This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b53b4f79-e126-4378-ab4d-a3fa286bb6ba.roa
File:                     b53b4f79-e126-4378-ab4d-a3fa286bb6ba.roa (raw, json)
Hash identifier:          jCo4Dx6lw3eFYTEo37PpmPcwYV5LG41GKFySjuZn+P0=
Subject key identifier:   42:61:1A:F8:70:37:C8:7D:AE:46:31:10:71:64:F3:E9:87:AC:02:41
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       47C51BF1DDDA7AA41BE98E8DFEAF1E6256DEB17C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b53b4f79-e126-4378-ab4d-a3fa286bb6ba.roa
Signing time:             Tue 25 Nov 2025 16:12:00 +0000
ROA not before:           Tue 25 Nov 2025 16:12:00 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:138c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c5:1b:f1:dd:da:7a:a4:1b:e9:8e:8d:fe:af:1e:62:56:de:b1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:12:00 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=ed840266615ad1e022f9ed18a6f3a18fcbae0d91af033668e6f7b6d023ef1850, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:5c:57:f0:3f:56:a9:5d:44:b8:57:fb:c5:
                    6b:58:55:aa:31:ac:bc:02:95:54:80:8a:64:50:06:
                    00:69:ca:a7:22:30:f0:85:c5:93:9b:9a:60:fb:de:
                    0a:11:41:09:47:8e:f9:83:3f:5f:15:84:9f:b5:10:
                    de:08:9a:62:82:f4:7b:f3:4c:aa:06:03:c5:ea:5e:
                    c7:69:47:c0:8c:48:86:55:00:06:dc:03:34:6f:a2:
                    4f:08:4c:90:b8:af:e2:c5:7f:93:f0:9f:7d:ab:0b:
                    1d:f2:c8:8e:e8:de:5e:34:0b:a4:9e:c1:ab:e3:21:
                    53:66:4e:a8:c0:e6:81:2e:b3:2b:4b:f9:32:59:dc:
                    cb:6c:e2:57:53:b1:2f:20:18:11:ab:6c:e0:eb:09:
                    3b:c9:44:e9:20:3e:5b:61:bd:9c:3b:1c:31:61:24:
                    f3:c2:db:c5:3d:a4:f5:5c:5d:7f:e7:c2:48:48:00:
                    c8:81:b5:4d:2d:2c:ec:48:34:00:a5:e7:97:e5:f0:
                    58:aa:aa:a5:5e:5b:cd:ed:e5:0e:3d:c1:46:de:7c:
                    ef:aa:e5:b4:c4:90:93:df:8a:f2:13:ce:10:07:74:
                    bf:92:86:1f:4c:2b:c9:a4:77:c8:77:6f:9f:0e:57:
                    fe:27:8c:58:97:bb:75:cd:b1:50:b8:d5:2d:74:95:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:61:1A:F8:70:37:C8:7D:AE:46:31:10:71:64:F3:E9:87:AC:02:41
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b53b4f79-e126-4378-ab4d-a3fa286bb6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:138c::/46

    Signature Algorithm: sha256WithRSAEncryption
         af:0f:99:b1:b1:2a:7e:f1:6f:4e:91:61:27:df:0d:39:0d:23:
         8f:c8:58:55:29:b3:56:f4:4f:6c:d6:bf:10:ef:a4:ff:2b:d1:
         a8:67:f2:0c:a7:ee:9c:4d:b7:80:9f:7e:76:72:37:99:07:28:
         e3:c4:a6:15:17:f4:8e:b9:a3:fa:53:41:a9:12:f9:ef:ed:73:
         2f:55:08:27:d0:65:04:81:d5:f5:39:ad:b8:ae:69:1b:aa:77:
         24:6b:ac:66:ce:1e:ad:d1:8f:11:02:b4:1d:18:e4:2e:32:96:
         6e:19:5b:46:fc:cc:0c:82:2a:73:18:17:ef:ff:8a:d2:71:d0:
         c2:ba:a0:49:43:ba:1d:55:e7:4c:90:6c:c4:9c:f9:5b:77:79:
         18:2b:5a:ae:98:d7:68:cc:ab:33:0f:d8:fe:da:6b:91:c8:a0:
         b2:82:33:37:6d:4f:3e:c2:f1:4a:ab:1b:a5:91:5f:91:55:79:
         8d:18:d9:aa:39:f7:9f:9a:1c:ba:cf:63:51:97:dc:f5:27:f0:
         72:a5:c0:c4:cb:73:d3:9a:ce:f9:e2:21:6c:e3:0b:c2:c5:95:
         f2:46:cd:84:e6:58:65:52:ae:79:6a:bc:27:f5:8b:eb:3d:0e:
         5e:66:4b:0d:a6:18:fa:b8:5d:6f:1c:a8:ca:33:ba:6c:a0:f8:
         4d:0d:73:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:55 2025 by rpki-client