This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5456ec4-e356-4589-8eec-4ac228e941de.roa
File:                     c5456ec4-e356-4589-8eec-4ac228e941de.roa (raw, json)
Hash identifier:          zlpL6B7qaWApVTCjdHAggB50KDvL6QkrmE97ZBI3hYM=
Subject key identifier:   58:C3:BC:F4:AF:7E:8A:A1:75:F3:51:B8:C7:B8:09:1F:81:6C:4D:75
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2B9149FAD04F69DEDF930F026CA4353E40FCA780
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5456ec4-e356-4589-8eec-4ac228e941de.roa
Signing time:             Mon 24 Nov 2025 00:00:09 +0000
ROA not before:           Mon 24 Nov 2025 00:00:09 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a10::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:91:49:fa:d0:4f:69:de:df:93:0f:02:6c:a4:35:3e:40:fc:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:00:09 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=50a53de86ea3f0025d963b3c97a657544caafc24bde4c0905755ce9ec663beb1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:c4:8d:d7:00:31:e4:93:d9:0d:ea:18:38:
                    2b:57:14:15:57:f4:f9:8c:b8:84:62:2a:00:59:5d:
                    f0:22:1a:7f:b4:74:e2:cf:19:83:ca:cd:53:e2:7d:
                    31:1f:d8:eb:af:8d:a4:43:6a:6f:ae:fa:18:d2:f2:
                    f8:27:39:c0:56:b0:40:a3:7c:37:2e:31:3b:43:7c:
                    40:64:4a:0a:51:57:22:61:cf:72:9a:e2:22:ea:8a:
                    2e:45:8b:ea:08:0b:32:c8:43:73:d7:42:2c:ac:36:
                    44:6e:1b:1d:49:f0:5a:3d:23:81:50:15:5d:9d:0c:
                    9a:90:84:96:86:14:0c:d4:93:92:01:08:8c:41:04:
                    2a:31:49:96:e5:86:38:48:f1:a2:90:bc:cf:1d:bb:
                    a0:2e:0c:21:62:63:93:cf:da:11:c4:ed:21:05:9e:
                    05:31:52:29:ca:5e:a2:43:22:13:26:74:4c:fe:b7:
                    04:96:ef:f5:ae:42:cc:c9:00:cd:e2:22:35:04:e7:
                    ce:68:19:51:fc:32:1e:73:6a:e8:58:96:55:37:30:
                    c7:5c:03:b4:11:d0:d5:f3:c6:a2:d9:56:ae:af:e1:
                    fa:dc:d4:83:b0:b0:b3:b7:8b:52:57:2a:9d:51:b3:
                    d1:cc:3c:41:76:22:49:18:fd:16:5c:69:ae:8f:a4:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C3:BC:F4:AF:7E:8A:A1:75:F3:51:B8:C7:B8:09:1F:81:6C:4D:75
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5456ec4-e356-4589-8eec-4ac228e941de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a10::/47

    Signature Algorithm: sha256WithRSAEncryption
         70:61:6b:ec:57:89:37:eb:ce:32:d6:76:24:be:ef:3a:73:f4:
         95:0b:0e:6c:25:d8:8c:10:20:65:8e:06:f0:f9:b0:f0:55:96:
         a0:1a:68:e5:98:f0:c4:c8:1e:31:ae:f8:08:1f:42:cf:14:57:
         f8:0f:09:61:88:64:67:48:55:65:77:cc:70:d1:01:26:67:e5:
         db:ed:64:ee:d6:ab:70:fc:fc:79:6f:8a:bb:1c:04:e2:2e:99:
         a5:99:a2:d6:63:dc:d2:0b:3e:38:c7:de:db:1b:a8:fb:62:c7:
         6b:29:fd:7a:d1:ab:2a:18:ae:bb:3c:e0:3b:eb:5e:29:1d:55:
         21:e8:ad:d3:4e:11:ec:a1:85:67:03:a1:03:ac:da:54:0b:03:
         a4:cc:eb:7b:2d:1b:c6:ef:80:a4:de:e9:c6:fc:b9:e8:b7:dc:
         e3:68:db:66:3a:c5:59:21:e3:08:c8:8c:a2:31:55:55:9b:ef:
         eb:86:fd:72:fb:60:56:8f:6c:d4:6d:18:d5:5b:37:c7:c9:10:
         7c:30:24:75:ed:8e:7f:97:68:a3:38:59:98:55:62:f7:e8:4f:
         47:d6:97:27:aa:c3:20:0e:1f:8a:c4:d8:09:6d:20:5d:ca:34:
         e7:ee:9f:41:5c:d9:e6:52:83:b3:e2:07:59:bd:cf:3c:5d:6f:
         a4:7a:97:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:23 2025 by rpki-client