This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c95348e2-2515-497a-a27b-0a0166ee65aa.roa
File:                     c95348e2-2515-497a-a27b-0a0166ee65aa.roa (raw, json)
Hash identifier:          SiXN2i/KtAYc1HgecU+RPlSIGuIzSvRYzp7yF0d4SNo=
Subject key identifier:   96:72:4F:14:F9:A4:7A:9E:22:70:16:47:C4:93:4B:BA:23:F5:0E:5A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       031009D27512A666027BC7FC5BC5C687D0CDA116
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c95348e2-2515-497a-a27b-0a0166ee65aa.roa
Signing time:             Tue 25 Nov 2025 10:10:49 +0000
ROA not before:           Tue 25 Nov 2025 10:10:49 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3378::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:10:09:d2:75:12:a6:66:02:7b:c7:fc:5b:c5:c6:87:d0:cd:a1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 10:10:49 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a69498a7b990527dc7b06a278aae09ef5fa9ee7f214ce9b1b7b02285528e9f19, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:59:11:83:35:e9:82:92:b1:2e:6e:a6:69:
                    27:d7:47:30:d5:65:b5:be:83:2d:4e:c8:aa:98:44:
                    bb:38:3b:9d:e5:31:1e:66:f6:82:18:e0:a6:ab:ab:
                    1d:5f:73:00:40:4e:cc:77:8d:0f:05:54:1f:f0:d0:
                    0f:10:70:43:4a:40:62:56:30:93:b3:3c:1d:36:8e:
                    ec:6a:6b:cc:eb:8f:31:48:07:a3:8c:1c:8d:64:ff:
                    e7:ff:67:2b:df:77:6b:53:9a:96:68:4e:17:03:8e:
                    22:24:cd:ae:ba:ba:72:31:16:6a:2b:2e:b9:d3:e4:
                    68:00:f8:17:22:de:81:de:10:42:20:30:c5:df:0b:
                    a3:ba:f6:ee:9d:4f:49:0d:f2:1b:ac:79:13:59:9a:
                    aa:da:24:3f:da:04:92:6e:7f:b6:2d:b1:ad:43:e8:
                    3c:40:52:26:72:83:e5:ca:8a:24:59:94:09:86:a1:
                    54:e6:a8:fe:1c:08:ad:c6:10:20:6b:27:22:b6:dc:
                    65:12:02:e1:ac:62:df:4b:b6:6a:c4:12:04:8b:82:
                    c7:9b:37:3c:35:7e:f5:9f:cb:d0:51:ac:1b:da:6b:
                    60:ac:2a:89:39:84:ed:9f:67:94:8c:c4:28:14:22:
                    9c:00:e8:e1:29:d7:b9:0b:a7:51:db:f7:2f:9c:fc:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:72:4F:14:F9:A4:7A:9E:22:70:16:47:C4:93:4B:BA:23:F5:0E:5A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c95348e2-2515-497a-a27b-0a0166ee65aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3378::/46

    Signature Algorithm: sha256WithRSAEncryption
         5a:26:5e:37:4c:90:f2:09:ed:a4:dc:ea:38:6a:aa:f3:98:88:
         a6:05:96:b9:cc:14:3a:bc:67:b4:2f:86:6a:47:2d:57:f7:9c:
         6b:6e:12:2c:d4:a0:37:4f:36:f0:ac:b8:e6:85:4d:33:68:80:
         45:53:54:16:3a:23:9f:46:03:55:94:ca:f4:32:f0:2d:b3:62:
         19:78:f7:a9:7c:75:9f:97:0d:f3:b4:62:ce:db:55:c9:f4:88:
         63:f5:46:47:ed:bd:98:84:db:c6:91:f5:93:03:9a:d9:5a:55:
         4a:67:4e:db:7a:38:7c:94:91:2e:bc:a0:8f:a0:03:0a:96:99:
         bb:e5:49:62:72:d5:2c:c2:06:fc:52:a2:8b:c3:ea:f8:de:a9:
         ff:fb:e9:44:32:e7:9f:71:c1:26:2c:7f:94:af:91:a8:05:9c:
         17:b2:08:40:2c:b2:2d:c8:dd:d9:6c:42:4e:20:de:08:ee:fe:
         fb:4a:97:e7:16:c5:20:89:a9:3b:d3:47:79:af:05:3c:ff:0d:
         f6:04:da:e8:b1:67:29:ce:38:81:cc:42:32:98:f4:3f:c4:67:
         15:3b:21:43:14:75:ad:fe:54:53:cb:02:66:13:10:d1:3f:81:
         47:eb:96:50:08:e6:d2:45:0a:7f:3f:4d:fe:5e:3f:11:37:8d:
         de:49:0d:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:35 2025 by rpki-client