This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd50bc8d-5a39-48ae-98d7-4a6a9ae79144.roa
File:                     bd50bc8d-5a39-48ae-98d7-4a6a9ae79144.roa (raw, json)
Hash identifier:          /duwaDOQkSn9mGixsjtDrf4mwvtpYxOW1yEGKUBF4Ak=
Subject key identifier:   C5:2A:4B:A5:66:B1:3D:75:38:01:99:A0:59:66:94:93:03:B3:A6:B8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4CC1ED83009997F86DF21B60AD900F6C8E2DCDCC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd50bc8d-5a39-48ae-98d7-4a6a9ae79144.roa
Signing time:             Mon 24 Nov 2025 02:10:58 +0000
ROA not before:           Mon 24 Nov 2025 02:10:58 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a20::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c1:ed:83:00:99:97:f8:6d:f2:1b:60:ad:90:0f:6c:8e:2d:cd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:10:58 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=cd649af7e2b07ac4045c3a4b9d1481aa6c912aee18646e5447906b065cc26b2e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:5c:8d:17:58:49:6d:4c:bd:1b:4f:6e:64:
                    89:17:45:81:37:2d:62:f1:e6:83:c6:36:72:b6:45:
                    af:82:03:21:cd:6f:e2:3e:24:b0:ac:71:98:e1:2f:
                    38:be:03:3c:46:d5:05:d3:b6:ef:36:52:e1:14:35:
                    78:ca:0a:75:59:cf:2e:85:b8:04:64:d7:7e:68:e4:
                    9b:e1:5e:cf:8d:10:51:48:b3:b0:0e:d3:e4:08:a6:
                    14:71:16:26:c2:70:1e:9c:74:ae:ec:91:f1:4a:37:
                    e1:3b:f1:9b:4f:86:8d:e2:5c:9a:ee:8b:8d:b2:2d:
                    3d:8c:33:4f:51:19:82:db:94:48:ad:0b:95:cb:90:
                    ff:bd:79:c5:17:1e:cb:6a:30:73:25:72:d0:11:9f:
                    2d:ca:d2:31:98:05:df:1f:39:a6:46:a6:4e:15:b8:
                    15:2e:85:89:d1:93:d3:81:cb:3d:a0:93:bb:ba:e9:
                    e9:59:7b:0d:88:68:04:6e:d1:62:23:a3:4f:30:89:
                    48:41:d8:2a:4b:83:5d:91:14:6e:9b:1f:21:53:dc:
                    c6:8e:06:a5:92:53:c8:e0:37:e3:31:cf:be:45:68:
                    7d:21:8f:90:06:f4:52:32:7b:68:5a:e2:cc:b0:8f:
                    84:65:27:cf:72:ca:7a:28:84:39:2c:f9:05:57:92:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2A:4B:A5:66:B1:3D:75:38:01:99:A0:59:66:94:93:03:B3:A6:B8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd50bc8d-5a39-48ae-98d7-4a6a9ae79144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a20::/47

    Signature Algorithm: sha256WithRSAEncryption
         bc:0d:7e:0a:a0:66:d8:fe:1c:36:d0:9e:fa:aa:4c:14:16:48:
         d0:cd:ed:6c:f4:cf:d9:4b:83:7d:58:d5:97:66:c7:71:bd:13:
         59:bd:3e:ab:c6:06:bd:4b:d4:e3:17:c3:55:f9:9b:57:0f:c4:
         ac:38:7b:44:4c:50:ef:75:26:c5:18:43:fc:16:b1:3a:ec:6f:
         a7:82:fc:15:e7:72:1e:ff:3e:91:74:80:ba:f5:62:aa:e9:c4:
         33:8a:50:c9:27:b8:b0:29:a9:f0:4f:d9:0f:04:ee:30:8b:88:
         5d:a8:e6:dd:85:cb:c3:c8:52:98:24:a0:49:33:4d:6c:d9:ce:
         c1:90:3a:bd:5a:44:0f:0e:4b:3b:61:20:e8:4f:5c:2a:e6:58:
         f4:ce:26:e4:ab:2d:f3:ba:40:af:c5:23:4b:3c:a6:37:5c:c7:
         b7:36:87:d0:0c:ac:1b:8e:7d:12:9b:97:50:6e:df:de:4f:95:
         f6:e6:73:8f:90:52:83:d2:c8:ce:ef:03:22:d0:b9:e9:f0:78:
         67:5c:47:00:5c:ae:2a:b1:79:82:ee:4d:6f:38:0c:85:d4:fb:
         52:6d:69:21:f8:3f:fe:cb:a4:ff:96:f0:2d:dd:28:47:7a:c8:
         b9:cb:41:33:f7:a3:42:74:8f:41:5c:4d:47:c7:6a:bb:58:94:
         9a:a6:d0:49
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTMHtgwCZl/ht8htgrZAPbI4tzcwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDIxMDU4WhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZDY0OWFmN2UyYjA3YWM0MDQ1YzNhNGI5ZDE0ODFhYTZj
OTEyYWVlMTg2NDZlNTQ0NzkwNmIwNjVjYzI2YjJlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUv1yNF1hJbUy9G09uZIkXRYE3LWLx5oPGNnK2Ra+CAyHN
b+I+JLCscZjhLzi+AzxG1QXTtu82UuEUNXjKCnVZzy6FuARk135o5JvhXs+NEFFI
s7AO0+QIphRxFibCcB6cdK7skfFKN+E78ZtPho3iXJrui42yLT2MM09RGYLblEit
C5XLkP+9ecUXHstqMHMlctARny3K0jGYBd8fOaZGpk4VuBUuhYnRk9OByz2gk7u6
6elZew2IaARu0WIjo08wiUhB2CpLg12RFG6bHyFT3MaOBqWSU8jgN+Mxz75FaH0h
j5AG9FIye2ha4sywj4RlJ89yynoohDks+QVXkvNVAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxSpLpWaxPXU4AZmgWWaUkwOzprgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2JkNTBiYzhkLTVhMzktNDhhZS05OGQ3LTRhNmE5YWU3OTE0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAGiAwDQYJKoZIhvcNAQELBQADggEBALwNfgqgZtj+HDbQnvqqTBQW
SNDN7Wz0z9lLg31Y1Zdmx3G9E1m9PqvGBr1L1OMXw1X5m1cPxKw4e0RMUO91JsUY
Q/wWsTrsb6eC/BXnch7/PpF0gLr1YqrpxDOKUMknuLApqfBP2Q8E7jCLiF2o5t2F
y8PIUpgkoEkzTWzZzsGQOr1aRA8OSzthIOhPXCrmWPTOJuSrLfO6QK/FI0s8pjdc
x7c2h9AMrBuOfRKbl1Bu395Plfbmc4+QUoPSyM7vAyLQuenweGdcRwBcriqxeYLu
TW84DIXU+1JtaSH4P/7LpP+W8C3dKEd6yLnLQTP3o0J0j0FcTUfHartYlJqm0Ek=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:51:37 2025 by rpki-client