This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca7b6c8a-7d7d-4093-bec7-b1d60486394c.roa
File:                     ca7b6c8a-7d7d-4093-bec7-b1d60486394c.roa (raw, json)
Hash identifier:          yyJB2eDuPcwu1+J/oEXlrC4hxYEIoOYS/+yzTvgUNIg=
Subject key identifier:   78:2E:88:6F:26:6F:0C:6E:86:43:1B:29:8D:60:36:F4:3A:21:82:D8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1956F65FA16C6081EC1F89F74D9CBF118381675F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca7b6c8a-7d7d-4093-bec7-b1d60486394c.roa
Signing time:             Tue 25 Nov 2025 16:11:58 +0000
ROA not before:           Tue 25 Nov 2025 16:11:58 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d00::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:56:f6:5f:a1:6c:60:81:ec:1f:89:f7:4d:9c:bf:11:83:81:67:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:11:58 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c2c78840ed27ea023846bfeb4c2a6445f71282ff5f6b42fbbe9448ad2d34f759, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:eb:d9:ba:53:3d:58:9d:84:c3:ff:f9:33:
                    03:ae:02:94:c0:e8:ca:47:95:45:2f:c3:a8:ec:87:
                    7c:b2:11:16:24:00:93:a5:32:93:05:c5:08:62:93:
                    93:5e:96:50:5a:cd:48:c6:e5:57:bd:1f:15:9f:da:
                    59:f1:77:ed:c9:47:c1:d3:af:9a:b2:bb:cf:7c:b9:
                    ff:c7:c4:44:aa:8a:ac:86:eb:db:83:16:91:d9:f9:
                    cd:1e:3c:d7:5f:0f:38:f4:61:6d:1e:65:de:78:8b:
                    1f:b9:c1:a9:e1:cc:97:b5:ac:21:ca:68:db:98:33:
                    5c:34:2b:a6:ec:f8:17:10:2d:92:60:26:c2:bb:4e:
                    a6:d5:41:15:08:4f:2a:96:40:84:19:dc:48:b7:74:
                    29:86:a7:4c:2e:1d:9f:04:27:7b:1c:28:b8:2a:bc:
                    8f:5b:4a:78:cb:e6:56:a1:f9:38:77:70:08:76:e5:
                    28:2c:92:1d:81:40:7e:61:7e:34:9c:3b:b1:83:a6:
                    24:3a:d3:64:a3:3b:a0:b6:14:39:5c:a4:bf:cc:69:
                    bf:67:79:63:e8:42:f3:09:d7:32:8b:90:ab:49:d8:
                    a3:f8:95:9c:56:7e:14:3e:5a:59:4f:cf:ae:8e:ac:
                    da:1b:0d:73:c5:da:5e:65:db:ce:5f:5c:3b:bf:59:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2E:88:6F:26:6F:0C:6E:86:43:1B:29:8D:60:36:F4:3A:21:82:D8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca7b6c8a-7d7d-4093-bec7-b1d60486394c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d00::/45

    Signature Algorithm: sha256WithRSAEncryption
         1f:c1:64:68:3a:f6:5d:1f:75:5c:d5:63:2d:ce:02:0a:fa:27:
         34:92:64:41:86:67:aa:fa:a1:6f:a0:ac:e9:a1:59:6f:11:7c:
         5f:b3:05:4a:08:9b:a2:b5:ab:d4:86:d7:54:07:09:d7:b7:57:
         8b:23:20:9c:11:b0:11:d3:5d:b3:96:7d:59:b4:f6:6f:93:9e:
         42:42:15:e3:0e:5e:c2:04:5a:c5:54:14:7d:4c:cb:a3:4d:f8:
         b5:bd:04:84:dc:65:ea:db:4d:0c:e6:bb:6b:29:66:a5:e2:8b:
         da:4e:8e:c5:a5:d2:77:66:4b:0a:a0:bc:96:96:52:f6:94:13:
         20:d9:3a:3d:98:53:8c:db:32:13:ca:83:74:28:97:39:2f:92:
         b5:6e:a3:7d:c1:c2:b5:68:e9:04:ab:e5:14:34:c0:b2:77:8c:
         88:ce:4a:c7:eb:de:bb:0c:a2:d5:33:4a:e9:2f:31:2c:5a:1c:
         0f:19:36:6d:cf:af:f0:ea:eb:b8:ed:37:9f:78:4d:8f:66:0c:
         f9:a8:1c:96:49:5e:20:6c:f3:80:f9:c6:6f:f8:ef:de:8c:27:
         31:96:29:9c:11:ee:fd:8c:53:08:2b:b7:77:98:39:8d:8e:4f:
         2d:b2:ec:19:86:bf:29:ef:9c:13:ba:87:02:69:37:b1:e1:9e:
         58:92:d2:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:21 2025 by rpki-client