This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d33094b1-40ed-4303-b75c-4f11a4539492.roa
File:                     d33094b1-40ed-4303-b75c-4f11a4539492.roa (raw, json)
Hash identifier:          BLPZeaPPGDqJVliF3W3SzTiXKA7XckKWP0fcUn+cQ60=
Subject key identifier:   E1:86:0E:78:0B:1B:3B:EA:43:68:21:86:61:85:E3:98:6C:A4:9D:E4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6A9A5F6AE0D285BFC9C10A4C77C7A8C812C5E17C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d33094b1-40ed-4303-b75c-4f11a4539492.roa
Signing time:             Tue 25 Nov 2025 13:20:58 +0000
ROA not before:           Tue 25 Nov 2025 13:20:58 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ed0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9a:5f:6a:e0:d2:85:bf:c9:c1:0a:4c:77:c7:a8:c8:12:c5:e1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 13:20:58 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=4c4120318b5228a6ee7414c5b5bd474437b69ba7d933a3196fc5fbac63b1af13, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c4:ad:3c:e4:83:aa:1a:e0:63:96:3f:a4:c2:
                    9d:2e:a0:d3:72:a6:0a:07:43:f9:b4:11:33:8a:d5:
                    3f:e1:d1:cf:88:da:48:5c:2b:34:49:2a:16:4f:8f:
                    98:55:65:25:85:68:bc:97:02:26:6c:a7:83:63:2a:
                    e3:73:e4:64:1d:8b:22:64:df:53:0a:9f:d2:d9:92:
                    03:b5:08:5a:86:15:38:7c:78:e1:4b:46:a6:4a:1b:
                    70:ad:02:7a:cb:cc:a6:01:4b:a3:05:26:3a:72:e4:
                    90:1c:f1:7f:bf:fb:d9:18:75:3f:e7:2f:53:83:b2:
                    78:81:31:37:ce:c4:ed:4f:1d:c9:10:c9:28:f3:0a:
                    bc:37:32:88:46:60:90:77:e5:50:c4:69:81:15:4b:
                    52:1f:ed:26:74:0d:57:cd:78:cd:09:64:26:03:16:
                    f8:9b:0c:fd:4a:a7:89:ca:a6:d5:06:72:e3:b7:05:
                    05:e8:ab:d0:3c:2a:f1:5e:59:32:29:6c:ec:58:b5:
                    b8:f3:d5:17:da:ec:a9:97:38:12:a8:ca:8f:84:4b:
                    69:b8:96:89:01:9f:85:9d:91:89:03:fc:92:11:21:
                    ff:98:2e:20:c4:a2:df:0d:0c:a4:eb:ce:56:82:a9:
                    79:73:f9:a7:cb:1c:8e:c6:dd:f9:2b:b2:3c:58:5b:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:86:0E:78:0B:1B:3B:EA:43:68:21:86:61:85:E3:98:6C:A4:9D:E4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d33094b1-40ed-4303-b75c-4f11a4539492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ed0::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:79:61:b3:00:71:d7:a9:00:e1:1a:4a:ab:52:7d:a9:4a:
         d7:6b:b5:ee:a0:15:f6:ef:58:cc:0a:af:24:76:6a:72:da:46:
         ff:55:53:41:44:c4:68:d8:a8:4b:23:65:a0:c6:e3:f6:d6:b3:
         5a:51:a5:c3:57:88:33:f5:af:2b:dd:73:d5:21:62:2c:94:7c:
         f3:d2:b9:b1:a6:6b:f6:3f:4b:af:82:ee:bf:7b:bc:5e:f2:f3:
         cf:eb:4b:9b:d8:38:42:30:27:a4:1a:53:2d:a0:4d:73:84:d2:
         ee:7c:29:21:3b:cd:08:56:f4:40:ac:22:42:eb:7a:4c:62:1b:
         ac:5f:ba:c2:8b:35:40:e8:b7:f6:34:29:da:4e:55:9a:75:ad:
         af:21:46:f5:cd:9b:50:9b:5d:3f:4c:4c:d1:e2:d5:47:96:4f:
         79:03:b5:f2:fc:cc:0c:5e:46:61:a3:d1:fe:f1:a1:e4:d2:54:
         ee:4f:4d:64:62:40:ae:52:87:f1:53:1e:ba:e6:f5:a9:20:cd:
         ff:76:84:51:b5:c7:ea:9c:22:dc:cf:0d:68:a0:1f:19:99:04:
         8a:f4:d6:c2:85:eb:ea:3b:1a:84:ee:cb:27:7d:78:c8:1a:90:
         f0:83:fc:60:dd:93:9e:14:b2:d0:08:0e:c2:c4:46:0b:6e:2c:
         cc:95:e9:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:44:11 2025 by rpki-client