This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c72df622-8682-4cf6-a910-8ea40769e235.roa
File:                     c72df622-8682-4cf6-a910-8ea40769e235.roa (raw, json)
Hash identifier:          QcGI1IJJTXO/PpldyfPuKKg/IbBXpQsy/HqccCxUAoE=
Subject key identifier:   C5:FB:FD:F3:5B:4A:87:B1:84:32:DF:F3:29:5A:D4:2E:5D:8A:57:28
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1311636F998781CBADA7B819275F1C6EBE1F1642
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c72df622-8682-4cf6-a910-8ea40769e235.roa
Signing time:             Mon 24 Nov 2025 07:01:33 +0000
ROA not before:           Mon 24 Nov 2025 07:01:33 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:28d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:11:63:6f:99:87:81:cb:ad:a7:b8:19:27:5f:1c:6e:be:1f:16:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 07:01:33 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=aed7df5b3ac320d4283d9f5aeecdaa158b2c98979212032e078d05ed8ed62ebf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:0d:24:da:30:65:77:b8:d6:7d:ff:bd:b8:
                    2a:d9:30:a0:7b:ac:bb:f0:00:5b:d5:e5:64:aa:65:
                    17:09:04:c6:af:2a:b9:f1:01:18:8e:b0:49:aa:3c:
                    bb:f7:eb:5f:e2:b1:61:80:02:41:d7:28:a6:da:1a:
                    48:66:7c:18:aa:c9:d2:5e:1a:17:54:fc:81:db:c7:
                    9d:87:f6:9f:e0:c7:13:b4:2b:58:d1:26:9a:3d:ae:
                    c9:58:96:ae:63:2d:a7:60:5e:aa:a8:73:51:92:b2:
                    a9:f9:5a:a2:71:15:8f:0d:85:08:df:fe:70:72:12:
                    b0:78:15:7c:c9:f5:a6:bf:b1:c0:f5:3c:f2:be:a8:
                    8f:c4:ff:69:c4:53:96:b0:1b:90:10:06:a9:ba:0f:
                    c7:f2:50:e9:05:c7:8e:18:d4:58:e7:8a:2d:7b:f7:
                    b7:89:5c:47:f0:b0:3c:14:74:9c:a5:ee:4a:54:50:
                    09:16:fb:39:f7:75:e0:65:72:e4:44:4f:71:19:84:
                    26:ce:33:29:17:2a:cc:2c:e3:e2:71:65:57:b1:c2:
                    e1:09:71:fe:b0:c4:c2:c0:87:0d:df:4c:e6:d0:34:
                    c4:55:b2:66:40:29:c6:96:43:33:7c:53:dd:b5:c7:
                    7f:04:f6:18:bb:50:44:ae:a2:a1:b8:ec:0e:a5:2a:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FB:FD:F3:5B:4A:87:B1:84:32:DF:F3:29:5A:D4:2E:5D:8A:57:28
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c72df622-8682-4cf6-a910-8ea40769e235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:28d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:46:63:07:be:84:d6:b4:6b:f9:04:a6:2b:4c:74:0d:83:
         89:70:72:21:8c:ee:64:1d:0e:c9:ff:ac:69:0b:9d:65:6c:35:
         f8:53:bb:d3:9f:44:97:4e:cc:ba:20:be:66:42:ab:e8:76:5b:
         1c:55:fa:e4:69:f0:73:f6:17:80:24:26:8c:22:4a:5c:7f:5b:
         6f:ce:94:6e:43:e1:79:1d:fc:c7:e1:9c:86:39:9e:33:98:5c:
         77:70:cb:7b:7c:a6:f4:86:98:fa:79:1c:65:6d:f5:e1:22:21:
         69:41:ad:6a:86:41:d2:74:d2:10:43:f7:42:18:8b:30:31:c2:
         73:e8:9c:c7:6d:be:26:6e:7f:32:44:e9:ff:37:c3:22:d5:32:
         b3:0c:96:a2:dc:f2:39:95:c5:23:84:37:52:38:72:6e:c9:cd:
         43:74:da:a8:2a:3c:bb:1d:03:52:3d:cd:03:bb:89:46:3b:5a:
         a2:95:bf:cb:b5:6a:e8:28:30:b9:0e:64:74:22:d8:18:65:99:
         a8:2a:d1:2c:51:33:86:87:90:51:b2:8d:aa:24:eb:82:28:e0:
         95:ff:58:ac:76:b1:9a:ee:89:05:57:b2:10:31:b1:3c:a2:5b:
         b2:3d:78:2f:45:6e:1f:d3:2b:12:9f:d8:52:b6:fa:05:48:59:
         e2:ed:2d:b8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUExFjb5mHgcutp7gZJ18cbr4fFkIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDcwMTMzWhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZWQ3ZGY1YjNhYzMyMGQ0MjgzZDlmNWFlZWNkYWExNThi
MmM5ODk3OTIxMjAzMmUwNzhkMDVlZDhlZDYyZWJmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCh6Q0k2jBld7jWff+9uCrZMKB7rLvwAFvV5WSqZRcJBMav
KrnxARiOsEmqPLv361/isWGAAkHXKKbaGkhmfBiqydJeGhdU/IHbx52H9p/gxxO0
K1jRJpo9rslYlq5jLadgXqqoc1GSsqn5WqJxFY8NhQjf/nByErB4FXzJ9aa/scD1
PPK+qI/E/2nEU5awG5AQBqm6D8fyUOkFx44Y1Fjnii1797eJXEfwsDwUdJyl7kpU
UAkW+zn3deBlcuRET3EZhCbOMykXKsws4+JxZVexwuEJcf6wxMLAhw3fTObQNMRV
smZAKcaWQzN8U921x38E9hi7UESuoqG47A6lKn5dAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxfv981tKh7GEMt/zKVrULl2KVygwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2M3MmRmNjIyLTg2ODItNGNmNi1hOTEwLThlYTQwNzY5ZTIzNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAKNAwDQYJKoZIhvcNAQELBQADggEBAFLRRmMHvoTWtGv5BKYrTHQN
g4lwciGM7mQdDsn/rGkLnWVsNfhTu9OfRJdOzLogvmZCq+h2WxxV+uRp8HP2F4Ak
JowiSlx/W2/OlG5D4Xkd/MfhnIY5njOYXHdwy3t8pvSGmPp5HGVt9eEiIWlBrWqG
QdJ00hBD90IYizAxwnPonMdtviZufzJE6f83wyLVMrMMlqLc8jmVxSOEN1I4cm7J
zUN02qgqPLsdA1I9zQO7iUY7WqKVv8u1augoMLkOZHQi2Bhlmagq0SxRM4aHkFGy
jaok64Io4JX/WKx2sZruiQVXshAxsTyiW7I9eC9Fbh/TKxKf2FK2+gVIWeLtLbg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:23 2025 by rpki-client