This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3049a3d-3549-430a-b4e6-73c3c2620ac0.roa
File:                     d3049a3d-3549-430a-b4e6-73c3c2620ac0.roa (raw, json)
Hash identifier:          aZYZfziqf8RpPucfy/dyMwTo/YU3DVz6VJ0sIQBudiI=
Subject key identifier:   CB:F4:7B:31:6D:F3:B7:A5:63:52:6F:93:7D:2F:D8:63:51:3E:FE:61
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2F43EB49D334F5FBE055A99893283D2795BF8079
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3049a3d-3549-430a-b4e6-73c3c2620ac0.roa
Signing time:             Tue 25 Nov 2025 08:40:09 +0000
ROA not before:           Tue 25 Nov 2025 08:40:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38a8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:43:eb:49:d3:34:f5:fb:e0:55:a9:98:93:28:3d:27:95:bf:80:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:40:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=756175b1de85dc8ec39b9c7944f1015e19205c5f305b980fe7c836639dd15ead, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:70:7f:c5:77:0d:20:94:eb:e2:04:c0:65:
                    67:bd:a4:6c:9f:5a:fe:e3:10:7f:98:18:43:c9:0c:
                    eb:3f:1b:93:9a:ee:27:13:ab:be:68:32:0a:d8:fd:
                    3d:64:f8:c7:5d:34:9c:30:6b:fa:1b:46:3a:19:ae:
                    a5:ae:36:80:53:40:68:3a:4a:31:1d:13:56:42:65:
                    4d:41:10:89:98:f2:e4:da:8f:bf:3d:40:44:dc:21:
                    ed:2f:50:8b:d7:a8:ba:92:d6:09:b2:e2:d5:28:23:
                    ca:f9:0c:9a:a0:43:30:98:e0:ed:86:3a:5b:b2:3e:
                    24:29:ae:5a:aa:de:96:ac:fb:8e:db:d6:bf:46:1b:
                    5a:6c:17:d5:4e:01:00:e2:5a:31:9b:a9:8f:26:91:
                    fd:f5:7b:46:de:18:28:38:26:25:d0:56:83:a8:6f:
                    8d:6e:0f:ab:cd:71:3e:0c:f5:ef:11:b4:04:fe:f2:
                    d4:96:f6:97:56:3c:b9:96:fc:46:c0:ac:b6:1d:60:
                    31:e6:c2:c0:aa:a6:2e:f8:28:90:2a:60:f0:30:d5:
                    cf:f3:5a:c2:26:85:c3:60:95:38:3b:2d:e7:f8:f4:
                    99:d0:f6:a8:5f:88:25:24:fa:98:13:db:f3:bf:34:
                    5b:36:8b:8b:d4:b2:84:90:c7:53:e5:e5:45:70:ba:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:7B:31:6D:F3:B7:A5:63:52:6F:93:7D:2F:D8:63:51:3E:FE:61
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3049a3d-3549-430a-b4e6-73c3c2620ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         b4:54:ad:99:8a:1b:fd:9e:09:dd:94:70:9c:fb:3e:c8:2b:03:
         28:2d:62:16:17:10:da:87:ee:dd:37:78:ab:f1:3d:28:88:f7:
         dc:d6:fd:0a:79:4b:df:69:c8:96:e3:13:0d:48:55:8d:52:ae:
         18:a1:a4:42:bf:80:ae:aa:a0:93:56:00:3e:6d:05:03:0d:27:
         d6:34:01:a8:d8:ab:f0:9c:48:37:2f:84:07:78:66:ee:5d:b3:
         93:f3:7e:fb:78:b6:9c:f9:ce:e3:c1:26:03:30:e4:9d:e8:7a:
         66:1c:2b:e1:fa:ae:ba:d3:50:f7:2d:47:cd:22:11:f8:2a:78:
         8d:41:b2:0e:73:67:4b:37:42:55:40:a2:01:16:6b:6f:4a:8c:
         34:98:dd:0b:33:21:b0:92:e4:e8:c2:66:d1:f3:96:e4:57:40:
         ef:e9:e7:28:97:8c:b5:ea:8f:6a:24:57:48:03:19:d4:af:b0:
         8a:5f:45:2e:1f:bf:d7:f9:73:0c:c2:4f:11:64:2c:7d:e4:36:
         36:c2:e4:e1:bb:8d:7f:0b:db:a6:2a:8c:89:90:99:28:6a:64:
         53:ac:80:2d:dc:27:aa:d6:6e:e0:ef:84:fc:14:a9:1d:dc:86:
         6c:86:4a:35:af:b9:d5:09:6b:27:d8:20:81:32:a0:79:a7:f7:
         22:e4:2a:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:52 2025 by rpki-client