This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b84a4504-9016-4b45-b97e-28b2d2719bb0.roa
File:                     b84a4504-9016-4b45-b97e-28b2d2719bb0.roa (raw, json)
Hash identifier:          77ukG17J2xnAkIvfkodL9tgYCia3fPwssMe/1NRC6Ms=
Subject key identifier:   CD:E6:68:05:23:46:EA:5E:F4:3B:4F:AF:97:88:8D:2B:83:4B:AB:64
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3CDDCEFA01C69397C6DB226D09216D325E77C644
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b84a4504-9016-4b45-b97e-28b2d2719bb0.roa
Signing time:             Mon 24 Nov 2025 02:11:03 +0000
ROA not before:           Mon 24 Nov 2025 02:11:03 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1c12::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:dd:ce:fa:01:c6:93:97:c6:db:22:6d:09:21:6d:32:5e:77:c6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:11:03 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=05e29c0b5c681819df673f8517deaec8e2d75424d6dde0b66ef33cc3488580e5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:43:0a:89:54:70:11:69:22:db:c4:57:cd:
                    b5:a9:10:2a:96:92:3c:bd:77:a2:ce:f6:e4:2e:64:
                    44:40:66:9c:82:07:94:b7:06:80:73:2e:83:ac:00:
                    fc:e3:26:10:9b:4f:cc:b8:41:1b:3b:f6:91:9a:22:
                    1a:f9:1c:95:cf:cf:f7:0a:19:2a:0a:a2:9d:e9:fc:
                    ea:59:94:7f:8c:2d:30:97:bc:2e:ee:7e:a5:fd:26:
                    62:80:c7:3a:7a:48:e8:71:89:65:02:00:52:8e:07:
                    d7:cd:ae:02:6f:9b:dc:ee:5b:83:b7:f5:b4:ed:4d:
                    98:f7:18:26:4c:ee:0d:ac:f5:2a:35:bf:c4:77:26:
                    8f:9d:f8:68:6a:fe:ba:ab:2b:c9:e8:3b:6f:2c:4a:
                    95:09:d8:41:87:f2:b4:ec:a9:13:08:33:ec:0a:ee:
                    74:bb:44:a6:99:46:a5:f8:a7:25:91:4c:bb:74:45:
                    c6:8b:7e:d2:5d:07:d4:df:83:e3:43:bd:21:74:38:
                    6f:4f:31:0d:d7:f2:c5:33:d1:0f:dc:78:51:47:9b:
                    6c:d6:21:fc:29:04:16:53:4a:e2:1a:41:8d:aa:3f:
                    9d:9d:c1:9d:8c:3f:73:19:ac:f3:25:dc:11:8e:dc:
                    8b:49:da:ff:f1:4f:04:34:d7:24:6e:93:10:88:97:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E6:68:05:23:46:EA:5E:F4:3B:4F:AF:97:88:8D:2B:83:4B:AB:64
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b84a4504-9016-4b45-b97e-28b2d2719bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1c12::/47

    Signature Algorithm: sha256WithRSAEncryption
         1f:62:7b:31:7e:ce:04:6b:3d:ae:bf:d9:9c:1f:3b:a2:e7:d4:
         41:d3:39:f7:aa:17:78:91:2b:08:e6:51:09:87:28:b4:8f:aa:
         07:aa:62:62:52:01:5d:8a:29:f9:1d:2f:e2:9f:ed:8b:5e:a0:
         d6:f7:16:4a:d9:f3:ad:41:a1:8f:c5:c6:24:60:75:83:b9:29:
         24:c6:a1:61:05:64:d8:53:96:3f:3d:ce:06:9f:74:4f:92:ba:
         10:fb:52:4e:e3:d4:85:61:5a:12:9e:17:a8:ba:01:29:c0:52:
         58:bb:0f:27:22:ca:a6:9a:55:30:5f:be:48:7f:96:61:32:15:
         7f:34:97:3a:34:70:63:3a:a1:e5:1b:35:cc:cc:b7:32:08:d3:
         ac:54:e8:d3:64:c3:e3:8e:c9:29:2a:67:7c:c7:8d:2c:23:b0:
         a3:ce:aa:ab:16:2a:e1:21:b7:4a:2a:d9:51:5d:e0:1c:71:30:
         36:d7:79:bd:52:37:9e:03:a2:5c:3d:70:ec:03:0b:80:29:0c:
         de:9b:ce:bd:73:ae:2f:ff:3b:6e:e0:9c:40:3f:16:4e:f2:c1:
         05:33:a2:ea:c3:15:d4:fe:5c:d0:cc:e4:70:07:c2:8f:9e:8f:
         d6:45:e4:09:f8:d3:77:d2:06:32:5e:47:5a:8a:bd:70:4e:56:
         94:8c:cc:18
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPN3O+gHGk5fG2yJtCSFtMl53xkQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDIxMTAzWhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNWUyOWMwYjVjNjgxODE5ZGY2NzNmODUxN2RlYWVjOGUy
ZDc1NDI0ZDZkZGUwYjY2ZWYzM2NjMzQ4ODU4MGU1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFXEMKiVRwEWki28RXzbWpECqWkjy9d6LO9uQuZERAZpyC
B5S3BoBzLoOsAPzjJhCbT8y4QRs79pGaIhr5HJXPz/cKGSoKop3p/OpZlH+MLTCX
vC7ufqX9JmKAxzp6SOhxiWUCAFKOB9fNrgJvm9zuW4O39bTtTZj3GCZM7g2s9So1
v8R3Jo+d+Ghq/rqrK8noO28sSpUJ2EGH8rTsqRMIM+wK7nS7RKaZRqX4pyWRTLt0
RcaLftJdB9Tfg+NDvSF0OG9PMQ3X8sUz0Q/ceFFHm2zWIfwpBBZTSuIaQY2qP52d
wZ2MP3MZrPMl3BGO3ItJ2v/xTwQ01yRukxCIl5qvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUzeZoBSNG6l70O0+vl4iNK4NLq2QwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2I4NGE0NTA0LTkwMTYtNGI0NS1iOTdlLTI4YjJkMjcxOWJiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAHBIwDQYJKoZIhvcNAQELBQADggEBAB9iezF+zgRrPa6/2ZwfO6Ln
1EHTOfeqF3iRKwjmUQmHKLSPqgeqYmJSAV2KKfkdL+Kf7YteoNb3FkrZ861BoY/F
xiRgdYO5KSTGoWEFZNhTlj89zgafdE+SuhD7Uk7j1IVhWhKeF6i6ASnAUli7Dyci
yqaaVTBfvkh/lmEyFX80lzo0cGM6oeUbNczMtzII06xU6NNkw+OOySkqZ3zHjSwj
sKPOqqsWKuEht0oq2VFd4BxxMDbXeb1SN54Dolw9cOwDC4ApDN6bzr1zri//O27g
nEA/Fk7ywQUzourDFdT+XNDM5HAHwo+ej9ZF5An403fSBjJeR1qKvXBOVpSMzBg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:06:37 2025 by rpki-client