This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd2c0457-c997-4695-b0a8-e01187b12853.roa
File:                     bd2c0457-c997-4695-b0a8-e01187b12853.roa (raw, json)
Hash identifier:          uGgAA4903X1vvwVL5BIaNrNQMzOFs6u42AVeSNz3VXo=
Subject key identifier:   D6:0E:C2:9A:72:60:25:D6:98:62:94:1D:AD:5F:5D:B8:4C:51:57:C9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       05CFB5518BD508A7F3A075BE8B85552C042B5674
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd2c0457-c997-4695-b0a8-e01187b12853.roa
Signing time:             Tue 25 Nov 2025 15:42:24 +0000
ROA not before:           Tue 25 Nov 2025 15:42:24 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1b88::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cf:b5:51:8b:d5:08:a7:f3:a0:75:be:8b:85:55:2c:04:2b:56:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 15:42:24 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b5daa38a0f8d8b436720553f4aebf7e62ff860a6f45f52bd307d773351bf27a6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:90:e0:15:08:75:30:fc:f1:72:a1:0c:e6:4f:
                    50:99:0c:89:0d:c9:c5:9f:0f:71:d3:bf:b1:cc:3b:
                    82:1a:bd:db:6c:53:1f:4a:ee:cd:09:18:9c:20:2d:
                    37:73:30:39:37:b7:7d:a9:46:07:7a:a9:d5:a4:73:
                    37:ef:0d:c2:df:5f:51:8f:a6:88:9a:80:8d:6c:a2:
                    6e:fd:f8:fc:36:a6:83:7e:8b:78:8e:04:d2:7e:15:
                    96:5e:52:df:3f:95:cb:11:76:cd:4d:58:cf:ff:9e:
                    5d:fc:e8:85:7b:67:6a:3b:71:17:c4:38:63:81:95:
                    3f:f4:1a:e2:3b:a2:78:60:d0:96:df:47:5d:5f:5c:
                    f7:10:f8:c0:51:c2:6c:59:cd:53:09:2e:0a:c4:e2:
                    58:3e:0d:a1:05:29:45:65:3a:83:1b:e1:d8:a1:0b:
                    83:62:a8:ec:18:c2:1a:5e:2d:4e:35:de:50:34:a4:
                    6f:77:6f:bb:c8:94:6a:67:a1:bc:a7:59:9c:9b:b1:
                    d8:71:aa:f9:8c:49:c9:96:68:61:32:cd:77:8c:f1:
                    dd:b9:c7:e4:66:1b:21:02:8d:74:a1:19:98:98:81:
                    c9:5b:bf:b8:4e:53:22:61:7d:30:0d:55:de:50:4e:
                    9f:f0:56:b4:54:f2:9d:e8:7b:35:64:32:d4:e1:56:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0E:C2:9A:72:60:25:D6:98:62:94:1D:AD:5F:5D:B8:4C:51:57:C9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd2c0457-c997-4695-b0a8-e01187b12853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1b88::/45

    Signature Algorithm: sha256WithRSAEncryption
         be:ee:f4:86:7f:49:20:d3:08:ed:24:f0:3e:e8:8d:14:1e:11:
         3b:d5:72:35:2d:73:48:66:30:21:2e:85:e8:e4:c8:3e:5a:84:
         6f:e0:d2:2f:27:a7:51:f0:e6:ce:af:1e:ed:a4:7f:b1:25:95:
         aa:d7:15:63:95:a2:76:56:af:ae:36:fe:53:36:c9:27:9d:05:
         f3:e9:83:b0:2e:70:cc:9d:51:24:65:ad:c7:c5:c7:80:e4:b1:
         ca:6d:e5:32:c7:d8:f3:c8:76:bf:c5:3c:06:c1:74:5e:1b:2a:
         d2:06:db:21:e4:16:16:bf:cc:f4:b7:f4:09:94:f0:a8:2b:4c:
         b1:aa:37:c5:61:1b:64:4d:29:cb:e1:73:25:76:2d:2b:9d:5a:
         47:1f:e6:02:1d:e8:46:62:47:0d:e5:63:27:7a:59:fc:f9:b5:
         d3:7c:b0:15:53:b6:f0:ab:b2:e5:a8:c0:7e:20:33:e9:c5:f6:
         cd:73:52:c6:9d:01:0c:4b:9f:24:ad:f8:f2:9c:c8:4e:67:8f:
         76:00:c8:c8:bd:0e:e0:09:c4:4b:5d:4f:b5:d8:75:89:14:c5:
         bd:92:df:9d:58:26:4c:ef:54:b8:bf:7b:3a:b9:7f:d5:8c:d1:
         dc:75:cb:74:b1:02:09:37:1e:43:fc:32:3d:48:3d:23:bd:92:
         a7:5c:ec:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:50:17 2025 by rpki-client