This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c87694a0-37cf-4ab1-b80b-8b822e371196.roa
File:                     c87694a0-37cf-4ab1-b80b-8b822e371196.roa (raw, json)
Hash identifier:          3OEXlK4hCwf0+1+0Hd/xkAB/oVXL0qAmJT6E/w5YVjk=
Subject key identifier:   81:3B:81:83:21:44:DA:E0:11:59:88:D5:2F:69:AD:A5:CD:12:C3:E1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4E090EE14D64CCF4A765FAB365DA4396A23B7C07
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c87694a0-37cf-4ab1-b80b-8b822e371196.roa
Signing time:             Tue 25 Nov 2025 06:30:10 +0000
ROA not before:           Tue 25 Nov 2025 06:30:10 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d90::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:09:0e:e1:4d:64:cc:f4:a7:65:fa:b3:65:da:43:96:a2:3b:7c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:30:10 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a958379a17a61c4571c9085489b54e6002d9dd2b89e10da1f9523c26aa0207af, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:cf:8c:07:bd:0f:b4:ba:ba:a2:30:63:3c:
                    9e:f0:ce:16:07:c5:91:76:70:10:6e:7e:ac:10:97:
                    03:38:5b:da:1a:60:5d:7f:48:0b:f7:23:d2:82:69:
                    33:a2:28:2a:18:2d:57:12:c3:2c:02:cd:30:73:3c:
                    2d:70:03:72:7b:6c:d3:ab:2f:97:49:c6:17:90:38:
                    a7:39:3f:ba:e6:57:b9:ef:88:92:21:c3:50:c7:68:
                    39:a3:30:c1:74:c7:f1:f8:e4:0a:25:b5:b6:d5:0d:
                    77:70:04:39:42:78:50:3c:33:a4:62:68:68:17:6d:
                    97:6a:49:5c:66:e1:a7:3c:1b:bd:d8:b3:0b:82:ad:
                    a6:e5:e9:6d:03:22:51:a3:86:09:da:94:a3:00:51:
                    1b:4c:61:e8:b3:90:e9:70:93:55:92:20:4b:27:e6:
                    b4:57:18:56:2a:00:6e:13:14:84:84:6a:0e:25:40:
                    2b:4f:01:c7:4b:62:a5:28:7c:1b:22:59:11:38:02:
                    b9:86:e3:07:ca:5d:4c:cb:2f:42:83:8b:e2:a7:ae:
                    5b:a3:4b:5e:90:eb:e3:0d:e3:7d:50:8d:23:05:ab:
                    6f:02:62:94:39:71:00:f5:3f:4a:74:37:1b:32:49:
                    a3:60:c4:bd:d5:6c:f8:0f:44:4e:d0:d6:6b:7e:f7:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3B:81:83:21:44:DA:E0:11:59:88:D5:2F:69:AD:A5:CD:12:C3:E1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c87694a0-37cf-4ab1-b80b-8b822e371196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d90::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:48:1f:6f:dd:b7:f8:e4:6e:d7:6b:11:9c:3d:a9:71:29:c2:
         34:f5:e1:e3:d3:9a:d6:c0:42:b9:66:21:e3:2b:0b:55:af:45:
         3e:cd:ed:e9:5a:ba:0d:78:67:51:39:91:66:c1:c0:1f:d0:a7:
         5d:ec:99:b3:fe:fa:bf:45:bd:ac:6c:f8:0b:f8:11:12:18:fd:
         f8:69:05:e8:1d:f5:51:c0:a4:fb:d4:33:44:d6:d1:33:4c:72:
         ac:1e:a5:ac:f2:83:bc:80:85:17:d2:6b:9c:23:c1:92:39:8a:
         f4:71:af:1e:bd:1f:e0:fe:03:70:e7:f7:df:0c:e9:bb:e6:ec:
         c9:b3:4b:22:fe:12:2f:ce:85:28:fe:42:66:d3:e4:7c:97:69:
         7c:dd:85:d3:21:73:0b:44:3b:82:bb:fd:a4:5a:de:23:df:cc:
         d3:70:5e:a4:a1:8b:21:6c:19:b5:fd:8b:7d:de:6b:19:d3:7d:
         e3:a9:5e:3e:63:0a:c4:05:24:7a:88:96:72:6d:17:6a:01:24:
         cc:a3:96:fb:09:d2:8f:10:8d:00:bc:7f:a5:cf:2a:47:69:e8:
         59:60:92:4f:78:af:67:f5:c9:33:c9:0d:76:38:d9:3b:82:18:
         25:df:cc:2b:4f:c4:a1:32:39:29:f1:bf:be:e3:36:93:f8:61:
         4b:a0:97:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:31 2025 by rpki-client