This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b32204fa-761f-46c6-bf7e-876a64b37e29.roa
File:                     b32204fa-761f-46c6-bf7e-876a64b37e29.roa (raw, json)
Hash identifier:          Did2+UxNXtYWCePRQyAPz5K+HSSbLDlgj9PhgdbCRvU=
Subject key identifier:   F1:67:3E:D2:2F:B5:33:D9:D2:AA:AC:A7:ED:E6:3A:1F:36:3D:D3:C0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       36445F36196B06E2D796B791E7DC011D84FB3BE1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b32204fa-761f-46c6-bf7e-876a64b37e29.roa
Signing time:             Tue 25 Nov 2025 17:11:27 +0000
ROA not before:           Tue 25 Nov 2025 17:11:27 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38b0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:44:5f:36:19:6b:06:e2:d7:96:b7:91:e7:dc:01:1d:84:fb:3b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 17:11:27 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=285aa6a2646588bb70d2cfb646473b36cea768f847e6118cbaada8da97fd7aab, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:7a:0c:60:7a:f9:29:eb:a6:ac:94:b7:b8:
                    af:ce:d4:dc:03:02:d9:25:8b:7e:42:21:86:e8:98:
                    03:85:2b:97:f6:fd:d9:5a:90:d4:cf:7b:46:80:cd:
                    61:a9:bd:d8:f5:f1:38:67:48:5e:cf:b8:5e:f8:2a:
                    4d:51:d6:2d:86:7f:c3:01:a7:0b:bd:da:f4:7b:45:
                    55:20:d7:be:25:25:90:c4:db:6c:bc:50:fa:f8:fd:
                    75:07:a0:c2:04:ce:2e:8d:f8:a9:a6:2a:ab:35:05:
                    ab:20:ad:06:51:99:29:e1:6e:f6:5f:9e:2f:10:8f:
                    e1:41:7b:bf:46:e5:67:e3:c0:ea:66:8a:54:72:7e:
                    33:0d:35:66:c6:93:f1:3c:c5:e9:f8:42:53:ae:74:
                    9b:fb:f6:8f:ce:a8:0b:37:be:9e:4f:96:b6:55:07:
                    91:cf:28:57:2a:36:fb:03:ba:f6:cd:94:ec:a7:72:
                    59:2b:dd:87:13:b3:82:81:5e:28:27:4d:a8:67:62:
                    26:bb:5c:55:9b:40:1f:30:62:9b:fd:1f:39:07:d3:
                    4c:1f:c0:78:3e:a7:82:63:00:f1:88:a8:48:0b:4b:
                    8c:00:dc:5c:0c:0a:70:bb:b1:0f:60:3a:e4:fd:2c:
                    64:81:5a:87:be:25:47:ad:f6:5e:91:fa:fd:f0:65:
                    cc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:3E:D2:2F:B5:33:D9:D2:AA:AC:A7:ED:E6:3A:1F:36:3D:D3:C0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b32204fa-761f-46c6-bf7e-876a64b37e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38b0::/45

    Signature Algorithm: sha256WithRSAEncryption
         b1:9c:0f:b7:19:90:8e:dd:6d:04:9d:85:8a:16:b5:1b:f3:99:
         2e:a7:b1:04:89:99:43:d3:69:81:2f:26:1d:b3:b6:dc:4c:7c:
         12:46:1b:22:a5:ce:6a:3e:69:37:ac:91:6a:fe:c3:aa:23:bf:
         a0:fc:d4:2b:57:42:5c:be:f9:ad:c8:cf:67:ac:c0:9b:92:57:
         db:83:bb:ed:d4:f9:b5:9e:ec:84:db:c2:b7:8a:b9:22:93:a1:
         f1:6e:2e:da:29:a6:05:c4:59:41:4b:60:12:c7:8f:91:a7:fd:
         19:8d:42:13:f7:83:53:af:ea:27:7c:08:17:08:b2:e1:89:ff:
         55:ea:7d:27:69:16:38:95:a5:f0:d0:31:a4:10:f6:88:04:49:
         34:cc:71:d2:52:25:94:44:35:d7:2e:e1:c5:9f:8f:d4:52:ee:
         df:c3:a4:4e:07:5d:80:8e:50:f7:c8:ce:b2:d6:35:39:da:65:
         84:ac:43:93:10:70:e8:69:77:11:9a:ae:12:2f:55:8c:85:a6:
         bb:b2:83:0a:5a:cd:fe:cb:85:04:ac:a3:ee:6d:3e:e9:e1:d6:
         12:9e:5b:c7:23:f4:bc:01:d7:12:d6:28:da:2a:a5:a9:eb:9b:
         69:0d:1d:92:92:4a:3c:4c:cc:c1:c4:c3:81:3b:91:6f:69:23:
         6b:16:7c:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:01 2025 by rpki-client