This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c42700a5-6245-473d-8eb9-89eae25f9638.roa
File:                     c42700a5-6245-473d-8eb9-89eae25f9638.roa (raw, json)
Hash identifier:          nQGCOWTRiXmzKMC+X9AL9u4OncFeEZD/V8ogI1dLY/Y=
Subject key identifier:   B3:A7:15:86:E6:3C:14:0F:F4:71:03:18:12:4A:18:99:FF:14:1F:B6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3A20C9D041420DBDDBA247BAFCBDF4B8B90DEC78
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c42700a5-6245-473d-8eb9-89eae25f9638.roa
Signing time:             Tue 25 Nov 2025 15:20:07 +0000
ROA not before:           Tue 25 Nov 2025 15:20:07 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b74::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:20:c9:d0:41:42:0d:bd:db:a2:47:ba:fc:bd:f4:b8:b9:0d:ec:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 15:20:07 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=3efec8379a08b6fa43fe27224dde6e2a9f3e4a3c600f200de14480359f306a2b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:77:f3:f1:49:fe:3c:58:f5:db:37:59:70:3d:
                    ec:2e:7f:d0:82:de:1c:33:2d:e2:e8:99:74:69:a3:
                    7e:42:31:b9:b0:fa:9f:40:47:57:26:90:a8:2e:b2:
                    ef:33:d2:cd:ea:74:45:78:14:10:d2:a9:10:5c:72:
                    00:76:97:54:c8:7a:12:46:5d:6a:61:55:db:04:d5:
                    8b:03:b7:ee:1d:bc:49:91:69:5b:08:4f:04:9a:8e:
                    df:2e:13:ca:e5:10:01:46:53:9b:90:d2:65:a2:e8:
                    ac:80:8f:12:e8:43:f2:cf:7b:df:94:d5:22:1f:cb:
                    73:0a:a6:e0:52:1f:c0:b5:35:ff:c0:27:ea:71:fe:
                    bd:70:e6:67:66:11:74:1c:e7:be:7c:8c:34:a7:9a:
                    a3:fb:ac:6f:51:15:05:76:dd:57:85:30:42:59:2e:
                    ea:9d:07:8e:c8:e2:54:87:48:de:23:f1:c7:a3:ed:
                    eb:22:8d:50:8a:d5:64:54:b8:0b:4a:b1:74:33:7a:
                    a3:a8:44:89:87:83:74:3e:bb:ae:e8:af:e0:25:26:
                    73:6c:41:b2:61:32:25:50:73:f1:84:7d:30:aa:1c:
                    c1:cc:4c:cb:b9:cc:a2:2f:c2:70:59:15:57:83:a0:
                    d1:7f:88:d5:fd:d5:27:2c:47:79:f5:61:4b:8b:95:
                    b3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A7:15:86:E6:3C:14:0F:F4:71:03:18:12:4A:18:99:FF:14:1F:B6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c42700a5-6245-473d-8eb9-89eae25f9638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b74::/47

    Signature Algorithm: sha256WithRSAEncryption
         c0:d8:6f:78:1e:db:2a:f5:9e:9e:1e:f1:f5:ef:27:2e:37:05:
         6e:ef:d0:9c:9c:b5:ac:86:69:69:21:bf:0d:c5:54:c6:b5:5c:
         43:60:69:a4:05:16:a7:40:54:2d:15:f5:b6:99:82:bd:d6:89:
         40:02:16:c6:b5:a4:a6:2f:ef:55:1b:b2:7c:a8:fc:d3:5d:32:
         4f:2e:70:76:94:57:f6:43:b0:55:1f:2a:a3:22:c9:ab:b8:5f:
         48:50:61:cf:6c:b3:27:56:d4:5b:5a:2e:2d:cb:e8:e3:60:59:
         2e:95:9c:ef:a7:d7:35:b2:2d:91:ad:82:50:c3:0e:0e:1c:c1:
         c6:58:c4:ed:7f:a7:7c:c3:9e:c7:89:49:3c:c3:6a:8b:7e:eb:
         d8:e5:8a:c9:1a:ca:1a:ce:c2:ad:50:9f:ee:0a:c4:f3:c6:9a:
         aa:7c:f1:c1:db:b6:08:77:73:6a:26:75:ee:59:74:d9:0b:63:
         19:0c:68:6b:4b:17:1c:e5:b2:63:89:74:4e:14:e9:d0:f2:51:
         d9:32:0e:f1:7f:34:ae:5f:84:81:62:1d:9e:45:aa:d1:af:a9:
         ed:c1:96:78:29:71:38:9f:73:b4:36:57:a0:8b:2b:c5:27:01:
         37:1f:3f:1d:c0:18:eb:a9:95:a4:c8:6e:84:b6:44:08:1a:26:
         5c:4d:70:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:02 2025 by rpki-client