This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c7585b7b-9c4f-437c-8925-cb23affec4f9.roa
File:                     c7585b7b-9c4f-437c-8925-cb23affec4f9.roa (raw, json)
Hash identifier:          yZTz2+IAsrgM5vErlL+XnZX7uAYS7NQQGyYg9OnOmQk=
Subject key identifier:   EC:8B:DE:37:FF:88:B6:CA:8B:5F:4E:3D:0C:A2:DD:52:75:16:09:6D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       226A2F81DBBF0A52C088D9824B032D6316D68C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c7585b7b-9c4f-437c-8925-cb23affec4f9.roa
Signing time:             Tue 25 Nov 2025 03:51:56 +0000
ROA not before:           Tue 25 Nov 2025 03:51:56 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31c4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6a:2f:81:db:bf:0a:52:c0:88:d9:82:4b:03:2d:63:16:d6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 03:51:56 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=7a9ca00de92e9c220f70a0e8775aa29e7dcbfd38dc3f98182f9cf2cb2cfc4b7e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:50:85:bd:43:6e:ff:54:2d:1b:5b:27:c1:
                    3e:68:a5:ab:af:b2:56:c8:b0:95:2f:86:f4:04:d3:
                    ce:dc:2e:7b:c5:b3:99:db:24:7d:e5:c5:02:30:39:
                    25:b7:53:ec:b5:c2:d9:be:3f:13:c1:ac:27:7a:69:
                    82:60:65:c6:46:d1:27:d1:1a:43:53:e3:5a:01:4c:
                    e2:10:85:05:e7:f0:54:2a:32:a9:5d:59:26:b9:e0:
                    c2:22:be:09:72:d2:89:cd:b1:7b:68:a1:a9:01:d5:
                    5c:fe:8d:ee:43:04:ed:6b:42:8b:1d:d3:af:83:ff:
                    e1:04:82:15:11:56:4a:d4:f0:89:f0:d2:59:64:4d:
                    25:90:4a:fe:b6:04:a8:e0:d0:7f:d2:d3:e7:ab:d3:
                    22:c3:a6:1a:4e:28:70:1f:0b:e5:aa:ea:f5:ba:2e:
                    03:d1:b1:bc:7c:f5:09:c4:ae:d4:0d:85:3d:37:f3:
                    ea:0a:4f:3d:38:93:3e:28:b8:9f:e0:f7:c8:eb:9e:
                    01:f4:21:81:ed:08:3d:12:ea:32:99:84:e0:41:e8:
                    15:50:71:7d:b5:41:8d:e6:80:ac:f7:30:1b:f8:b3:
                    f5:64:ff:1c:91:7c:41:bf:53:e5:f3:7c:86:a5:a0:
                    3c:db:b2:84:3f:c8:77:63:b5:52:97:a0:9f:32:bf:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:DE:37:FF:88:B6:CA:8B:5F:4E:3D:0C:A2:DD:52:75:16:09:6D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c7585b7b-9c4f-437c-8925-cb23affec4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31c4::/46

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:1b:df:80:c8:0c:ee:06:1f:02:b4:6a:90:6b:27:6d:e5:
         68:af:39:57:01:22:59:44:e0:cc:f5:69:25:e0:f9:9b:d2:49:
         f6:90:be:dc:ca:46:9d:07:2b:33:c0:1f:ee:99:c5:cd:2a:c3:
         3d:2b:ff:8b:b9:93:75:d7:71:ca:a5:0d:00:a8:d6:aa:32:38:
         82:47:cb:5d:32:ed:58:d6:0a:d4:6a:31:34:70:8d:be:93:d7:
         06:bc:88:07:d1:23:e3:a6:05:06:98:42:b1:00:57:58:d9:86:
         3d:a8:dd:d5:37:2d:63:66:fb:f2:2a:d2:bf:ea:5a:2d:43:c2:
         90:40:2a:4f:e0:23:b1:e8:7a:9a:69:7e:59:a4:83:47:9f:d7:
         59:1d:a1:dc:59:f3:4c:04:14:2f:ce:73:b2:b7:95:cd:ec:37:
         4d:fa:16:8a:16:db:fc:5b:0d:81:46:15:c1:ae:12:f3:f6:01:
         a4:6e:0b:c3:d1:19:db:0c:15:4a:6a:7b:36:b6:a2:a4:3a:23:
         55:f0:ca:77:2a:ac:e8:23:3a:a4:68:68:ac:0b:5e:54:34:53:
         ed:e2:70:6a:15:c7:4b:41:e6:0c:74:33:b3:eb:91:6e:67:52:
         80:e0:3a:d6:48:51:7a:4c:0a:a5:b3:b3:2b:89:00:20:ad:18:
         5f:6d:15:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:44 2025 by rpki-client