This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca6cd1a6-fe7e-40d8-a329-3b5bdf416815.roa
File:                     ca6cd1a6-fe7e-40d8-a329-3b5bdf416815.roa (raw, json)
Hash identifier:          ISxY4EHvNGEJ1HYXd/yhdLr7Hkk1+6M1JRXPKglYrzM=
Subject key identifier:   45:6B:FE:AC:14:5C:CD:C3:3B:E1:75:9C:5F:5C:B3:3A:FA:35:F7:4E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       565C5B90E1E962AC3332B02B4EC0D4525F481F01
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca6cd1a6-fe7e-40d8-a329-3b5bdf416815.roa
Signing time:             Tue 25 Nov 2025 14:02:14 +0000
ROA not before:           Tue 25 Nov 2025 14:02:14 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b4c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5c:5b:90:e1:e9:62:ac:33:32:b0:2b:4e:c0:d4:52:5f:48:1f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:02:14 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=83a39960609b1b4ad9ab8099b2f74cccddb1979b1202072369254766da574e6f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:d3:38:18:09:12:c5:4e:dd:8f:e8:31:81:
                    49:1e:96:43:44:f9:e5:6e:21:79:2c:ed:96:9e:a7:
                    0c:5c:dc:40:82:80:17:11:1e:88:a9:7e:2d:d8:ec:
                    d6:08:93:60:69:80:16:d4:f0:7a:06:aa:d0:cc:71:
                    23:97:3f:20:0e:34:60:c7:33:27:29:1b:1f:53:77:
                    13:18:c8:14:4a:b3:72:75:1c:1c:cb:5f:4f:75:3c:
                    79:6d:e5:af:4d:ca:9c:6c:92:fb:f2:e0:71:fe:2e:
                    d1:81:c7:df:75:90:0c:31:0d:af:06:e7:4e:5a:ba:
                    8d:53:7f:dd:a0:e1:96:e1:70:56:88:03:47:e5:6d:
                    4b:b1:31:4c:0c:a2:be:0f:97:70:42:9a:7d:c9:58:
                    ee:19:30:ac:ad:30:17:08:37:1d:8c:45:73:8f:58:
                    8e:df:24:04:86:85:ba:88:0f:e3:77:44:bd:2f:b6:
                    38:25:9c:99:de:de:e1:11:a8:85:a6:39:8b:9b:7c:
                    46:43:bd:72:16:8d:12:b6:68:e3:3a:ac:6e:f6:a8:
                    8f:81:e3:33:7f:bf:a5:4d:e2:75:63:82:ab:e6:0f:
                    a1:3d:4a:f8:a6:2a:90:49:e2:f2:56:de:69:2e:2d:
                    a1:ab:58:28:af:a2:55:2b:56:da:be:43:de:56:77:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6B:FE:AC:14:5C:CD:C3:3B:E1:75:9C:5F:5C:B3:3A:FA:35:F7:4E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca6cd1a6-fe7e-40d8-a329-3b5bdf416815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b4c::/47

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:d3:54:59:40:dd:6e:19:44:60:fc:73:c9:69:b7:ae:f9:
         a0:11:63:cd:fe:70:1c:b0:27:cd:3a:ae:bc:18:7a:44:de:3c:
         cd:66:27:01:96:13:ab:be:b0:c0:85:52:8a:8a:d1:fa:84:41:
         d7:9e:d2:ec:be:fe:6d:40:78:33:36:1a:ac:11:4e:68:4d:b0:
         5c:8d:22:65:43:59:fa:3f:ed:72:14:fa:e7:e3:0d:53:af:b3:
         9c:da:7b:ae:9a:ee:c2:99:b4:75:86:f4:e4:a5:30:fd:87:95:
         1e:a8:71:6c:4d:6a:d4:9d:86:54:13:6b:fe:50:24:30:21:85:
         11:21:03:51:fd:41:e7:dd:42:a1:b6:9e:83:aa:2f:44:6a:9b:
         c3:54:d1:46:0d:b1:da:28:e1:49:9a:3c:96:b5:a9:ba:ab:d6:
         39:18:99:8e:9b:03:da:12:78:d4:0d:88:b3:f2:70:12:4b:4d:
         d2:20:85:19:81:9c:db:9d:c3:95:e0:2d:2b:a6:9c:b6:3a:72:
         e2:38:7d:11:fb:55:94:66:40:22:a0:0d:99:a5:ab:8d:c1:5d:
         44:8f:45:5f:ee:3a:13:db:27:cb:5c:33:9e:63:ed:d5:81:2e:
         79:86:52:01:c2:9a:f1:47:62:b5:91:05:af:56:a1:eb:7d:a6:
         c6:3d:29:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:33:56 2025 by rpki-client