This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce25621a-6d52-4eaa-b7ca-2097c4c25d7a.roa
File:                     ce25621a-6d52-4eaa-b7ca-2097c4c25d7a.roa (raw, json)
Hash identifier:          cY2vNgIyPA3Ygo/EmrqY59SGQ2J88uXP8d9qV0oi4aM=
Subject key identifier:   C7:DA:55:4F:D3:02:92:9E:3E:92:BF:B7:7F:F7:1E:3C:5F:50:20:06
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6B5122320B9C683A6AE1DE7829F3C24A25691AFF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce25621a-6d52-4eaa-b7ca-2097c4c25d7a.roa
Signing time:             Tue 25 Nov 2025 06:01:33 +0000
ROA not before:           Tue 25 Nov 2025 06:01:33 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c80::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:51:22:32:0b:9c:68:3a:6a:e1:de:78:29:f3:c2:4a:25:69:1a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 06:01:33 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=7a93c0eed6559f0c15a2be66c9bcd7ddcb694dc95e703f4d38fce454e1fac87e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:c0:d3:b5:0c:00:a5:37:2e:73:99:93:cd:
                    33:81:3a:04:04:4d:09:75:43:f1:df:08:a3:fb:2c:
                    1c:82:c2:d6:e0:28:b5:19:ed:21:96:38:21:f4:48:
                    cd:14:b2:cf:45:4e:ca:da:89:07:4d:04:01:1c:8e:
                    be:14:80:14:e2:32:93:4a:68:e1:ec:b5:50:dd:e1:
                    0a:2a:d6:b8:97:44:36:2c:7b:ac:37:30:d6:3c:d8:
                    41:e9:16:59:7c:86:f9:4b:3a:63:be:74:cc:ae:25:
                    e1:08:31:6e:66:3e:fc:0b:c0:68:ed:4c:9f:8b:95:
                    31:bf:8a:b9:1b:ae:41:11:66:38:b2:b6:45:d4:51:
                    44:f1:41:75:1b:9d:73:a7:35:e6:95:0f:2e:c3:62:
                    57:e7:5d:f3:d8:69:79:06:3d:22:ce:47:e3:18:db:
                    eb:75:a8:51:91:7e:0a:f2:b0:f4:f7:00:d7:a6:e4:
                    da:bf:d6:58:a4:65:1a:50:21:a0:be:5e:9f:50:72:
                    05:9e:83:e2:b9:25:39:59:96:0c:94:c1:f4:69:27:
                    41:ac:10:2c:79:94:91:1f:41:10:ca:ca:1a:35:c4:
                    34:29:e0:6e:d8:b1:1e:1c:35:59:2f:b4:de:91:64:
                    72:1b:25:4f:34:7c:e2:74:92:c0:f7:92:71:df:04:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DA:55:4F:D3:02:92:9E:3E:92:BF:B7:7F:F7:1E:3C:5F:50:20:06
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce25621a-6d52-4eaa-b7ca-2097c4c25d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c80::/42

    Signature Algorithm: sha256WithRSAEncryption
         bf:ba:f0:fc:24:5a:33:b9:a3:ad:e0:e5:30:30:e9:54:ff:d6:
         65:71:3f:e0:eb:1b:4a:24:15:0f:8d:da:aa:39:a5:2b:4d:1c:
         bf:4a:65:56:ed:0a:ef:6c:d4:d7:54:81:e9:e8:7e:7c:d2:72:
         29:3b:69:30:3a:40:fe:1d:e2:af:2f:c7:e2:21:26:e4:2d:a5:
         65:c9:fe:ae:87:09:ad:f1:8a:6c:40:1e:5a:e2:22:34:61:49:
         52:78:13:71:d7:38:b0:b7:1b:35:42:d2:7c:11:df:5c:ad:e7:
         bb:3e:44:03:b0:cf:b4:3c:c1:71:d7:34:af:8f:a9:30:b4:b9:
         44:66:4e:55:26:16:c9:4f:42:8d:52:b1:07:48:a4:c6:3b:6c:
         47:58:3b:90:e0:00:6e:15:0a:81:44:c8:d7:a0:53:3a:c2:36:
         f3:f3:af:2b:7d:00:b8:0c:e7:50:07:f2:e2:14:29:cf:fc:49:
         8b:be:18:ac:38:25:7d:8f:d5:c2:4c:c7:92:9d:27:2e:17:ed:
         9e:dd:b5:91:9a:30:48:ab:24:63:05:a3:8d:47:6b:b0:af:90:
         4a:ac:a8:28:5d:27:51:6f:32:12:1e:47:df:c5:41:13:83:b1:
         e8:f1:0c:49:7c:50:75:49:5c:98:45:01:8e:7b:8b:72:84:77:
         91:e8:0f:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:22 2025 by rpki-client