This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d319223e-5c7d-4f42-9c17-ca8277c331e3.roa
File:                     d319223e-5c7d-4f42-9c17-ca8277c331e3.roa (raw, json)
Hash identifier:          Rt5JNSwdK1X+MXq/7t/QWJP/MTETMjUr5VYkSISSbwk=
Subject key identifier:   59:92:7F:96:E7:B6:7A:2B:A1:95:B5:9C:6F:D3:76:3B:EF:A3:91:7E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5F0F2DE32FA7AF47061D56C70C3022A8F0067A34
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d319223e-5c7d-4f42-9c17-ca8277c331e3.roa
Signing time:             Mon 24 Nov 2025 00:21:55 +0000
ROA not before:           Mon 24 Nov 2025 00:21:55 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1c40::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0f:2d:e3:2f:a7:af:47:06:1d:56:c7:0c:30:22:a8:f0:06:7a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:21:55 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=0eca322b6a59d3e34ebbf69b2d121134785c0a99b565e3cecc794f6eacc5a842, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:46:cf:1b:49:61:b7:a1:71:30:1c:26:fe:
                    58:fd:4b:1b:27:04:82:73:51:a4:d5:d7:00:69:a6:
                    dd:ec:83:c0:49:0c:ab:bb:a9:30:7f:ec:f1:c5:cc:
                    38:ca:e4:8d:5c:8e:fd:07:e4:82:e5:21:38:f3:73:
                    84:45:e5:47:6e:44:3a:21:b1:7c:5c:bb:5b:83:bf:
                    66:46:0b:c5:55:f5:8c:aa:eb:cf:f5:12:14:5d:32:
                    e1:ee:ee:d7:0c:44:91:8a:b9:e6:66:73:bd:0e:63:
                    16:51:68:61:e4:ce:26:7e:06:0d:4b:dc:3e:5c:26:
                    5b:92:68:6b:fc:21:00:a5:2f:b2:34:c1:3a:7f:a6:
                    af:5c:12:7b:c2:df:c8:41:14:db:6b:2a:8a:ee:3e:
                    eb:be:65:8f:c2:cd:a3:85:c8:50:00:8b:11:73:2d:
                    c5:dd:94:8e:21:80:80:64:1a:1c:9d:f6:e5:a2:ad:
                    8c:1a:84:b3:8e:a2:1e:2b:f3:7b:0d:7c:0d:8d:a8:
                    aa:4d:bf:05:68:2b:88:20:17:e7:d5:c8:25:c9:82:
                    c3:71:c8:4d:a7:d7:ea:23:8b:f2:09:f3:70:b7:cd:
                    3a:50:5d:e6:07:61:32:d5:79:19:6e:d5:b3:e6:92:
                    b6:85:af:3b:55:8b:17:12:63:3e:90:9b:ab:08:ad:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:92:7F:96:E7:B6:7A:2B:A1:95:B5:9C:6F:D3:76:3B:EF:A3:91:7E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d319223e-5c7d-4f42-9c17-ca8277c331e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1c40::/47

    Signature Algorithm: sha256WithRSAEncryption
         46:e6:61:1b:18:00:dd:c7:3c:33:5b:92:e2:46:03:dd:41:56:
         22:58:d5:f9:b3:86:45:23:75:c9:91:1b:ec:5f:b2:9e:1e:9c:
         e0:de:3a:c8:59:cc:ed:8d:b9:2f:bb:a9:54:ad:55:03:d7:33:
         d5:d5:15:33:81:06:f0:10:70:d7:8d:8c:e0:d2:92:ce:22:0a:
         68:f7:c9:33:4c:da:7c:f8:af:c0:c3:59:a2:51:03:64:42:e6:
         ac:04:8e:be:c9:ce:70:7e:f3:06:e0:ca:72:b7:d8:0d:b7:14:
         b0:c0:ec:a4:00:73:77:f7:f7:10:b8:6b:5d:7d:64:5d:3a:f2:
         d3:c9:61:35:04:e3:1f:d9:a3:38:f7:30:f2:b0:99:2a:2a:dd:
         5a:e0:dd:cf:72:2c:50:6e:d1:61:ec:ef:61:b8:0d:c3:d4:28:
         d0:16:e0:f9:be:8e:87:71:55:71:aa:a2:de:12:f6:8c:be:c3:
         4e:01:b7:af:00:40:e4:96:c4:e9:5a:6b:02:43:0c:5d:76:55:
         a8:69:29:f9:7c:38:a1:96:88:32:6d:ae:70:42:ce:ca:83:62:
         74:21:15:fd:6c:a8:c9:bc:1e:b7:17:16:f0:24:08:09:ef:e6:
         32:fb:7f:6e:67:d6:49:a6:01:cb:3c:79:b6:1f:04:4c:8c:86:
         dd:5a:52:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:11:45 2025 by rpki-client