This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cee303cb-b82e-4dfd-a765-48ff47d6e6ae.roa
File:                     cee303cb-b82e-4dfd-a765-48ff47d6e6ae.roa (raw, json)
Hash identifier:          30AojUjvt2L19WpBOAhSGsMfRNg+kCLUSg1kcQ5IFBo=
Subject key identifier:   A7:55:4F:41:28:E0:17:5D:91:A1:05:77:E9:C3:38:B5:D8:85:E1:06
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       51DE37998BD960C5D6C121FFBB9364176695F7E2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cee303cb-b82e-4dfd-a765-48ff47d6e6ae.roa
Signing time:             Tue 25 Nov 2025 18:21:01 +0000
ROA not before:           Tue 25 Nov 2025 18:21:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3916::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:de:37:99:8b:d9:60:c5:d6:c1:21:ff:bb:93:64:17:66:95:f7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 18:21:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=090f33b57c1b2337b1a502b1a8f625ed70db9866b130d4b15b366fc829261bf8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:c3:e9:5e:56:a1:d8:fd:69:cb:5e:ac:3a:
                    ff:36:fb:44:a2:81:af:c0:23:03:1f:c4:42:4c:fd:
                    7f:87:f1:58:d4:ed:d4:6e:0a:08:ae:83:05:59:e4:
                    7e:13:e2:b8:4e:fc:78:b7:fb:67:e0:ac:1c:4f:a4:
                    19:86:18:48:de:e4:25:9d:63:2e:25:f1:eb:d6:32:
                    91:3f:e8:b8:12:c5:f6:4d:7e:16:0a:e8:a5:ce:64:
                    3d:85:04:7a:1c:e4:19:e1:30:54:8f:95:d6:3e:3b:
                    73:16:a5:08:31:3b:a2:a0:3a:37:a6:d6:c6:bb:33:
                    22:ed:17:59:0d:59:a5:33:9e:c8:f5:ae:5a:43:ba:
                    16:e2:30:8f:d6:65:0d:89:b0:14:45:df:71:ad:a6:
                    8a:f6:6f:b7:0f:da:09:0a:bb:fb:29:30:c2:53:09:
                    2c:e3:ec:6d:42:c0:b6:16:56:fd:00:f8:45:e9:b3:
                    86:88:a2:96:fe:10:05:93:de:ee:c5:8f:47:b3:15:
                    06:3e:bf:b8:e6:56:3a:de:6b:58:95:6e:ce:c8:3f:
                    28:15:12:ce:bd:b6:97:4f:53:02:8f:0e:ea:c5:64:
                    73:95:43:fa:11:9b:41:77:65:df:e3:01:7f:34:88:
                    0e:86:d1:66:76:21:3e:09:e7:fe:ea:35:0f:6b:2c:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:4F:41:28:E0:17:5D:91:A1:05:77:E9:C3:38:B5:D8:85:E1:06
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cee303cb-b82e-4dfd-a765-48ff47d6e6ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3916::/47

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:11:ea:7f:84:53:86:32:7e:54:57:34:a1:49:0d:e1:e3:
         e5:e2:a9:69:97:9a:e6:1e:6d:a3:ae:a9:1d:f1:4a:d0:92:bb:
         e6:b3:fd:5f:01:86:64:28:64:17:fb:5f:80:77:10:d2:6a:e4:
         6e:46:d2:e4:cd:0a:90:af:a2:68:70:6f:5e:b1:7f:20:9d:5a:
         18:b3:9e:0b:af:1d:ea:1c:5a:48:85:41:e3:2c:b1:52:f9:34:
         ef:54:b7:39:22:a1:b6:1b:a5:86:be:1e:53:f6:33:25:83:46:
         fa:1e:1f:70:4b:ba:51:bf:83:51:29:ca:c8:2e:03:2f:3a:4b:
         1b:7d:a1:e2:e7:30:1f:50:ec:2c:6d:0b:f5:54:23:2a:22:59:
         1f:2d:72:52:1f:54:9a:33:ad:79:53:40:0f:9c:c4:5d:a6:27:
         11:2c:18:75:57:69:e4:7d:df:dd:f3:87:26:91:ba:50:47:0e:
         14:2e:2f:92:9c:21:df:9e:18:19:39:c8:b4:53:89:5d:a1:bf:
         50:c3:38:a2:d6:cf:40:65:a5:e4:c6:8e:4d:1e:67:27:53:41:
         cd:26:3d:63:47:3e:9e:03:d2:a3:f9:28:bc:4c:64:86:fc:08:
         bd:0e:4a:b0:21:16:1a:90:d0:4d:1d:fd:e4:73:29:fa:03:21:
         4b:2a:93:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:32 2025 by rpki-client