This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9317a73-f17f-46fb-a797-11cbca97115e.roa
File:                     b9317a73-f17f-46fb-a797-11cbca97115e.roa (raw, json)
Hash identifier:          b7N533VPkyvX9LBCUOjZEh+h5j2HIYq9xAflBx4TOn4=
Subject key identifier:   D4:4D:23:DC:57:3F:84:7F:62:2F:61:69:CC:2C:0E:F6:0A:F0:FA:27
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2C2515E434863AC0274BF578E97C2394125FD622
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9317a73-f17f-46fb-a797-11cbca97115e.roa
Signing time:             Tue 25 Nov 2025 12:40:53 +0000
ROA not before:           Tue 25 Nov 2025 12:40:53 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f80::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:25:15:e4:34:86:3a:c0:27:4b:f5:78:e9:7c:23:94:12:5f:d6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 12:40:53 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=73b75f1c9f75967ed6afe722cc08314685ae6c15f56d9f916d019c70577af664, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:f2:a4:82:40:13:9e:b7:ee:7b:0a:4b:73:
                    bf:ac:ed:09:56:77:20:70:a3:51:8d:30:86:be:f2:
                    43:b6:51:c5:fe:7f:3a:1f:ba:7d:8b:2c:df:29:f8:
                    8b:ca:6a:72:17:28:88:6d:4c:0f:41:ac:69:91:5f:
                    83:98:9d:3b:41:1f:17:eb:7c:39:fa:70:8a:75:e9:
                    4c:d9:a0:40:9c:f8:f5:a0:16:57:fd:61:c4:a3:74:
                    ff:2a:f4:c1:b2:c5:9b:c7:e7:37:62:05:ed:d8:1a:
                    02:7e:cb:42:0c:72:5b:d2:c9:e7:5c:47:d7:d1:8d:
                    7c:c4:97:f0:5d:aa:76:61:c8:18:07:49:10:ef:e7:
                    5b:f6:c9:a8:c8:3f:d9:29:be:3d:04:22:1b:bb:c0:
                    9b:3e:93:9f:e4:ca:f9:8e:c1:5b:3c:ed:cc:98:78:
                    61:c1:06:70:fd:3d:ab:9d:5e:3b:cc:77:ef:9c:7c:
                    46:86:14:37:30:85:29:cf:5d:95:70:ea:1f:41:37:
                    88:02:84:75:0a:bf:50:a7:f7:26:47:12:99:f8:2c:
                    9a:c9:2b:c8:a0:20:e1:d7:0b:ef:bd:53:c7:7a:2d:
                    a7:a4:8c:55:21:70:e7:46:49:87:ba:ca:4a:3f:ca:
                    04:2b:59:9f:bf:1e:c9:c2:98:41:86:98:43:68:30:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4D:23:DC:57:3F:84:7F:62:2F:61:69:CC:2C:0E:F6:0A:F0:FA:27
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9317a73-f17f-46fb-a797-11cbca97115e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f80::/45

    Signature Algorithm: sha256WithRSAEncryption
         72:32:07:32:a8:53:6e:c8:bc:26:03:b5:a7:9c:fc:e5:9e:e2:
         70:0d:98:9b:a5:61:5b:0a:c4:5e:d9:97:89:36:b1:75:c7:c2:
         79:97:99:e3:15:41:17:bf:04:a5:58:c1:07:e9:14:13:d7:25:
         ee:21:66:5b:37:2b:f6:30:63:d4:c2:2c:8e:d0:63:33:60:c7:
         5f:3f:f8:5a:66:a5:d0:42:ff:48:33:45:c7:90:53:7e:05:ee:
         91:e0:22:c2:84:07:ed:e3:c8:2b:a1:42:78:f9:c8:e3:93:21:
         89:7c:85:59:4b:7d:66:3c:b9:c8:11:9d:e2:36:98:87:65:7a:
         c6:ae:2c:4a:3a:81:d5:5b:b7:b9:15:85:33:d4:f2:1e:84:41:
         22:c1:c9:2e:1a:b7:7a:8b:d6:0d:5b:5e:b7:48:37:04:b2:a2:
         33:29:46:51:25:44:9b:7c:e7:ef:4a:b6:17:ac:9f:62:34:fa:
         f9:50:aa:d6:7f:b7:be:cc:77:f8:ce:48:27:41:25:4e:bb:94:
         67:30:71:17:fd:3c:f9:32:c3:99:95:8a:f3:2f:30:c5:2c:06:
         02:35:8b:e3:54:e3:5a:0b:78:7a:82:b9:cb:28:71:54:82:5c:
         b5:3b:d5:3a:d5:14:21:4f:76:5f:95:bb:d2:0b:60:3a:d4:71:
         bb:32:fc:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:53 2025 by rpki-client