This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bbfd955b-fca1-421f-a45e-0e4831e02fee.roa
File:                     bbfd955b-fca1-421f-a45e-0e4831e02fee.roa (raw, json)
Hash identifier:          YGAkVlQ4Fxiplhq4I4X1KBBTWYeaJ7M/XmlbTLlCRow=
Subject key identifier:   0C:60:AD:52:63:28:DA:11:75:32:55:B3:32:C6:F9:0A:C8:8E:20:0C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7DBF60CBA57356E484A34C1BF18F53CD17F5FC4C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bbfd955b-fca1-421f-a45e-0e4831e02fee.roa
Signing time:             Tue 25 Nov 2025 12:12:13 +0000
ROA not before:           Tue 25 Nov 2025 12:12:13 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1d58::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bf:60:cb:a5:73:56:e4:84:a3:4c:1b:f1:8f:53:cd:17:f5:fc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 12:12:13 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=03e41d9ef353a03cd104c7dd7661a763e8f0dd189131223c507c1d92f9f7bcd5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:78:5b:4d:fd:df:a0:0b:1a:1e:2f:a2:ef:
                    10:5e:d6:4e:64:bd:7c:31:c1:fa:94:6d:f7:4c:46:
                    58:91:6f:af:38:49:94:79:5c:a4:e9:89:77:30:6c:
                    38:b4:ff:47:7b:41:52:fd:38:1d:23:95:5a:6c:4d:
                    60:25:91:66:f1:a6:d6:c1:64:e1:f4:16:8e:5b:3e:
                    5c:ea:ce:33:fb:2c:39:58:b3:5d:a8:31:fd:0e:9b:
                    19:a0:a4:02:a6:f2:0c:f6:87:ea:96:42:56:4a:3a:
                    92:c0:6d:f3:93:93:94:4a:d0:da:5a:ef:a9:45:07:
                    c1:6e:5b:98:69:df:05:7a:b5:6d:47:11:91:a3:1c:
                    1d:8b:d7:47:da:b5:97:fb:0a:45:a9:13:1d:a6:88:
                    ad:7e:8f:f5:1b:d7:c8:2f:db:97:85:dc:0f:ae:74:
                    2e:ef:8e:de:b8:53:6c:73:19:19:4d:5f:3f:55:ad:
                    b5:6e:76:97:29:aa:c1:9f:99:00:d5:87:24:31:28:
                    67:6b:6e:8a:85:da:04:fa:3a:c8:36:d9:84:e5:5d:
                    f6:43:cf:06:3d:48:25:af:c0:28:82:cb:6a:9a:2c:
                    60:5c:ee:4e:3e:89:70:d0:d8:30:ab:20:af:45:e5:
                    f8:c3:6f:b7:3e:27:0d:7a:b9:30:52:de:b2:4b:91:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:AD:52:63:28:DA:11:75:32:55:B3:32:C6:F9:0A:C8:8E:20:0C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bbfd955b-fca1-421f-a45e-0e4831e02fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1d58::/45

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:ed:1e:a2:a8:0b:eb:f3:fb:cc:d7:c7:38:4b:49:f2:41:
         95:fb:90:cc:4f:34:07:9b:c9:f9:19:03:45:4a:50:40:67:03:
         d0:a7:83:43:36:04:80:e3:3f:2a:fc:1e:3a:fd:23:a2:93:33:
         7b:cc:a7:84:ee:d7:2a:c4:66:f0:83:94:e4:d2:02:e0:2a:a6:
         b9:ef:cd:59:2a:63:f0:0b:2d:4e:fd:e2:c4:42:37:23:1d:54:
         50:22:f0:27:67:88:8f:46:5a:4f:1d:22:ed:60:2d:9a:af:8f:
         c8:1d:ec:96:af:39:c8:83:4e:03:32:3f:5f:ad:ce:75:4f:d3:
         44:63:4d:29:e7:05:cd:5b:fe:86:31:55:94:bb:3f:f9:f6:28:
         bb:a1:fe:28:60:b6:9f:90:e2:aa:77:ee:ac:e8:c9:12:cd:e1:
         6a:d0:d1:66:ee:44:65:65:7f:49:d4:65:3b:4c:7b:2b:8a:b7:
         e7:47:b8:a9:ec:ba:8d:2a:ac:0d:88:eb:52:35:ab:3f:6f:a7:
         0b:ed:6a:d9:b1:c9:d4:c5:b5:98:c3:c7:36:8d:42:cd:37:b5:
         cb:8f:ea:a1:92:f5:02:3e:b7:0d:4a:54:fc:3d:27:fd:05:f5:
         e8:7d:6f:c1:76:aa:2a:26:1e:fb:08:83:44:3b:0e:56:8e:2b:
         9d:ee:92:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:41:11 2025 by rpki-client