This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c58cd090-abd3-464f-b61e-4e5fd8f6cd7f.roa
File:                     c58cd090-abd3-464f-b61e-4e5fd8f6cd7f.roa (raw, json)
Hash identifier:          K5tHfUjDKeql31lf5E0PsMSSoQvGhIVOkSDJ6ysxVqk=
Subject key identifier:   F7:C0:15:1C:8C:2F:B8:3B:86:F7:46:5C:CF:48:01:CD:49:4D:74:CB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12BA2B03AB06086B17ED6B8AAE91032C6CFFB01D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c58cd090-abd3-464f-b61e-4e5fd8f6cd7f.roa
Signing time:             Tue 25 Nov 2025 10:52:15 +0000
ROA not before:           Tue 25 Nov 2025 10:52:15 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:352e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ba:2b:03:ab:06:08:6b:17:ed:6b:8a:ae:91:03:2c:6c:ff:b0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 10:52:15 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=1c064c69b2c6b37109c6cff03071324536185b3fa305b7fbb7c01e2cf299237e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:2a:33:45:91:3f:05:69:69:5f:73:96:4c:
                    48:10:6b:54:12:d9:4e:fe:31:77:5f:af:f1:8f:ed:
                    f4:f0:fe:dd:40:88:3e:e2:a1:e5:1c:0d:8c:9b:38:
                    a5:3e:b9:ee:9d:7e:17:62:4c:22:54:04:62:08:2d:
                    dc:25:ec:de:1a:98:be:9d:cb:7b:dd:10:fc:cf:a7:
                    15:db:0b:90:18:e2:3e:e9:86:07:c8:8b:6b:32:c2:
                    2b:dd:27:f0:c8:9c:f9:18:55:2b:c5:06:a4:01:7e:
                    11:64:e6:e0:99:3c:4a:e4:74:92:94:3d:10:bf:fc:
                    dc:34:14:8e:3d:b9:cb:0c:d5:88:ab:c0:db:f6:be:
                    de:4d:15:6b:19:50:3a:a9:a1:28:45:28:de:17:b0:
                    a4:28:20:5f:4e:1e:db:df:17:95:28:f2:20:b6:08:
                    39:75:b2:d0:29:c4:07:9d:b7:3c:d8:3c:67:aa:f5:
                    8f:d2:e3:9a:f8:18:3e:19:28:54:5a:71:2e:99:cf:
                    93:f7:59:e7:01:e5:97:bd:28:c8:89:6a:01:29:1c:
                    94:72:d4:55:65:a4:04:52:cf:a5:06:ea:89:3b:11:
                    58:75:a6:ae:23:e3:54:7d:6a:78:2b:dc:39:79:b1:
                    ff:6b:21:24:07:d7:2e:30:13:3e:3d:e1:39:7c:16:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C0:15:1C:8C:2F:B8:3B:86:F7:46:5C:CF:48:01:CD:49:4D:74:CB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c58cd090-abd3-464f-b61e-4e5fd8f6cd7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:352e::/47

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:fe:20:b3:c3:21:a6:cf:3f:04:9d:c3:ab:97:06:d9:ce:
         85:1d:03:df:62:f5:25:a7:6b:a1:a6:44:5d:4d:ad:10:91:f6:
         3f:e1:5d:40:66:29:ab:c2:91:88:3f:b2:e4:6b:d8:94:7a:ed:
         8c:d7:60:80:e2:2b:b3:dc:b6:1c:c2:2f:ac:a0:9d:87:e7:3e:
         b9:f1:72:53:bf:03:df:f6:2c:6f:41:5d:9d:a1:7b:40:42:69:
         ba:e2:30:ef:bb:59:56:a1:a6:54:af:08:93:a6:59:e0:2d:47:
         ed:23:a9:3f:61:05:19:56:98:1e:88:88:e9:a6:47:dd:53:03:
         64:a8:95:a4:ed:d8:1e:1c:30:48:42:e2:0e:56:37:46:d5:0d:
         08:bc:80:ef:f5:0f:1d:c6:61:b5:d4:2d:ce:16:2e:d0:d2:d1:
         36:89:99:e4:84:ba:50:cc:7c:fd:bc:6e:25:0f:fd:43:1e:99:
         d0:dd:85:a3:86:7d:60:43:f4:de:b7:d1:9b:e5:55:79:57:67:
         fe:5d:c7:8b:30:11:de:73:7b:83:6d:e4:b6:d2:9c:0b:38:ac:
         77:6c:e8:ab:6a:61:82:e1:e5:88:f4:08:9f:96:eb:8d:f8:5c:
         6a:c3:c3:61:5a:a6:8c:37:29:a2:41:26:20:0a:d7:32:5c:fb:
         ed:18:a6:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:08 2025 by rpki-client