This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c711dee8-b869-4c2b-b70f-55b1d4486f99.roa
File:                     c711dee8-b869-4c2b-b70f-55b1d4486f99.roa (raw, json)
Hash identifier:          ocztLrtq5J47MacjDcCcHC8LgB7bbJ8A1wTsU+08ZME=
Subject key identifier:   D6:3B:93:57:E8:15:C5:72:CF:69:DE:89:DB:7A:A7:11:2F:FE:99:F2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       125FB55F9649BF073840669D4F19D00312283394
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c711dee8-b869-4c2b-b70f-55b1d4486f99.roa
Signing time:             Tue 02 Dec 2025 00:50:12 +0000
ROA not before:           Tue 02 Dec 2025 00:50:12 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5f:b5:5f:96:49:bf:07:38:40:66:9d:4f:19:d0:03:12:28:33:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec  2 00:50:12 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=e4d0814a7a04259e38a790d5c73ba29b58ad8cf67c3259ce150b442e386fc438, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f1:c0:54:0f:98:f2:69:72:80:a3:53:74:ac:
                    2e:28:4e:fa:84:bf:88:4f:4b:ff:86:b0:35:a7:18:
                    6f:a1:65:c8:e6:ee:d0:2e:a0:92:0d:c4:a0:6f:f0:
                    99:93:88:39:45:d5:0b:55:f5:67:47:4e:e1:96:78:
                    a0:c2:db:2a:dd:a0:3d:10:7c:6d:2b:07:aa:1f:b4:
                    3f:3f:28:9d:cd:c7:48:92:52:8c:39:5c:72:3f:1a:
                    41:42:33:86:eb:9b:ad:03:29:dc:a9:b7:9e:32:21:
                    ce:76:15:37:c2:19:f3:65:14:24:31:44:ae:47:b4:
                    f5:11:51:cb:7a:ce:e1:74:b6:49:76:8b:5c:c4:06:
                    b1:38:fd:80:5e:11:d9:7f:47:a0:37:69:93:e8:b9:
                    04:71:f6:b5:17:e5:07:88:bc:e8:70:92:7b:c0:d4:
                    1b:ff:dc:05:6f:62:5b:1a:a8:95:4c:6a:3b:16:29:
                    91:20:3d:81:b8:91:f2:1c:41:07:be:7c:b2:3e:c0:
                    7a:3f:70:3d:cd:72:d0:fd:6f:56:02:68:f7:bd:81:
                    b7:67:4f:f2:a9:65:1c:5f:f1:26:63:c0:f1:1d:9f:
                    03:3b:6f:09:aa:c6:6f:21:e0:4b:28:46:d4:72:76:
                    0b:dc:c8:78:48:a1:d6:87:08:a3:98:69:99:c4:30:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3B:93:57:E8:15:C5:72:CF:69:DE:89:DB:7A:A7:11:2F:FE:99:F2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c711dee8-b869-4c2b-b70f-55b1d4486f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:40:5c:b2:17:4d:8b:16:65:b0:11:bd:9c:e8:49:21:94:fc:
         20:59:99:d5:83:5f:ce:a4:a8:0e:ed:cc:2e:d8:64:5e:69:96:
         b1:ba:c1:3a:1d:7d:ba:45:c5:90:99:27:ff:bb:d7:3b:89:c5:
         6c:6b:1e:aa:f9:1b:27:f3:60:82:6d:89:ce:a1:98:9b:77:bc:
         85:4d:36:ff:e7:0e:e8:66:81:37:9a:a7:d0:ba:cf:41:9b:f8:
         72:a7:03:be:95:35:43:37:30:12:c5:f0:57:e5:6d:64:49:51:
         df:9e:f6:15:db:f1:2f:74:81:e1:2d:9d:2e:45:27:26:2f:b5:
         32:37:e3:83:db:a9:ab:af:4d:db:51:86:87:2b:ba:1c:d2:f4:
         37:11:ad:c6:17:6f:46:b7:c8:24:36:4e:52:86:c3:16:29:91:
         83:f9:19:f5:72:ea:76:6a:ed:f1:4e:1a:16:ec:27:83:38:2b:
         67:e6:45:80:5a:dd:37:a3:c0:31:52:b1:2c:19:6b:7f:2b:f2:
         79:dd:63:8e:4a:cd:4a:9c:bb:5c:38:87:3a:a2:80:f7:57:ff:
         80:09:86:88:f4:28:e6:6c:aa:ae:1f:54:d6:2d:0a:c4:87:2a:
         da:6f:d8:b6:55:2e:d9:f7:6b:db:05:2a:1b:5d:a5:34:b0:7b:
         f5:d7:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:58:12 2025 by rpki-client