This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfe926f0-0765-427e-a15f-443a0f471f66.roa
File:                     bfe926f0-0765-427e-a15f-443a0f471f66.roa (raw, json)
Hash identifier:          lOPU8kTWW5FdL6Mv70FvZfNnw8AHmi/a6Gq9gOOT7XQ=
Subject key identifier:   C5:AB:E0:14:ED:B5:F1:87:18:33:E3:5F:7F:23:C3:E1:66:0E:6F:47
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A19525E2EBCEDD862CCA6BAA47776A681F82833
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfe926f0-0765-427e-a15f-443a0f471f66.roa
Signing time:             Mon 24 Nov 2025 05:01:33 +0000
ROA not before:           Mon 24 Nov 2025 05:01:33 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2966::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:19:52:5e:2e:bc:ed:d8:62:cc:a6:ba:a4:77:76:a6:81:f8:28:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:01:33 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=3f24ef80b401ffcefa98215f44cbd124628f9b4920e8f42fddec0c874edeacde, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:25:cd:92:e5:fb:be:1b:7e:a7:ed:6a:79:
                    b2:d4:0e:03:b4:65:19:6f:24:5a:af:53:72:7b:c8:
                    fd:7b:fe:f0:0a:27:16:f6:14:96:11:50:07:ff:5e:
                    61:0f:c1:bf:4a:33:1a:e7:81:5d:05:ea:cc:a2:5e:
                    ec:e8:0d:4a:20:1a:1c:ad:ba:08:10:57:96:da:67:
                    6a:e5:2c:e8:e7:45:85:2c:ef:88:fb:b0:39:9d:d2:
                    de:c2:ff:4e:13:b4:c9:9c:d1:ad:ad:86:64:a8:5d:
                    3e:8b:a7:a1:70:31:0d:55:ee:f3:20:b8:1a:3c:7f:
                    9d:5e:2a:2a:65:af:77:4c:d5:b4:3d:5c:b6:3f:62:
                    52:a5:53:52:32:78:21:17:ae:fc:ad:fc:8e:e7:c8:
                    f7:b9:dc:f5:34:a3:c7:c4:28:5c:c0:fd:4e:ca:49:
                    2e:55:83:a1:2a:b3:d3:71:91:b9:4e:9e:e4:e5:45:
                    39:35:d5:b2:83:51:74:dc:d6:36:8b:d7:19:c8:ab:
                    9c:70:11:7c:0b:5a:b6:6c:24:e3:11:5f:97:a2:97:
                    c3:e3:aa:93:17:e7:3b:f1:38:11:a9:78:71:f7:94:
                    bf:0b:20:1f:d6:e9:18:c6:71:a5:ce:bc:d2:5a:60:
                    10:74:e3:74:7b:51:8a:90:b2:19:a2:a0:24:1e:22:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AB:E0:14:ED:B5:F1:87:18:33:E3:5F:7F:23:C3:E1:66:0E:6F:47
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfe926f0-0765-427e-a15f-443a0f471f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2966::/47

    Signature Algorithm: sha256WithRSAEncryption
         1b:f1:cc:0b:f8:d1:55:bf:28:54:88:12:ce:65:57:03:82:09:
         bc:b0:fd:71:ac:38:0e:28:85:fd:e1:02:a6:73:07:c3:ff:54:
         e8:e5:7e:e2:ef:be:22:f5:a1:1c:98:3e:95:2b:b4:be:c4:86:
         da:1a:91:74:4a:d8:f4:5b:c7:c0:3f:75:a5:26:4b:b7:61:3b:
         72:39:95:db:b1:13:be:80:18:31:ba:86:aa:ac:f8:a0:cb:86:
         64:c8:ab:5a:6a:23:e0:8d:1d:d0:ff:e5:16:cd:99:35:e9:61:
         8f:36:81:e0:ae:3d:a5:0f:da:55:37:e7:8b:97:1a:29:63:87:
         e3:7e:e6:e1:df:b8:5d:7c:dd:55:95:67:91:91:a7:31:80:3a:
         4e:4f:b6:2d:95:70:58:6c:d6:96:bf:5b:73:61:01:04:38:ec:
         c6:f4:79:31:3d:80:2f:52:f0:1f:03:c9:25:3d:48:cd:27:88:
         95:1b:06:06:83:13:f7:34:4a:85:66:8e:c6:97:7e:43:58:79:
         16:80:f6:41:ff:68:34:f8:10:6a:d6:33:d4:18:3a:e3:30:36:
         55:61:51:18:ad:90:79:32:43:6c:55:7e:2e:89:56:5e:61:3b:
         c1:cd:8a:04:71:4b:6b:77:46:b7:77:f0:a0:a2:2a:69:3a:41:
         71:d7:ef:6c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUShlSXi687dhizKa6pHd2poH4KDMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDUwMTMzWhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZjI0ZWY4MGI0MDFmZmNlZmE5ODIxNWY0NGNiZDEyNDYy
OGY5YjQ5MjBlOGY0MmZkZGVjMGM4NzRlZGVhY2RlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC74iXNkuX7vht+p+1qebLUDgO0ZRlvJFqvU3J7yP17/vAK
Jxb2FJYRUAf/XmEPwb9KMxrngV0F6syiXuzoDUogGhytuggQV5baZ2rlLOjnRYUs
74j7sDmd0t7C/04TtMmc0a2thmSoXT6Lp6FwMQ1V7vMguBo8f51eKiplr3dM1bQ9
XLY/YlKlU1IyeCEXrvyt/I7nyPe53PU0o8fEKFzA/U7KSS5Vg6Eqs9NxkblOnuTl
RTk11bKDUXTc1jaL1xnIq5xwEXwLWrZsJOMRX5eil8PjqpMX5zvxOBGpeHH3lL8L
IB/W6RjGcaXOvNJaYBB043R7UYqQshmioCQeIveJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxavgFO218YcYM+NffyPD4WYOb0cwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2JmZTkyNmYwLTA3NjUtNDI3ZS1hMTVmLTQ0M2EwZjQ3MWY2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKWYwDQYJKoZIhvcNAQELBQADggEBABvxzAv40VW/KFSIEs5lVwOC
Cbyw/XGsOA4ohf3hAqZzB8P/VOjlfuLvviL1oRyYPpUrtL7EhtoakXRK2PRbx8A/
daUmS7dhO3I5lduxE76AGDG6hqqs+KDLhmTIq1pqI+CNHdD/5RbNmTXpYY82geCu
PaUP2lU354uXGiljh+N+5uHfuF183VWVZ5GRpzGAOk5Pti2VcFhs1pa/W3NhAQQ4
7Mb0eTE9gC9S8B8DySU9SM0niJUbBgaDE/c0SoVmjsaXfkNYeRaA9kH/aDT4EGrW
M9QYOuMwNlVhURitkHkyQ2xVfi6JVl5hO8HNigRxS2t3Rrd38KCiKmk6QXHX72w=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:53:00 2025 by rpki-client