This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cb1ad410-61a3-4491-97e8-126f6a1d805a.roa
File:                     cb1ad410-61a3-4491-97e8-126f6a1d805a.roa (raw, json)
Hash identifier:          1Pvic4H/SdV0l1rx9i2QY7kaXlPCbU9x7nLOvFRDZSE=
Subject key identifier:   F5:59:C7:4D:C6:05:91:58:4F:FE:43:D1:AA:58:2D:E5:BD:94:7E:53
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       32BC7E0D332EEB6F36D57C9FDC70C54C641ECC50
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cb1ad410-61a3-4491-97e8-126f6a1d805a.roa
Signing time:             Tue 25 Nov 2025 05:31:01 +0000
ROA not before:           Tue 25 Nov 2025 05:31:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:344c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bc:7e:0d:33:2e:eb:6f:36:d5:7c:9f:dc:70:c5:4c:64:1e:cc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:31:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=4416b6e9840fcc4ac03348fbb506867581f7cb9c5d7c5e37609d7fbb18fff1cb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:93:37:54:ff:75:4a:3f:4f:61:2a:1b:c8:
                    9d:5e:f1:5c:36:b8:c9:98:0c:d5:94:a2:69:92:5e:
                    29:d7:4e:dd:b2:5e:17:2b:1c:3f:f8:d0:9a:c8:4f:
                    48:9a:b6:d8:07:f8:f0:d0:4c:d0:33:c4:f8:7d:f4:
                    73:71:45:30:2d:c4:78:4a:5b:83:08:48:20:02:8a:
                    18:c1:f7:51:7b:15:04:9f:4d:85:2f:4d:a5:51:68:
                    8b:29:d4:3f:95:5e:52:12:a0:43:30:ed:cc:6c:1e:
                    27:3e:1e:c5:2f:ef:8c:26:2b:5a:e7:31:75:bc:d0:
                    c2:27:6d:4c:59:26:eb:aa:7d:61:13:b1:80:ab:22:
                    eb:68:0f:fd:3d:75:88:7b:04:f8:dd:96:78:f3:7f:
                    90:ab:67:1e:3d:7a:0d:ae:73:f8:dd:9b:29:dd:8b:
                    cc:66:e5:36:3a:37:b7:54:cb:38:81:ed:b9:80:c1:
                    55:fa:be:11:8c:75:b2:55:30:1b:8a:29:52:98:24:
                    3a:60:f1:99:0e:80:52:2c:6d:9c:55:6b:de:16:49:
                    1b:86:34:78:a8:c4:4d:85:33:20:7b:39:ff:16:a2:
                    bd:f5:6c:e2:ae:4e:3f:b7:52:c4:a7:9e:18:28:1b:
                    1c:a1:f2:51:2d:c3:7e:f4:15:ec:16:c5:8c:48:6f:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:59:C7:4D:C6:05:91:58:4F:FE:43:D1:AA:58:2D:E5:BD:94:7E:53
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cb1ad410-61a3-4491-97e8-126f6a1d805a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:344c::/47

    Signature Algorithm: sha256WithRSAEncryption
         3c:b2:78:fc:5e:19:01:9a:4d:e1:d6:b7:c4:00:5a:ca:fa:ac:
         58:bb:fe:22:5b:75:9f:c3:e2:85:7b:8f:5a:54:cf:5c:6e:97:
         89:97:cd:40:1e:ad:c2:c5:7a:51:60:63:1d:e3:fd:e0:99:d0:
         fe:ba:25:9e:82:3f:29:1e:18:bb:31:42:9e:e4:8e:c4:c9:34:
         56:c1:9d:ad:42:14:7a:78:04:b0:ca:94:ef:09:a6:bf:90:7c:
         f8:a1:b3:b8:90:4f:3c:fc:8f:42:fe:0c:0d:fc:85:38:99:ac:
         d7:ab:1c:d6:ef:10:6a:be:7d:68:7e:d3:e8:b5:98:e7:12:02:
         62:70:de:aa:42:87:43:8a:47:5a:95:45:ac:db:3a:12:15:7b:
         43:30:06:79:82:6e:0f:08:7a:f4:83:33:04:d5:90:ed:1c:98:
         bf:e7:14:b5:9a:00:26:84:f9:bb:2c:21:b4:f2:66:af:d0:ec:
         07:f7:fa:ef:f0:ae:73:02:2c:40:04:48:47:57:f3:28:e0:53:
         60:fb:d8:2e:f7:7e:51:86:fc:ab:e5:4f:c2:1e:71:60:3d:d8:
         cc:32:81:26:e8:29:a7:54:a9:0b:2f:40:83:49:2c:8f:94:69:
         05:5d:ee:d2:91:c2:11:20:29:10:c3:ed:64:fb:09:44:91:3f:
         78:0f:9d:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:23 2025 by rpki-client