This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b94ee065-23c3-47fe-a3e5-7fe212b36760.roa
File:                     b94ee065-23c3-47fe-a3e5-7fe212b36760.roa (raw, json)
Hash identifier:          dDPFtCxZQ9jA8Sb1izbfvH61xW2Kqxc9Z5zmuK0vaOc=
Subject key identifier:   57:B7:E7:12:1F:E2:55:CA:08:7E:A3:A9:CC:15:34:40:F8:10:16:88
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02EDB8EE26864CF07EA5C7CFD13C16F4AACED0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b94ee065-23c3-47fe-a3e5-7fe212b36760.roa
Signing time:             Tue 25 Nov 2025 02:41:02 +0000
ROA not before:           Tue 25 Nov 2025 02:41:02 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3946::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ed:b8:ee:26:86:4c:f0:7e:a5:c7:cf:d1:3c:16:f4:aa:ce:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 02:41:02 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=e222cd3cf9864e93efeaf38d87c728e27ca2a4ad9d52d3c9481ef255f818d405, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:69:95:1d:f3:9a:43:a9:eb:83:1d:2e:41:
                    1f:31:8a:34:99:4c:e6:7a:d3:f1:53:12:52:0c:af:
                    8a:01:94:c0:a3:32:6b:01:fd:bc:5d:fe:7c:2e:a3:
                    2d:e6:41:9c:5f:1d:5c:bf:f1:ae:2a:53:b4:a0:48:
                    e1:6b:d4:46:41:82:ac:cc:ec:f8:b1:30:53:e8:bf:
                    ee:29:95:1a:0a:13:3e:e8:ae:c8:67:27:a9:cf:60:
                    ee:16:9a:40:d6:b7:56:1a:2c:cc:8d:40:17:53:aa:
                    ec:6b:05:21:5b:dd:48:f9:e5:09:7c:a6:d9:2a:dc:
                    48:b7:6a:0e:72:49:57:05:7c:af:f5:46:dc:f3:88:
                    14:58:ec:29:be:41:a9:74:b6:87:35:2f:e2:1a:1d:
                    59:9c:b2:cd:68:9c:11:2f:aa:d5:00:c5:7c:01:b8:
                    cc:44:91:38:f8:46:3a:80:e5:88:7e:03:5a:02:30:
                    ad:18:d7:cf:ff:56:fe:ab:af:10:f4:39:f6:a8:1f:
                    d9:20:79:ba:df:9e:89:48:d5:08:c6:0c:df:da:d1:
                    a3:d6:96:99:07:cf:6e:b5:fe:cc:a9:38:0f:b4:0c:
                    a8:23:18:4c:6f:b5:2d:71:b6:e2:c3:0b:81:58:d9:
                    83:25:e8:f1:05:6b:c1:da:ad:5f:4e:a1:54:eb:b7:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B7:E7:12:1F:E2:55:CA:08:7E:A3:A9:CC:15:34:40:F8:10:16:88
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b94ee065-23c3-47fe-a3e5-7fe212b36760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3946::/47

    Signature Algorithm: sha256WithRSAEncryption
         29:2b:da:8d:ca:af:a1:48:5d:24:93:32:57:66:fe:91:7a:5a:
         cd:b2:9e:39:a5:60:78:62:75:6e:ec:54:a2:e0:dc:ac:58:08:
         60:91:99:47:cc:ce:4e:f6:04:36:3c:67:69:09:83:bf:df:0f:
         8c:05:90:85:1f:9c:48:5a:eb:2b:5e:e9:8d:ab:81:08:6b:13:
         39:53:91:1a:ef:be:6f:3b:34:93:32:e7:28:4d:de:c8:96:ef:
         64:3e:0b:87:ff:1b:c8:0e:66:8f:25:75:20:fa:df:b5:b4:d7:
         ba:8a:b9:f6:ef:8a:eb:7c:9a:64:f9:f8:ee:f5:10:4d:0e:b6:
         68:56:f7:2f:fb:e2:b5:01:4e:b1:84:06:33:1d:93:ce:8f:13:
         32:20:bb:31:31:08:45:bd:cb:3d:06:d6:64:32:21:e8:0f:19:
         52:94:e9:5c:12:85:f4:47:e5:a7:7e:29:45:99:18:d0:40:08:
         b3:c3:d1:12:50:b2:bb:5a:a1:87:bf:4a:e4:cc:1f:00:37:b4:
         48:81:4b:a7:36:05:02:49:8e:54:1d:6e:b9:c3:39:75:e4:24:
         61:eb:c7:fa:13:23:e5:c3:40:d2:4f:ed:48:25:ea:d7:06:cf:
         15:eb:8c:d1:59:82:d5:41:f1:c5:d3:8c:57:2d:fc:dc:e9:0c:
         4e:b4:f0:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:41 2025 by rpki-client