This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bc3add0b-bae7-4ee1-9cbc-e3bd167a1d47.roa
File:                     bc3add0b-bae7-4ee1-9cbc-e3bd167a1d47.roa (raw, json)
Hash identifier:          8717q2dlD4tjt00OvHyDqNfDQQ7q+KOSHe9r4HhDc+c=
Subject key identifier:   9E:9C:A6:82:6D:AC:72:D2:00:28:E4:CA:84:1E:4C:57:D1:12:7D:DD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       011A7D50C80EA2A6389B8754078CD0541A4CA582
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bc3add0b-bae7-4ee1-9cbc-e3bd167a1d47.roa
Signing time:             Tue 25 Nov 2025 02:40:10 +0000
ROA not before:           Tue 25 Nov 2025 02:40:10 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c24::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1a:7d:50:c8:0e:a2:a6:38:9b:87:54:07:8c:d0:54:1a:4c:a5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 02:40:10 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a09957f23e6dd2faa0d39755ad21eb4ee6a62c5f9ac0da13f04e2c437995759b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:e3:c3:05:66:47:5d:fa:3d:a0:f0:05:40:
                    6d:42:12:1f:11:18:26:8d:ed:d3:58:0b:29:ed:9b:
                    ec:31:ac:ec:bc:64:b4:d7:30:d7:88:5e:61:36:b0:
                    e8:c2:87:42:fd:e8:98:31:6d:7f:1c:00:e3:87:9a:
                    7b:79:42:b9:78:57:82:88:72:58:4b:06:2d:84:f6:
                    bc:b0:68:13:08:fd:ac:6e:61:c2:ea:31:f6:be:24:
                    88:73:8a:cb:e7:b6:01:d7:5e:8a:d8:a7:65:2f:ee:
                    6b:2a:44:1c:9e:63:46:90:45:3e:93:fc:36:84:e1:
                    0a:41:9e:97:26:9b:a2:dc:98:86:bc:cd:4c:76:32:
                    67:7d:53:fc:07:5e:0b:aa:0f:a0:42:31:f2:41:a6:
                    cd:92:cc:9d:a3:b1:98:09:2a:61:cd:ed:7e:c4:42:
                    b3:c1:29:51:c3:bb:34:01:c6:c4:fe:32:14:bb:e5:
                    5d:4b:26:3b:31:60:8b:8e:72:31:0b:3a:a4:b7:ff:
                    67:72:33:47:ab:a5:29:99:11:27:bf:2d:60:bd:81:
                    f3:eb:c9:da:23:15:45:b2:c4:a6:75:45:63:f5:35:
                    a6:06:c3:c5:02:72:0b:61:83:e9:ae:3e:c7:db:d7:
                    0e:1d:70:bd:69:ab:fb:82:8a:c1:9c:b6:42:50:4a:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9C:A6:82:6D:AC:72:D2:00:28:E4:CA:84:1E:4C:57:D1:12:7D:DD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bc3add0b-bae7-4ee1-9cbc-e3bd167a1d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c24::/46

    Signature Algorithm: sha256WithRSAEncryption
         69:2c:f3:0b:d6:35:1a:84:6b:aa:86:5f:07:58:3a:1a:f6:cf:
         88:03:46:95:01:49:d2:a5:24:a1:1e:ef:23:9d:a3:9e:6d:0a:
         32:b0:38:b5:fa:84:f4:70:16:96:e5:ab:f0:dd:e0:3a:3d:c0:
         bc:fc:3a:32:3d:48:0a:fb:c7:e9:f9:0d:a0:6e:a2:cc:5b:a1:
         c0:bf:4a:1f:cf:ac:dc:59:c3:9b:66:7a:f1:a2:99:33:b6:bd:
         59:93:d4:3b:d0:3c:32:a1:56:d6:44:71:9b:da:c7:67:09:8b:
         6f:15:19:ed:77:1a:bd:86:33:ff:d1:1e:f3:14:4a:88:92:45:
         f1:a6:51:7a:76:e4:d3:52:a8:10:6b:73:09:ad:6c:ae:ed:1a:
         39:ac:7a:8a:40:ed:9d:3c:e7:23:53:e7:ba:f8:d3:b4:a5:70:
         95:8b:dc:d1:ef:26:0a:e2:15:9e:e4:38:6d:e2:ad:b8:0c:92:
         70:06:f7:9a:b2:3e:06:8d:8f:e5:ce:3c:07:4a:19:7e:5e:79:
         22:af:49:76:a9:e8:86:2b:a9:de:f9:f8:31:47:c0:ff:b0:e1:
         c2:c7:ac:2d:4c:4a:b5:60:91:d3:48:e4:66:2d:da:9b:29:83:
         5a:87:fc:2e:cc:61:44:c0:36:e6:e1:3d:50:b7:af:45:43:d2:
         34:f3:e3:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:52:41 2025 by rpki-client