This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d285ec98-519e-4ff9-ac23-2f3f99e189a5.roa
File:                     d285ec98-519e-4ff9-ac23-2f3f99e189a5.roa (raw, json)
Hash identifier:          SRfzgqMmkKRmoqavExynZsQTWOBH3tlDi/9VhwCP3iw=
Subject key identifier:   C6:A6:A2:08:FE:75:84:4C:B1:5D:21:D3:A2:BB:C5:7C:81:BA:DE:13
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0EA203BE4B5FA93F2FDAC08755E714BF58A91396
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d285ec98-519e-4ff9-ac23-2f3f99e189a5.roa
Signing time:             Mon 24 Nov 2025 04:41:22 +0000
ROA not before:           Mon 24 Nov 2025 04:41:22 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:16ac::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a2:03:be:4b:5f:a9:3f:2f:da:c0:87:55:e7:14:bf:58:a9:13:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:41:22 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=ef4db60d778f5532133c02184e4dfe2a2edb60119111f872c58a827bc202605b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:ae:93:69:c4:14:76:cc:74:95:39:0a:de:
                    da:67:a8:14:ad:cc:f3:c1:c5:2a:a6:af:e4:da:7f:
                    3b:e6:a9:48:3e:53:31:f3:46:15:2b:39:10:e8:c9:
                    b2:36:fc:d7:14:c0:ee:74:6a:50:b7:7c:38:4b:a9:
                    41:8c:97:4a:19:8f:1b:19:86:ad:b7:8c:29:e2:ac:
                    e5:67:7d:27:59:f0:7e:ae:39:73:de:64:05:61:47:
                    06:9e:be:16:fc:05:5f:d9:8d:c6:14:30:df:af:59:
                    9e:d6:b3:e8:bd:e1:d8:27:9a:9b:cd:00:68:ac:82:
                    a9:95:4f:fa:b2:eb:e1:7b:cc:9f:ea:12:68:88:c4:
                    06:8f:db:a3:de:0c:bf:81:f8:f5:78:36:37:f4:56:
                    63:04:dd:df:f0:e6:91:4a:fb:a7:26:30:db:9a:73:
                    2e:f4:ab:a1:b4:bb:c5:7e:d4:e1:e4:ba:f7:0e:20:
                    ae:e3:ed:bc:95:01:b9:a7:05:78:08:16:3f:71:f0:
                    1c:0c:45:4d:fc:34:f3:08:a7:08:7b:63:6d:b8:73:
                    69:73:f2:7d:f7:22:07:e5:13:1f:0d:e6:ec:75:b8:
                    17:52:02:80:0b:7d:a1:20:7f:08:03:d7:d5:46:fc:
                    40:03:1e:3e:ca:33:16:f0:96:b3:eb:29:38:3a:cf:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:A2:08:FE:75:84:4C:B1:5D:21:D3:A2:BB:C5:7C:81:BA:DE:13
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d285ec98-519e-4ff9-ac23-2f3f99e189a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:16ac::/47

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:b5:5a:72:3b:4c:43:fe:7e:a2:ba:c9:00:49:2d:f2:d1:
         27:5a:59:7e:47:b8:dd:63:bb:b2:0b:a0:4d:44:64:69:27:ca:
         a0:54:6f:ac:41:43:6a:fb:f6:dd:81:f6:39:75:b4:80:6d:2b:
         69:e0:d5:d9:2a:ed:81:66:73:9e:de:d1:28:2d:88:1f:a8:0b:
         4f:47:61:92:97:3c:fb:eb:42:b4:20:ea:6c:e6:13:41:1d:b8:
         a2:52:9e:86:03:84:1a:e3:6c:c8:ce:10:4e:00:cb:3d:4e:2a:
         d1:43:ba:61:12:95:40:f5:14:7a:7a:f0:8d:b0:3b:5f:86:30:
         75:11:3d:77:3c:87:46:8f:d7:a6:b5:9f:39:69:2b:3c:ac:1d:
         2f:af:20:75:24:20:15:45:70:c1:d7:9b:8e:ad:cd:77:2f:c5:
         76:07:29:39:9c:24:ba:e7:0d:ef:96:07:aa:5f:36:6f:48:72:
         a1:f9:38:c2:65:42:ee:68:42:42:cc:31:35:cc:65:7d:68:48:
         9a:c3:55:14:ba:73:69:20:cd:92:e5:15:6b:8a:c8:0c:dd:6b:
         de:74:a5:d9:17:1f:a7:ac:b3:24:f2:c1:ab:af:dd:c8:7d:3b:
         1a:35:ca:1b:44:8d:12:b7:d2:ee:1e:b9:1d:35:b3:ad:ba:16:
         75:34:67:8b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDqIDvktfqT8v2sCHVecUv1ipE5YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDQ0MTIyWhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZjRkYjYwZDc3OGY1NTMyMTMzYzAyMTg0ZTRkZmUyYTJl
ZGI2MDExOTExMWY4NzJjNThhODI3YmMyMDI2MDViMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoAq6TacQUdsx0lTkK3tpnqBStzPPBxSqmr+TafzvmqUg+
UzHzRhUrORDoybI2/NcUwO50alC3fDhLqUGMl0oZjxsZhq23jCnirOVnfSdZ8H6u
OXPeZAVhRwaevhb8BV/ZjcYUMN+vWZ7Ws+i94dgnmpvNAGisgqmVT/qy6+F7zJ/q
EmiIxAaP26PeDL+B+PV4Njf0VmME3d/w5pFK+6cmMNuacy70q6G0u8V+1OHkuvcO
IK7j7byVAbmnBXgIFj9x8BwMRU38NPMIpwh7Y224c2lz8n33IgflEx8N5ux1uBdS
AoALfaEgfwgD19VG/EADHj7KMxbwlrPrKTg6z/YpAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxqaiCP51hEyxXSHTorvFfIG63hMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2QyODVlYzk4LTUxOWUtNGZmOS1hYzIzLTJmM2Y5OWUxODlhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAFqwwDQYJKoZIhvcNAQELBQADggEBACrYtVpyO0xD/n6iuskASS3y
0SdaWX5HuN1ju7ILoE1EZGknyqBUb6xBQ2r79t2B9jl1tIBtK2ng1dkq7YFmc57e
0SgtiB+oC09HYZKXPPvrQrQg6mzmE0EduKJSnoYDhBrjbMjOEE4Ayz1OKtFDumES
lUD1FHp68I2wO1+GMHURPXc8h0aP16a1nzlpKzysHS+vIHUkIBVFcMHXm46tzXcv
xXYHKTmcJLrnDe+WB6pfNm9IcqH5OMJlQu5oQkLMMTXMZX1oSJrDVRS6c2kgzZLl
FWuKyAzda950pdkXH6essyTywauv3ch9Oxo1yhtEjRK30u4euR01s626FnU0Z4s=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:51:57 2025 by rpki-client