This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d2a4ab45-8d01-45b2-bd2a-b7c7b856afeb.roa
File:                     d2a4ab45-8d01-45b2-bd2a-b7c7b856afeb.roa (raw, json)
Hash identifier:          NaiOmvDxFdsupE+Vu6QMXNzx1uHtiaQP1gZlqHe5cro=
Subject key identifier:   7E:47:70:FC:E3:A2:FF:0A:56:3A:60:E0:3A:9E:0F:44:EC:B2:61:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4D23112A8627148BCF88CC28FCAAD53A1596D650
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d2a4ab45-8d01-45b2-bd2a-b7c7b856afeb.roa
Signing time:             Tue 25 Nov 2025 02:32:19 +0000
ROA not before:           Tue 25 Nov 2025 02:32:19 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ce0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:23:11:2a:86:27:14:8b:cf:88:cc:28:fc:aa:d5:3a:15:96:d6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 02:32:19 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a32c390ed1ca84169be1cad1337c588e1b8651501526e037d5b06e55b5431827, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:a6:23:79:45:a2:cd:e9:09:8f:d9:49:45:
                    82:21:af:ca:67:94:4e:b8:b8:28:96:a9:53:6d:43:
                    b5:7d:b7:7f:b6:38:27:8b:09:fb:fa:42:2a:d3:44:
                    44:e3:86:b5:9f:cc:7c:22:c2:26:20:5b:c4:f2:77:
                    1c:f2:8b:99:3e:ff:b4:77:c5:3b:cb:39:4a:b7:dd:
                    62:f4:22:eb:d5:d2:f0:b4:3b:60:e2:8b:a2:99:ff:
                    46:72:8d:00:34:8d:8a:60:d3:e0:d4:34:fc:98:00:
                    a9:55:e2:d2:1b:c1:20:da:db:fb:b9:ca:ac:e2:3a:
                    a1:83:0e:83:c4:6b:f0:fb:e5:8c:db:ec:08:fb:0a:
                    b0:ee:1d:d1:7e:54:80:f6:8c:e9:09:5a:f9:db:c3:
                    cf:6f:52:a4:4a:f8:3a:d6:98:99:62:ed:45:09:c3:
                    31:1f:ed:77:46:2d:62:0e:b0:ad:20:7c:e2:04:1f:
                    72:42:9d:07:db:9a:d9:c4:f3:ec:57:08:14:f8:2f:
                    31:7a:0d:22:35:4c:64:1a:98:ab:49:8e:4e:83:9c:
                    e7:08:41:d7:0a:36:fb:cc:a1:35:9e:ba:9e:3d:0f:
                    83:94:80:20:c5:c5:00:d0:58:71:3e:32:28:29:70:
                    0e:c9:6a:03:b2:61:7a:f0:6d:f3:80:8f:4e:81:3e:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:47:70:FC:E3:A2:FF:0A:56:3A:60:E0:3A:9E:0F:44:EC:B2:61:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d2a4ab45-8d01-45b2-bd2a-b7c7b856afeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ce0::/45

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:f3:8c:bd:88:0b:da:31:c9:9b:ae:c6:c9:c4:20:9b:ba:
         fe:2f:ae:8d:2d:48:4b:3b:45:6e:2e:f7:82:fe:93:6a:de:ca:
         01:8f:37:42:94:87:3a:67:8c:8b:d2:3e:11:cd:87:eb:6f:e6:
         1f:61:0d:b4:d7:70:0f:63:57:97:c1:c6:93:b7:56:1b:eb:a4:
         0d:33:7f:57:7d:f3:f1:a6:73:03:aa:b3:c6:17:29:f7:fa:f3:
         36:21:28:1b:3c:ae:86:c3:2c:5a:f8:27:6f:03:1f:e6:e0:c6:
         44:8a:97:03:df:e8:d5:a8:ab:7b:20:46:8e:84:45:e9:5d:be:
         cf:57:ef:eb:e3:51:d8:7a:2b:da:b1:58:58:a4:04:df:29:b6:
         9d:7b:ea:f6:28:0d:72:72:77:ea:d8:3f:9e:0f:6d:9d:b6:b5:
         48:dc:37:fe:c6:73:33:62:b8:67:ab:dd:10:2a:dd:f2:0b:0a:
         2d:e4:f9:f0:e3:e3:9b:a0:04:86:c1:0c:6d:7e:83:64:12:f6:
         0a:d6:22:7c:b0:e8:c5:22:3b:cc:46:26:96:9e:14:ba:31:11:
         f2:af:c5:0f:8b:98:c4:12:d1:71:ca:42:bf:89:22:59:27:f2:
         c4:5f:d1:f2:55:fd:5f:56:c0:76:21:fb:eb:3a:fc:ff:b6:fd:
         e3:84:26:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:40 2025 by rpki-client