This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bbfe378a-02c7-4e75-9fb5-21b60ad181c8.roa
File:                     bbfe378a-02c7-4e75-9fb5-21b60ad181c8.roa (raw, json)
Hash identifier:          4bGxPjbzBq1nr3zDsvMW+inS7HXRD0De3yQPfmpjwwU=
Subject key identifier:   DE:73:53:34:31:77:A8:93:A2:3F:5C:4F:F8:C9:0B:73:8C:3E:53:59
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       56D570C62ECEFDA5725981A88504E37398C5A3E4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bbfe378a-02c7-4e75-9fb5-21b60ad181c8.roa
Signing time:             Tue 25 Nov 2025 09:20:10 +0000
ROA not before:           Tue 25 Nov 2025 09:20:10 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3344::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d5:70:c6:2e:ce:fd:a5:72:59:81:a8:85:04:e3:73:98:c5:a3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 09:20:10 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c633fbb4f9c1d27667c5e95b1eb4f5299f08802c9320615f61dbd1ddcb88a439, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:41:aa:76:61:d8:63:ac:54:50:02:c3:85:
                    41:19:65:1f:fd:c6:01:c3:fa:c0:34:a9:fd:6a:19:
                    36:bb:8d:72:aa:2a:e8:50:b1:4d:0f:f6:2b:e0:83:
                    32:90:b3:07:87:31:08:64:86:62:2a:5a:bd:7b:eb:
                    6f:76:f8:4f:08:8a:09:89:ef:13:d6:17:24:83:0c:
                    86:6f:e3:f2:3e:28:be:b5:6c:82:b0:c4:81:25:c4:
                    91:11:5e:a1:c7:26:0a:00:9e:54:19:84:59:6c:54:
                    35:2f:14:2e:db:1e:b7:68:e9:c7:1f:89:eb:89:f5:
                    d2:ea:1a:be:10:f5:99:b6:7a:d0:9d:91:9a:fd:89:
                    21:d3:64:81:93:a7:54:db:b2:63:a4:f6:12:4c:a1:
                    17:ea:36:5e:38:b5:26:eb:68:46:69:8d:64:c4:ed:
                    69:cb:c6:61:fa:37:99:c7:66:51:69:25:10:28:ab:
                    42:a2:46:1b:09:7e:b6:b3:0f:06:91:ef:73:d9:45:
                    78:39:f6:be:88:97:24:c6:68:1a:96:47:aa:0b:6b:
                    f3:18:06:c9:a0:8f:c9:fe:b3:a2:9a:60:f5:ea:0c:
                    68:3e:91:b2:f3:25:d6:e5:cd:0e:12:3c:91:c6:33:
                    fc:04:2a:4b:70:dc:1f:b5:e0:54:6f:12:29:b9:27:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:73:53:34:31:77:A8:93:A2:3F:5C:4F:F8:C9:0B:73:8C:3E:53:59
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bbfe378a-02c7-4e75-9fb5-21b60ad181c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3344::/47

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:75:7c:12:c5:b7:c0:af:c9:74:28:0a:9d:36:27:bd:e8:
         ea:c6:f3:e4:fb:69:c3:5a:4d:e7:f9:16:9e:e1:59:19:bf:a2:
         c0:23:2a:2c:63:e0:6e:5f:b9:0a:45:69:46:29:32:b5:49:f8:
         ce:6b:a4:08:c6:57:91:f4:fa:c7:df:9a:ad:d7:e4:80:73:9a:
         d4:d9:59:6b:33:d6:48:ba:61:7b:f8:13:73:23:ec:5f:68:9c:
         5b:b1:40:91:bf:37:df:12:f5:2d:8b:ad:f2:5e:8a:12:2e:3c:
         b2:2c:e4:47:e1:00:4c:f4:bf:32:44:00:5f:4e:48:cd:09:ab:
         81:2b:96:a0:73:6c:e4:ce:c3:e3:74:66:1e:6b:5a:fa:85:18:
         d2:42:92:0b:45:e2:e7:dd:92:0a:94:a2:c0:b4:61:e1:bd:23:
         14:18:12:7e:b6:09:39:65:0f:fa:a2:01:00:e7:f1:26:69:9d:
         c6:82:14:1a:9a:1f:bc:3e:cd:6c:b7:db:07:96:f9:4b:ac:b2:
         95:a1:04:12:54:ee:7e:cf:54:3b:cb:28:f9:5b:fa:d8:36:52:
         f1:15:98:f9:55:20:4b:e2:b0:2a:0e:96:ff:98:26:7d:79:0e:
         30:66:40:37:7e:a4:4b:34:f3:c6:9a:9b:cf:4f:e4:e9:22:6f:
         e3:01:7a:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:21 2025 by rpki-client