This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9861d33-799b-4111-939b-a8685ada4b76.roa
File:                     b9861d33-799b-4111-939b-a8685ada4b76.roa (raw, json)
Hash identifier:          K8VFPCCJlBANs3fl2pm21be16DrOpZgfH3nvW4nELKw=
Subject key identifier:   36:CF:8C:B5:A8:C0:7C:24:08:91:60:2C:1F:D2:FD:2C:C5:D7:57:ED
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A5FCEE4A5BF07C39CE9E4CDB455DF56437AAEF5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9861d33-799b-4111-939b-a8685ada4b76.roa
Signing time:             Tue 02 Dec 2025 00:51:21 +0000
ROA not before:           Tue 02 Dec 2025 00:51:21 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5f:ce:e4:a5:bf:07:c3:9c:e9:e4:cd:b4:55:df:56:43:7a:ae:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec  2 00:51:21 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=5d089f47ca9c1fab387beaf3b0ecb2ad9554cb9aa038b400c6669bc939512a40, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:be:9e:1f:60:7a:8f:3a:ce:87:1c:89:23:
                    38:f7:89:ab:40:74:4c:dc:3a:74:29:ba:5a:1a:b2:
                    ed:1f:ae:84:38:86:86:f1:25:83:2a:6f:dc:40:d2:
                    5c:c5:84:e7:f7:7b:ac:92:d3:c1:9f:cd:79:24:5a:
                    72:54:71:eb:00:87:e5:ec:a3:3e:c1:77:54:17:6f:
                    11:e0:78:fc:c1:70:9e:7d:bb:7a:e6:6a:ee:27:68:
                    17:17:0f:8b:33:50:86:a0:3c:e6:dc:db:18:2d:0c:
                    46:a3:ee:66:e9:58:e1:d2:72:96:32:5c:f0:5a:34:
                    0c:aa:c3:f7:99:fd:5a:88:f1:10:1c:16:6a:b3:9a:
                    c9:21:e2:5d:b9:81:36:68:ab:12:68:6a:53:8c:e8:
                    a5:0b:6a:f1:ae:d4:fe:c2:72:e5:4e:98:58:f0:52:
                    84:a7:a2:8e:98:38:f8:88:b0:73:4c:3c:43:97:a9:
                    d6:08:ec:83:ad:a2:d6:4e:40:67:f4:85:3c:f1:7e:
                    48:37:ad:84:0f:a6:9c:4b:cf:f5:8d:97:c3:2a:45:
                    17:2e:9f:6f:d6:55:a1:13:a6:f5:b6:8f:f2:48:55:
                    4e:f0:96:10:4e:31:a1:6a:e8:b8:68:23:2d:50:59:
                    77:0d:58:d9:84:14:1a:33:42:d5:82:d4:eb:98:dd:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:8C:B5:A8:C0:7C:24:08:91:60:2C:1F:D2:FD:2C:C5:D7:57:ED
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9861d33-799b-4111-939b-a8685ada4b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:44:07:c8:b0:a5:c8:08:5a:c2:b0:52:6b:45:02:c1:a7:07:
         db:d3:94:9a:5e:95:fd:37:96:13:ee:ef:bc:3e:84:7d:ca:d2:
         7d:72:1d:ce:16:0e:ce:06:a4:c8:eb:3a:0e:dc:f3:66:e1:39:
         e8:ab:a9:04:9d:ae:6c:7c:4a:ea:79:48:78:ca:fc:a7:c3:3b:
         d5:58:4d:54:25:28:b3:5e:54:9b:b9:e0:d0:69:80:05:26:b1:
         9d:63:bc:bd:8e:8a:b7:1b:e4:ba:33:ab:b7:14:09:fc:40:4e:
         cd:ea:04:20:0a:92:d9:4c:71:72:ff:f4:74:83:6a:9a:68:4d:
         68:1c:94:b9:28:fe:e6:86:21:14:0a:af:28:d3:87:66:44:6d:
         d7:76:69:6d:6d:63:8f:3f:aa:40:41:7c:29:9f:5e:6a:35:78:
         57:7c:90:1c:6c:94:a7:13:88:c5:47:32:af:78:ab:cc:e3:a7:
         05:51:3d:81:74:0f:49:d5:47:f8:8a:12:61:8c:cf:7d:3c:01:
         e4:e4:d3:46:0c:a2:20:4c:bd:07:6d:fb:26:7a:f6:4f:2e:bb:
         7b:24:45:5a:fa:4a:90:3a:0e:95:de:1c:a9:54:d5:f2:87:79:
         a4:dd:73:4f:ad:48:1a:e0:4d:af:53:6d:9a:7b:41:6a:90:03:
         94:c8:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:58:46 2025 by rpki-client