This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9cd8b95-a421-4ea8-a75a-4f843dfbe9a4.roa
File:                     b9cd8b95-a421-4ea8-a75a-4f843dfbe9a4.roa (raw, json)
Hash identifier:          h6UPvKH6cGgt8oe7jYlRv2ti7BXfrtZqJgKydEbjQvU=
Subject key identifier:   5B:A8:21:04:86:57:34:CD:8A:7D:8B:2B:8B:44:F5:F3:03:7E:62:32
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12F077C21F952B9F8F511FE7BC4CE833B23713EB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9cd8b95-a421-4ea8-a75a-4f843dfbe9a4.roa
Signing time:             Tue 25 Nov 2025 08:01:29 +0000
ROA not before:           Tue 25 Nov 2025 08:01:29 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f38::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f0:77:c2:1f:95:2b:9f:8f:51:1f:e7:bc:4c:e8:33:b2:37:13:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:01:29 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=12d33e1e5d3c50b3621d17ea60f9c36510f3877d6e8fe611e022c10243056263, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:53:98:b2:e3:f2:ab:aa:fd:0a:0e:19:5a:
                    03:eb:3e:ee:6f:25:4a:f3:bb:b4:30:46:e2:a4:5b:
                    44:30:6e:21:1d:ea:03:64:c8:c4:80:a1:5c:8f:d2:
                    5f:dc:c2:21:7b:7b:29:54:de:ae:c4:19:4d:21:f2:
                    74:fe:0e:bf:14:5e:32:75:12:cc:dd:e9:5f:52:5b:
                    4b:89:79:3a:9d:21:d6:85:f2:7d:7d:c6:b0:73:23:
                    00:8c:01:db:46:ea:af:c9:67:15:b2:ce:16:9e:be:
                    a0:ba:7a:fb:5f:ea:9a:34:f5:ef:de:0a:c5:fb:14:
                    cb:f8:5e:bd:0c:9f:ac:8d:ab:78:e6:6b:49:86:39:
                    d2:7f:94:e5:e8:0d:cd:94:cb:0a:c9:81:16:6e:2f:
                    7a:9f:29:6f:db:d4:eb:73:7f:43:be:1c:2f:4b:5d:
                    f7:86:e6:0e:ce:56:ac:4d:94:04:20:c5:18:f4:c7:
                    1f:5a:79:17:cb:3b:43:69:47:39:6e:89:e5:f7:f2:
                    d5:d9:12:69:0d:d1:f2:37:0d:a9:90:a2:13:30:04:
                    59:ea:a1:53:85:b9:43:94:24:fd:1d:ba:e6:31:34:
                    24:44:06:32:85:86:c6:b7:d9:1d:7d:da:59:39:34:
                    60:0d:90:35:9e:c8:23:d6:71:5d:cf:25:89:1b:2f:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A8:21:04:86:57:34:CD:8A:7D:8B:2B:8B:44:F5:F3:03:7E:62:32
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9cd8b95-a421-4ea8-a75a-4f843dfbe9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f38::/45

    Signature Algorithm: sha256WithRSAEncryption
         65:a6:cd:b7:16:2c:02:10:c0:89:7a:e6:29:58:83:c5:c0:85:
         23:50:e0:c0:98:32:80:01:10:74:09:8a:3d:dc:38:89:03:7f:
         a3:42:28:1a:ec:86:db:08:fd:46:40:13:20:3a:3b:8f:02:b5:
         f9:81:16:7e:4f:4a:47:e9:ff:88:3d:8c:66:51:cc:d9:cb:91:
         f4:a7:a5:51:cc:2e:79:6b:84:11:6f:f4:57:7a:9e:03:45:6c:
         8f:95:f2:70:21:d6:69:2a:d6:9a:fc:30:5f:3e:2e:8b:81:71:
         eb:7e:0b:53:f4:9c:7b:a7:59:23:31:76:23:c4:b3:34:ab:18:
         6c:6d:6b:fe:02:a0:19:32:9f:b7:80:1c:13:11:5b:bb:33:00:
         48:28:51:b0:cc:7c:e3:b2:af:f2:9c:3d:23:6d:5f:9e:ff:7b:
         ba:12:a3:4b:77:72:53:86:ba:9e:9f:e3:ec:8d:50:f5:4f:9e:
         15:e4:96:40:fb:26:9e:b0:36:2f:5c:ba:13:2f:e8:a1:f6:54:
         a5:a8:26:b2:f8:f0:6e:b8:c5:59:09:43:3a:81:b6:5f:f5:72:
         e3:c8:9e:15:75:f4:98:91:72:f0:fc:98:85:d6:27:2c:ae:ab:
         fa:7b:3c:0b:a2:89:fd:3e:66:4c:59:47:e6:e3:73:07:98:c5:
         39:9b:a6:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:15:58 2025 by rpki-client