This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3cdf205-184a-4ec0-8d30-6c2331814cca.roa
File:                     b3cdf205-184a-4ec0-8d30-6c2331814cca.roa (raw, json)
Hash identifier:          dO8p4DiXKPCD40eo8osSeHRX8SiAnAyrrCnnFJevkXc=
Subject key identifier:   E4:7A:6C:E4:5B:66:D9:64:D1:43:72:3F:87:4C:89:99:07:C0:FE:DA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       60E36535010ACC6CAEBEA1C00D147B08DC0139D4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3cdf205-184a-4ec0-8d30-6c2331814cca.roa
Signing time:             Mon 24 Nov 2025 05:52:04 +0000
ROA not before:           Mon 24 Nov 2025 05:52:04 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1852::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e3:65:35:01:0a:cc:6c:ae:be:a1:c0:0d:14:7b:08:dc:01:39:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:52:04 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=c411529ecf16191f0bfcafdf71e7f8a8951fbe6c0fd1255d05ad4af32ee6081b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:47:80:68:88:93:fe:af:ea:f3:33:d1:d6:
                    86:1a:f2:34:47:bb:80:97:ac:4d:36:28:f2:9c:80:
                    b5:39:b6:97:12:4d:91:4c:59:06:25:02:57:be:b6:
                    a1:3c:2e:c2:68:6c:b8:bd:14:a0:4b:7c:d4:82:2e:
                    ef:75:f9:1f:fd:54:4d:a1:29:cb:84:75:e1:03:96:
                    1c:58:e5:9d:98:e7:94:fd:21:53:af:24:67:9c:77:
                    0c:b5:92:6d:76:e0:78:c1:62:f9:68:3e:76:79:26:
                    ed:95:d7:16:b6:23:72:a8:b2:42:29:2b:95:81:6b:
                    af:4a:49:31:12:62:88:ad:99:fb:77:ca:ae:92:93:
                    30:a0:33:fa:78:4a:e8:54:c4:2e:04:46:1a:17:2a:
                    4d:7a:aa:9a:6e:01:7d:e9:50:44:a1:d9:a2:e2:54:
                    65:ff:88:7a:85:2d:2d:89:37:1f:f4:97:07:93:11:
                    9e:7b:a1:3c:68:9e:39:56:9c:13:1d:8e:24:f7:b0:
                    96:dd:2c:17:c2:44:2e:ec:66:d2:66:54:6f:0e:93:
                    52:da:9c:ff:4a:c4:bc:e0:ac:4c:fc:df:05:f1:90:
                    25:ad:39:cc:a9:23:5a:0a:c7:49:1b:07:ab:72:0a:
                    da:8d:ff:88:b6:e4:cb:c9:55:dc:02:3e:da:3e:2a:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7A:6C:E4:5B:66:D9:64:D1:43:72:3F:87:4C:89:99:07:C0:FE:DA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3cdf205-184a-4ec0-8d30-6c2331814cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1852::/47

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:28:27:53:65:93:5f:4d:6c:6d:1e:5a:7f:72:fc:1b:80:
         f7:eb:4d:27:ca:97:66:e6:e6:5e:a0:93:7d:74:2a:ad:3e:c4:
         ca:ee:4e:47:ae:62:1a:ed:6c:c0:e1:25:43:50:ee:82:f8:05:
         fe:82:d5:a7:e2:da:91:1d:d4:71:46:5b:3c:a6:6f:0a:5c:ad:
         9f:25:cf:0c:19:28:5b:4e:c5:4f:46:64:da:35:04:aa:6b:5a:
         c5:ca:42:d0:34:da:df:c8:15:94:a6:a6:5e:07:19:e5:49:f6:
         4b:5d:05:3b:37:f7:21:1c:f6:d4:b2:27:ca:af:10:1b:d7:e1:
         07:fc:70:7f:88:40:49:c7:36:5a:2c:78:68:a8:34:a6:35:bc:
         d3:9b:07:91:8e:3b:26:5d:d3:57:bc:40:f7:b8:34:66:93:33:
         e8:bf:06:43:fa:09:42:3d:79:8d:39:5b:a3:14:fc:1c:73:70:
         0e:71:d0:8d:34:a4:43:b1:84:a8:15:0b:20:79:1c:c0:e8:94:
         6f:18:23:f0:a1:82:e7:8d:10:7b:25:a4:84:4a:b4:85:4d:b8:
         0f:57:b5:23:1f:6e:5c:33:34:5e:31:33:0f:32:47:b4:b0:89:
         c2:a5:f4:96:37:3e:cf:11:f5:21:b6:d1:53:08:6a:3b:a2:e1:
         07:44:54:cd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYONlNQEKzGyuvqHADRR7CNwBOdQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDU1MjA0WhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNDExNTI5ZWNmMTYxOTFmMGJmY2FmZGY3MWU3ZjhhODk1
MWZiZTZjMGZkMTI1NWQwNWFkNGFmMzJlZTYwODFiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4F0eAaIiT/q/q8zPR1oYa8jRHu4CXrE02KPKcgLU5tpcS
TZFMWQYlAle+tqE8LsJobLi9FKBLfNSCLu91+R/9VE2hKcuEdeEDlhxY5Z2Y55T9
IVOvJGecdwy1km124HjBYvloPnZ5Ju2V1xa2I3KoskIpK5WBa69KSTESYoitmft3
yq6SkzCgM/p4SuhUxC4ERhoXKk16qppuAX3pUESh2aLiVGX/iHqFLS2JNx/0lweT
EZ57oTxonjlWnBMdjiT3sJbdLBfCRC7sZtJmVG8Ok1LanP9KxLzgrEz83wXxkCWt
OcypI1oKx0kbB6tyCtqN/4i25MvJVdwCPto+KjcBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5Hps5Ftm2WTRQ3I/h0yJmQfA/towHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2IzY2RmMjA1LTE4NGEtNGVjMC04ZDMwLTZjMjMzMTgxNGNjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAGFIwDQYJKoZIhvcNAQELBQADggEBABmqKCdTZZNfTWxtHlp/cvwb
gPfrTSfKl2bm5l6gk310Kq0+xMruTkeuYhrtbMDhJUNQ7oL4Bf6C1afi2pEd1HFG
WzymbwpcrZ8lzwwZKFtOxU9GZNo1BKprWsXKQtA02t/IFZSmpl4HGeVJ9ktdBTs3
9yEc9tSyJ8qvEBvX4Qf8cH+IQEnHNloseGioNKY1vNObB5GOOyZd01e8QPe4NGaT
M+i/BkP6CUI9eY05W6MU/BxzcA5x0I00pEOxhKgVCyB5HMDolG8YI/ChgueNEHsl
pIRKtIVNuA9XtSMfblwzNF4xMw8yR7SwicKl9JY3Ps8R9SG20VMIajui4QdEVM0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:15:22 2025 by rpki-client