This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9301bf6-e2ab-465f-84c9-ad726c3fa1c7.roa
File:                     c9301bf6-e2ab-465f-84c9-ad726c3fa1c7.roa (raw, json)
Hash identifier:          IIQeg4uUOtFBJ+ttrG8QX9WXv4wBUrMDtSEuJek2jb0=
Subject key identifier:   81:27:80:94:2D:50:4A:21:0F:B6:6E:B7:6F:E5:C2:6B:09:9C:E4:64
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5E4653C783CC8CC531DC2F2DBD12B563E27C7E13
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9301bf6-e2ab-465f-84c9-ad726c3fa1c7.roa
Signing time:             Tue 25 Nov 2025 17:21:48 +0000
ROA not before:           Tue 25 Nov 2025 17:21:48 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32c4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:46:53:c7:83:cc:8c:c5:31:dc:2f:2d:bd:12:b5:63:e2:7c:7e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 17:21:48 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=fd95de6cbba0a806bf0ba0382160ee392f4feb1c2d4226a1ee8e5495d96c7b8e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:e1:32:47:3a:15:50:57:55:68:f3:21:1d:
                    b8:78:a0:f5:5e:a3:70:2b:04:49:65:cd:a4:86:b5:
                    37:bc:a2:2d:0d:2f:63:4f:f4:7a:2f:f3:14:0b:a0:
                    1d:b1:8e:4d:a5:86:05:af:f1:1f:ce:2b:25:f8:0a:
                    31:61:63:88:65:a0:80:ec:7f:31:7c:b8:7d:bf:66:
                    c7:ab:10:11:0d:f3:34:3f:90:d6:3b:b8:82:27:0f:
                    89:ea:bb:8d:7b:f9:0f:0f:54:00:ab:52:81:ad:1d:
                    00:ba:b7:fa:7f:77:d2:fb:01:68:fc:44:c5:da:21:
                    82:cd:6b:50:aa:6d:7e:49:30:10:7c:08:54:9d:32:
                    53:e3:35:94:89:3e:fe:0c:62:77:37:ba:8d:da:bb:
                    64:c7:72:8c:93:62:7b:73:94:19:0f:7b:82:64:09:
                    1e:11:f8:11:dc:de:18:f8:b0:9e:be:23:90:c2:e9:
                    78:98:97:b8:49:bc:bd:eb:10:03:48:f5:cc:08:47:
                    51:a3:85:82:a7:e3:97:e6:60:18:95:a7:14:ba:9a:
                    84:2f:ef:01:82:84:4d:a4:0c:e3:77:ba:cb:1c:5d:
                    91:0a:76:62:9e:65:75:0f:a8:ae:df:1d:d9:9b:79:
                    b1:36:43:a2:6a:b3:d4:d2:ab:7a:19:56:b5:4b:ee:
                    be:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:27:80:94:2D:50:4A:21:0F:B6:6E:B7:6F:E5:C2:6B:09:9C:E4:64
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9301bf6-e2ab-465f-84c9-ad726c3fa1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32c4::/47

    Signature Algorithm: sha256WithRSAEncryption
         b3:ae:bd:5e:da:ba:e7:34:ff:a4:6d:a6:2a:f4:19:35:d2:71:
         1b:14:b1:ba:a8:b9:c1:32:12:e6:cc:35:8d:73:d9:eb:58:a5:
         86:aa:3b:8a:c9:6d:0f:f4:9d:a0:ac:73:38:9a:d4:5d:97:4c:
         c3:35:09:da:7f:88:37:ea:6d:dd:d3:f1:bf:3c:cc:82:f4:45:
         21:cf:a9:64:8b:4f:69:47:86:7e:86:94:f4:bc:ec:3f:8d:aa:
         6a:8a:91:1a:16:d3:a4:9f:3a:a8:94:bd:f1:8f:6d:0c:2a:28:
         15:2f:c4:b0:8e:df:f0:6c:0e:ef:50:d6:b5:20:2f:6e:79:42:
         44:1d:0e:dc:f3:49:0f:e2:a4:74:84:32:03:eb:dd:46:93:f0:
         1d:91:de:5c:d7:cf:3c:6f:18:e1:54:a0:4b:a5:86:c2:ac:9f:
         7b:c7:6b:9c:0a:e6:97:22:de:0d:63:de:c7:c2:71:ee:8d:73:
         e9:45:0d:aa:c6:f7:c4:68:ae:5b:02:21:11:3a:da:60:b4:fe:
         aa:d2:de:42:3f:85:77:e9:71:32:87:1e:7b:cc:72:11:21:31:
         43:15:77:62:3e:89:00:ce:ca:ce:c9:3d:d9:d5:bd:8f:f7:6e:
         1d:f9:d5:a9:2d:31:8f:ff:da:af:a5:4e:8e:11:c8:1b:9c:f5:
         e7:01:73:e0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXkZTx4PMjMUx3C8tvRK1Y+J8fhMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTcyMTQ4WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDk1ZGU2Y2JiYTBhODA2YmYwYmEwMzgyMTYwZWUzOTJm
NGZlYjFjMmQ0MjI2YTFlZThlNTQ5NWQ5NmM3YjhlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtL+EyRzoVUFdVaPMhHbh4oPVeo3ArBEllzaSGtTe8oi0N
L2NP9Hov8xQLoB2xjk2lhgWv8R/OKyX4CjFhY4hloIDsfzF8uH2/ZserEBEN8zQ/
kNY7uIInD4nqu417+Q8PVACrUoGtHQC6t/p/d9L7AWj8RMXaIYLNa1CqbX5JMBB8
CFSdMlPjNZSJPv4MYnc3uo3au2THcoyTYntzlBkPe4JkCR4R+BHc3hj4sJ6+I5DC
6XiYl7hJvL3rEANI9cwIR1GjhYKn45fmYBiVpxS6moQv7wGChE2kDON3usscXZEK
dmKeZXUPqK7fHdmbebE2Q6Jqs9TSq3oZVrVL7r6XAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUgSeAlC1QSiEPtm63b+XCawmc5GQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2M5MzAxYmY2LWUyYWItNDY1Zi04NGM5LWFkNzI2YzNmYTFjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAMsQwDQYJKoZIhvcNAQELBQADggEBALOuvV7auuc0/6Rtpir0GTXS
cRsUsbqoucEyEubMNY1z2etYpYaqO4rJbQ/0naCsczia1F2XTMM1Cdp/iDfqbd3T
8b88zIL0RSHPqWSLT2lHhn6GlPS87D+NqmqKkRoW06SfOqiUvfGPbQwqKBUvxLCO
3/BsDu9Q1rUgL255QkQdDtzzSQ/ipHSEMgPr3UaT8B2R3lzXzzxvGOFUoEulhsKs
n3vHa5wK5pci3g1j3sfCce6Nc+lFDarG98RorlsCIRE62mC0/qrS3kI/hXfpcTKH
HnvMchEhMUMVd2I+iQDOys7JPdnVvY/3bh351aktMY//2q+lTo4RyBuc9ecBc+A=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:09 2025 by rpki-client