This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d4685b40-d052-4b3a-8b80-1f089e70e76f.roa
File:                     d4685b40-d052-4b3a-8b80-1f089e70e76f.roa (raw, json)
Hash identifier:          n223tAF9mx62vL3YB+l4Q6nB9vihA86n4M5WihgbVSg=
Subject key identifier:   B7:7F:AA:2D:A7:2C:95:36:93:3F:A8:16:C1:0F:91:13:DC:9A:41:07
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5C953E20FA2C8D2DD820AA6EB47FB8BB35530C6C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d4685b40-d052-4b3a-8b80-1f089e70e76f.roa
Signing time:             Tue 25 Nov 2025 04:00:08 +0000
ROA not before:           Tue 25 Nov 2025 04:00:08 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3658::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:95:3e:20:fa:2c:8d:2d:d8:20:aa:6e:b4:7f:b8:bb:35:53:0c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:00:08 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=bab13ce0dcf84051bc7db5eaebdaafe88a5fe0762b7746b6dd885347b81dc418, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bd:97:e2:87:34:ff:11:ca:6b:e6:c4:55:f8:
                    c2:15:08:a9:20:09:cc:e4:0b:a6:ea:dc:f6:07:44:
                    69:25:07:c3:8d:51:71:41:05:1c:59:b4:4b:e6:d8:
                    49:cb:a5:23:03:07:cc:cf:98:10:30:c9:44:fe:72:
                    b0:4d:9e:1e:7a:b5:14:1f:fe:91:59:61:bb:4d:0b:
                    5c:ab:ae:3a:6e:23:65:72:e7:5d:d9:3a:6b:7c:11:
                    12:7c:2a:77:fe:7f:e3:cf:4e:79:67:57:53:6b:f7:
                    27:82:c1:7c:61:6d:99:4b:32:d0:ef:79:ec:d1:80:
                    70:11:6b:1d:d3:0f:7e:82:13:1f:4c:38:c6:a6:74:
                    c0:6a:c4:d1:84:ab:bc:ff:61:67:ba:8f:15:84:91:
                    6a:ef:13:30:10:9c:7c:83:d6:31:06:6b:41:b1:ac:
                    92:4f:39:8b:4d:c4:be:db:d7:8c:72:ef:d7:d4:45:
                    0e:0a:31:0e:a7:6c:60:32:29:d3:1a:d0:79:51:57:
                    76:54:07:46:6d:85:f0:19:65:22:9e:e7:3f:bb:36:
                    62:c8:c8:b4:95:30:7f:ec:26:95:bf:69:6f:12:bc:
                    2f:5f:16:75:57:6c:00:aa:c2:b7:d3:a8:3f:ee:a7:
                    bd:68:6f:8c:43:7b:9c:3b:19:a8:a2:e4:83:1a:ad:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7F:AA:2D:A7:2C:95:36:93:3F:A8:16:C1:0F:91:13:DC:9A:41:07
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d4685b40-d052-4b3a-8b80-1f089e70e76f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3658::/45

    Signature Algorithm: sha256WithRSAEncryption
         79:02:20:37:27:c9:27:26:92:0e:88:32:eb:7f:a8:04:d9:60:
         18:93:fb:8b:22:a7:e8:a6:01:08:e3:7a:f4:8d:f7:e6:b5:e8:
         a9:21:08:40:1b:49:66:23:6e:5b:d2:e3:39:3a:b6:8f:f2:67:
         d1:11:fa:08:f8:cc:79:83:32:2d:c8:71:55:85:66:6f:a7:a4:
         70:84:98:8e:b2:18:ed:07:75:47:22:3a:8e:38:c4:f0:c1:9d:
         3a:0c:a6:39:b0:c9:16:30:2c:e8:52:af:42:20:9e:e5:77:e1:
         8c:98:23:e6:21:81:f7:2f:63:f9:73:d7:d4:40:45:b3:82:09:
         f3:ec:be:41:40:5d:97:56:a6:4c:4a:25:91:11:e7:61:b9:bb:
         9d:e6:31:4a:16:81:af:c8:3d:2e:73:64:c0:9a:88:13:a2:20:
         a1:b7:f2:a7:e8:33:c7:87:df:a4:25:f3:1a:6e:98:d5:31:e7:
         01:33:77:51:b6:fb:e3:e7:6e:c0:7f:b2:4a:4f:b3:94:ff:f3:
         87:fc:07:27:ef:8d:53:8a:dc:e4:2e:4f:80:84:00:f5:e7:5a:
         50:78:c6:b9:c2:35:46:10:b9:ed:e5:87:49:64:6e:d8:28:67:
         44:93:0a:1e:04:e3:66:19:79:85:d5:6b:25:90:1a:62:4c:a8:
         db:e6:db:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:27:21 2025 by rpki-client