7968b586.roa
File:                     b2f0fde3-0667-45f8-81da-4b0a7968b586.roa (raw, json)
Hash identifier:          LUpYZmzDghaAfdKr+mvnsL/1YGQjsLwnplFp8AFaEVk=
Subject key identifier:   75:8F:FC:E3:91:AA:6B:90:92:16:14:A5:FA:94:83:37:01:93:11:CF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A4F2405DDCECDA99131FBE58E86871089D28010
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2f0fde3-0667-45f8-81da-4b0a7968b586.roa
Signing time:             Tue 25 Nov 2025 11:52:14 +0000
ROA not before:           Tue 25 Nov 2025 11:52:14 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e2e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4f:24:05:dd:ce:cd:a9:91:31:fb:e5:8e:86:87:10:89:d2:80:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 11:52:14 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=186d4d599963bcc25de6e3e7e10d5c0ac5f91b8976798fb043972252ceebb582, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:69:e9:59:af:77:5b:20:69:70:fc:0e:67:
                    56:8b:f4:1a:19:d2:4a:ff:3f:99:11:5b:94:d8:fa:
                    a4:f5:2b:c7:de:3e:65:1b:f2:77:53:1a:a7:1b:bd:
                    47:f0:81:54:a1:3f:fd:9c:9a:91:fd:ac:30:73:ce:
                    70:32:a1:17:6d:c2:61:4f:d7:15:e1:f9:2b:6b:80:
                    df:10:d2:ce:4d:0f:89:cd:07:c4:9c:35:4b:ec:44:
                    e3:a6:ac:a6:2b:7b:24:39:02:96:b7:93:f7:30:a9:
                    cb:cb:ad:22:6f:9a:14:10:23:54:81:bc:b2:ab:b1:
                    92:92:97:a9:2d:b2:e9:bc:be:9c:b3:b4:2d:b0:08:
                    95:58:8c:50:75:30:fd:7f:40:56:52:ea:14:fb:33:
                    a8:0a:f2:de:59:2e:3e:aa:f8:88:6b:98:9c:f4:6b:
                    cc:94:77:8c:5f:49:84:a7:3c:a7:2d:2a:d5:52:9b:
                    68:b7:b5:73:fd:bf:e4:1c:cb:69:c8:ee:a3:16:bf:
                    fa:cc:6a:20:b2:48:6d:e8:ef:e9:44:85:8a:b8:0e:
                    2a:2f:77:0f:27:ea:ff:49:fb:09:9e:90:58:3d:96:
                    cd:d3:f6:36:52:fa:c3:92:ff:e2:37:15:67:ce:65:
                    bb:3b:2c:e8:df:1e:20:84:12:e9:bd:c7:23:3e:b2:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8F:FC:E3:91:AA:6B:90:92:16:14:A5:FA:94:83:37:01:93:11:CF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2f0fde3-0667-45f8-81da-4b0a7968b586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e2e::/47

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:a1:f7:7e:8e:af:40:9e:8d:7e:2e:49:95:20:e7:59:59:
         3c:97:61:74:f4:42:b0:6e:61:e3:28:15:6a:c0:b1:68:8c:5a:
         8e:c4:4f:14:a8:d1:d5:a3:40:70:48:dd:17:8c:a3:11:36:94:
         17:20:43:13:08:73:73:e0:65:e3:ab:15:d5:77:dc:64:15:cd:
         c5:6f:95:29:b6:31:89:c0:2a:0e:6a:40:b6:d4:d1:10:90:34:
         a9:7f:14:a8:fe:63:e9:72:99:07:8f:d3:e3:92:90:51:bd:c2:
         90:9f:0b:3c:54:a2:c3:da:88:97:6d:93:8f:1c:5a:a6:70:57:
         68:34:69:2f:d2:8f:c9:14:b8:c1:27:05:81:c7:42:66:6b:9b:
         a2:2f:dd:92:30:f7:81:2a:a7:9d:b7:a2:4e:51:d4:34:ad:84:
         7b:1d:0b:eb:5f:df:a3:af:29:0a:68:4d:93:4d:ca:f4:7e:dd:
         cc:a9:74:a3:5f:ec:f7:50:4f:a1:9a:07:d4:c0:6b:d4:e9:cd:
         ce:cc:78:fd:cc:a9:43:f4:87:94:70:77:0a:15:70:33:34:06:
         ce:85:97:c4:78:02:f6:78:6d:2d:9b:35:f9:57:bf:a1:0a:a5:
         cb:07:9d:41:9f:25:11:fe:51:b7:5f:8a:b7:2a:a3:75:ec:50:
         7c:a2:33:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:28 2025 by rpki-client