This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c038bae5-32df-4547-b571-d9cbe489d971.roa
File:                     c038bae5-32df-4547-b571-d9cbe489d971.roa (raw, json)
Hash identifier:          qVadUQNrEWrOsJn4Jc+nZpDEyZ0wQO3n/f6tn93ca5k=
Subject key identifier:   2E:AB:D2:6E:C8:B0:6F:29:E6:12:09:F1:9F:0E:65:BF:BF:34:8E:9F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7E5D1AB26F372C6B195D2754E99D4C24480F6004
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c038bae5-32df-4547-b571-d9cbe489d971.roa
Signing time:             Mon 24 Nov 2025 02:51:37 +0000
ROA not before:           Mon 24 Nov 2025 02:51:37 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1614::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5d:1a:b2:6f:37:2c:6b:19:5d:27:54:e9:9d:4c:24:48:0f:60:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 02:51:37 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=3094fa2f7bc608cee53e6a027422864866e21cc5268fd85638c68c172c72441d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e9:0d:8d:32:9b:11:57:ac:af:5f:ce:73:8d:
                    ac:f4:68:0b:2a:6d:07:98:d3:ad:da:98:72:d9:cb:
                    e9:f3:fb:05:81:cf:a3:81:5c:84:fd:c0:e2:a3:4c:
                    dd:0a:6a:d8:88:39:90:16:8e:36:0b:26:e3:b5:31:
                    4f:6f:40:28:22:4d:e6:4f:21:57:41:f3:27:22:22:
                    d8:c6:24:62:95:14:a9:c0:c3:fd:4e:c5:23:53:4e:
                    79:f8:35:50:b1:07:e3:9d:09:98:99:ae:f6:a9:b4:
                    57:a2:08:b5:d6:0e:51:a3:9e:49:02:5f:a2:88:d0:
                    d1:a0:05:1e:61:0a:17:90:0b:2c:ad:04:13:1a:ca:
                    2e:0d:83:91:24:dc:4d:83:68:b3:d7:e6:02:f5:6e:
                    d5:08:44:1d:84:25:6f:4d:24:2b:3b:1c:d6:a5:4b:
                    d4:58:7e:09:3c:7c:e9:86:20:81:7b:ed:31:9e:80:
                    07:d2:42:4c:4b:35:b4:dd:61:48:4e:d0:a8:8d:3a:
                    5e:75:54:23:22:18:c5:fc:93:58:7c:5d:26:2f:c5:
                    53:cd:ce:e4:24:8b:9c:4d:23:f0:c2:cb:c6:9e:9d:
                    78:36:6b:25:68:ad:29:be:12:6b:ee:8b:89:c4:7b:
                    6d:9d:63:b5:7c:a6:89:d4:fa:c0:35:8f:0c:43:37:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AB:D2:6E:C8:B0:6F:29:E6:12:09:F1:9F:0E:65:BF:BF:34:8E:9F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c038bae5-32df-4547-b571-d9cbe489d971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1614::/47

    Signature Algorithm: sha256WithRSAEncryption
         b2:08:b0:cc:19:68:c5:d1:84:ba:f5:ef:07:fe:f7:07:9f:44:
         01:e0:80:8d:52:55:3c:fb:6f:e0:93:6d:dc:7e:79:58:00:3e:
         b5:85:5a:5b:b8:14:3a:5e:90:82:d7:5c:3e:23:98:68:8d:d8:
         5f:7f:0d:d3:6a:e0:96:20:e4:69:09:a8:4b:f1:4a:e9:ac:97:
         f9:57:fb:3a:80:c3:02:d4:a5:d5:57:fc:e3:b3:76:9e:63:70:
         3e:97:bd:07:97:b7:8d:19:84:9b:f7:26:a8:30:ae:61:b6:29:
         26:e2:21:8b:d5:01:ad:16:e4:44:bf:1b:8f:dd:6d:8f:0b:df:
         06:98:66:92:49:58:d2:2f:45:76:9e:ab:d0:88:65:57:1a:22:
         c8:bd:88:35:c1:21:5d:7a:ed:1b:b4:fa:dc:dd:e1:9c:dd:66:
         f7:a3:32:7b:bf:28:1f:54:da:5c:fa:11:d1:e4:3b:19:13:e2:
         a7:ea:6d:59:8e:b1:5e:13:ab:26:e3:9b:3f:76:97:fb:cc:40:
         12:5a:7a:a7:1b:65:f0:c6:09:f0:20:c3:4b:1e:7a:49:90:bb:
         db:ad:eb:f8:46:31:a6:de:e2:4d:82:57:f6:23:8c:c0:be:0e:
         eb:fd:ba:a2:55:cc:57:ab:97:5b:81:25:62:97:08:1f:80:cf:
         4c:6d:ce:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:16:25 2025 by rpki-client