This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c56fc947-e9e0-4190-94e6-4dcaa552d823.roa
File:                     c56fc947-e9e0-4190-94e6-4dcaa552d823.roa (raw, json)
Hash identifier:          h5zwbM2wX7GwC9fES+i9WWRfhicaEpKVZzu81fJ409M=
Subject key identifier:   8F:ED:3C:D3:BE:92:33:72:A9:1A:7D:2A:F6:BA:87:E3:4C:93:19:57
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C92114C5026B169BBBAD90D2A353BFB90E58927
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c56fc947-e9e0-4190-94e6-4dcaa552d823.roa
Signing time:             Mon 24 Nov 2025 01:11:26 +0000
ROA not before:           Mon 24 Nov 2025 01:11:26 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1874::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:92:11:4c:50:26:b1:69:bb:ba:d9:0d:2a:35:3b:fb:90:e5:89:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 01:11:26 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=e74dea229ae6efc2d60b0653ff831eead5194fbe0b0d97f9202e2da3e8f40dac, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:e2:a7:9b:98:54:a7:ca:5b:97:1f:97:a0:
                    63:d2:34:4f:d0:ea:8f:c3:12:75:2d:b6:a1:27:13:
                    7c:30:73:d8:fb:18:7e:ce:1d:81:98:2c:38:8e:b0:
                    67:f8:e3:cb:d5:ee:24:68:46:64:31:75:76:9b:d7:
                    65:83:0e:a0:d4:2e:d9:41:a0:96:77:77:4e:52:d2:
                    0e:8c:b2:98:e8:3d:99:31:30:23:b4:f3:65:70:b0:
                    5e:d6:a8:22:f1:3f:87:4a:0f:9e:51:a5:af:ae:d3:
                    4d:08:26:f7:a3:02:82:20:c0:91:19:f2:a2:b0:8e:
                    e1:b4:1a:08:3e:76:a0:2a:9e:13:c7:61:62:c9:d2:
                    d8:2b:19:dd:e2:48:44:5d:ee:81:8d:a5:75:8f:f2:
                    68:e1:dd:c8:ae:25:38:4c:84:a0:b3:e8:a2:30:84:
                    26:0f:5a:9b:f0:81:8d:77:df:fb:51:9e:cc:c5:87:
                    14:cb:b9:11:05:4c:04:a8:67:eb:8b:7d:9b:55:03:
                    b7:da:1f:82:67:35:39:98:0c:bf:ce:e2:9b:bc:9f:
                    e5:e1:46:79:cb:4f:81:19:55:bf:41:ae:e2:1e:a2:
                    0b:95:b4:b8:4f:a1:b8:69:49:ec:a2:74:84:95:9f:
                    56:2c:08:59:59:37:99:91:eb:94:46:05:55:5c:c3:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:ED:3C:D3:BE:92:33:72:A9:1A:7D:2A:F6:BA:87:E3:4C:93:19:57
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c56fc947-e9e0-4190-94e6-4dcaa552d823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1874::/47

    Signature Algorithm: sha256WithRSAEncryption
         7b:ee:49:8d:f8:f4:4c:78:34:88:0d:b1:da:1c:ce:e3:49:43:
         c3:4c:ce:59:c3:c2:f5:d4:8e:66:f7:6e:c8:ed:87:6d:40:d8:
         88:f8:d6:63:8f:2c:fa:b8:82:09:b8:c2:50:38:e9:60:0e:dd:
         8b:8d:3c:9f:d3:fd:0e:37:3e:ec:19:6a:c9:79:f6:60:4d:02:
         33:7a:58:f4:65:69:ca:a9:a6:fb:c7:24:76:fa:bd:24:0b:80:
         ed:ce:72:0e:d2:0d:74:69:5f:de:d3:91:4d:b0:c2:be:86:60:
         61:7f:f2:64:4b:05:8f:1e:4e:0f:d3:cc:36:73:52:53:83:61:
         dd:55:be:bf:b8:33:cc:6a:93:ca:81:8c:82:44:b5:e5:ed:b6:
         c5:32:b5:24:6a:26:14:c3:5c:6d:40:9f:f8:c8:b2:be:f1:eb:
         59:97:e6:b4:62:7a:36:a8:5b:00:04:a7:f7:ed:73:68:32:58:
         57:bf:f8:95:6b:7e:f1:03:1d:af:0d:13:37:76:96:5c:6f:6e:
         42:92:96:a3:52:82:86:65:fb:42:99:c0:29:77:b3:b3:60:55:
         34:ed:7e:30:9c:fc:80:96:4e:eb:45:a3:65:08:fc:ea:d7:b4:
         e7:3b:db:02:f6:90:7c:17:c2:c9:fe:d0:ff:33:32:11:a1:88:
         0b:f3:ee:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:52:12 2025 by rpki-client