This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c213e7fe-9da5-4a84-8edd-970c7746a915.roa
File:                     c213e7fe-9da5-4a84-8edd-970c7746a915.roa (raw, json)
Hash identifier:          J+DiTeWoIY76LayMAU/X9zPyG8FhmVtqeToe6LVb46g=
Subject key identifier:   EB:09:DE:E1:3E:EC:20:97:AB:DD:7F:20:B2:92:02:5F:2E:B9:61:89
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55F862A73531EB17D610A755A9DF33993B84339F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c213e7fe-9da5-4a84-8edd-970c7746a915.roa
Signing time:             Mon 24 Nov 2025 07:51:25 +0000
ROA not before:           Mon 24 Nov 2025 07:51:25 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a1e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f8:62:a7:35:31:eb:17:d6:10:a7:55:a9:df:33:99:3b:84:33:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 07:51:25 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=bdcbabd20f0fb08bf7165560cecff16756853231aa3e8cebd2dc67c9d7297f2e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:df:ab:ef:51:be:e8:79:cc:25:36:85:93:
                    0a:fe:1d:90:3f:bd:e8:46:97:7d:26:8e:94:2c:92:
                    7d:7b:10:97:00:78:d1:f6:3c:57:5f:97:98:12:49:
                    69:2e:36:69:f8:1e:2b:e7:21:e7:19:c4:cf:cf:4b:
                    ed:f6:0a:a3:e3:0f:ce:44:fd:a7:da:18:2c:f4:a0:
                    b7:d8:c6:ad:a3:ac:d5:00:ac:62:90:ce:31:18:15:
                    ae:11:c6:40:f8:be:b8:e0:20:f1:5f:aa:16:92:aa:
                    ee:5d:03:14:03:c8:be:84:d3:75:6d:13:d1:8d:cd:
                    6f:31:bd:46:03:64:64:ae:66:71:69:8f:95:e2:e5:
                    f7:b0:a6:a9:77:c8:d1:52:54:d7:a6:df:5f:2a:07:
                    c6:3a:9b:81:76:c9:2d:5a:ca:93:dc:cc:f4:e0:69:
                    d7:31:99:56:9d:2b:13:00:74:de:db:9a:e1:93:35:
                    a3:ff:7f:04:84:00:54:63:a6:11:a4:cc:09:27:de:
                    95:7b:6d:55:fa:f1:2e:56:5d:12:ed:0a:7a:bd:2b:
                    f7:bf:86:a5:af:cb:d6:0d:5c:10:61:22:ef:df:f8:
                    da:12:00:b0:9a:1d:7c:f1:1f:e6:c2:71:6e:91:64:
                    a6:7a:d1:40:2c:65:9b:38:18:b5:04:02:33:e3:ef:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:09:DE:E1:3E:EC:20:97:AB:DD:7F:20:B2:92:02:5F:2E:B9:61:89
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c213e7fe-9da5-4a84-8edd-970c7746a915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a1e::/47

    Signature Algorithm: sha256WithRSAEncryption
         b0:89:aa:be:4b:3e:f5:a5:76:4c:7e:a2:9b:27:1c:5f:f0:d8:
         41:09:36:e0:86:e4:5d:90:8c:9e:6d:e3:f9:49:77:e3:40:c3:
         00:b0:d4:69:2e:dd:fb:f2:65:e9:2f:42:77:2f:eb:29:45:e7:
         62:b2:cb:21:7f:2d:89:97:fb:a9:30:b8:82:3e:3b:ad:21:d8:
         86:62:22:21:b2:ce:13:ed:26:da:01:93:94:fa:d5:ea:67:16:
         1a:54:ab:a6:4f:db:08:5a:fa:03:a2:69:7a:2a:03:a8:f7:c7:
         bf:aa:b9:e0:b8:c1:cd:81:44:4a:b0:31:ea:de:4f:2f:d7:e4:
         5a:14:1a:c0:89:a2:65:ff:d3:00:51:97:9f:aa:c1:61:be:0f:
         ab:ea:8c:84:2c:3c:e1:04:cc:be:e9:99:81:ad:47:8e:33:a2:
         f5:d1:a3:1e:93:19:57:6b:8b:9e:67:64:2d:89:2b:02:09:d5:
         9f:c0:29:c9:12:f8:e1:e9:05:b7:04:fc:fe:bb:11:ee:5f:0f:
         bc:96:00:16:58:8a:d0:eb:ce:77:4c:36:71:b4:72:ab:ed:b4:
         c1:84:8f:0a:fb:5e:b1:c3:8c:7b:04:64:16:39:2d:2a:5c:69:
         b0:8f:b0:c1:e1:39:43:4f:5a:e0:54:1f:c1:d0:c6:b6:f7:05:
         27:cd:21:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:34 2025 by rpki-client