This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d5920295-273f-4fb1-8de5-6d5922ace206.roa
File:                     d5920295-273f-4fb1-8de5-6d5922ace206.roa (raw, json)
Hash identifier:          rwA+ofBHrkGRyyywL3dkdPA6nNfalGJawh8jcRFxl3s=
Subject key identifier:   5C:CB:1B:7F:26:FA:08:6D:7C:A6:B8:24:6C:6E:C9:68:50:76:4F:EF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       04DD67AD112B05FD7E400E9974D3F15B5C118902
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d5920295-273f-4fb1-8de5-6d5922ace206.roa
Signing time:             Tue 25 Nov 2025 11:10:13 +0000
ROA not before:           Tue 25 Nov 2025 11:10:13 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3bea::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:dd:67:ad:11:2b:05:fd:7e:40:0e:99:74:d3:f1:5b:5c:11:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 11:10:13 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a3de2167381cb2f98faee793c6fef71efac3195a717d5fa37c04ad7ee747260f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:f6:0f:50:a7:e6:23:55:7c:23:3f:90:52:
                    18:04:ec:d4:42:7a:b2:93:51:50:c5:5f:83:63:ce:
                    d1:b6:fb:99:7a:6f:ee:21:c6:bc:a9:cc:f7:a3:ce:
                    5e:05:2a:4d:ee:65:b1:10:8a:00:0b:33:d1:4a:e0:
                    94:64:ab:62:75:e7:98:56:a0:d7:ea:51:9f:e1:f1:
                    7e:db:f0:f0:e2:df:94:8c:33:ef:fc:77:67:30:d8:
                    a0:82:87:35:ef:8e:89:8a:82:f7:47:87:d2:97:b3:
                    05:96:17:b2:f6:ce:8b:bb:f2:3d:91:9d:89:6f:47:
                    c1:d4:64:75:86:51:01:c8:52:73:44:3b:f5:5a:34:
                    e5:41:c8:64:56:8d:f9:81:8d:76:43:bc:4d:64:3a:
                    10:1e:1e:34:7d:19:4f:41:f8:2a:e4:81:d7:04:33:
                    85:a2:bf:e6:22:03:b2:ed:35:68:ff:73:d3:7f:37:
                    d5:a7:02:1e:c7:1c:e1:db:62:33:d6:cf:6a:04:31:
                    a1:1f:14:5e:0f:67:20:34:37:53:2f:3f:38:60:50:
                    ec:9a:69:c5:01:2a:19:87:ff:5d:72:b4:1f:53:12:
                    7e:cd:67:1a:c5:84:fe:c2:54:96:a4:35:29:28:8a:
                    66:ef:e7:a4:d5:20:47:78:a8:91:c6:d5:22:a3:e4:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CB:1B:7F:26:FA:08:6D:7C:A6:B8:24:6C:6E:C9:68:50:76:4F:EF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d5920295-273f-4fb1-8de5-6d5922ace206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3bea::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:d9:bf:47:a2:79:b9:54:f9:df:a2:95:f9:72:c2:fb:0d:
         82:43:1c:70:06:30:98:ad:30:34:3d:a3:2f:0d:b7:1a:8d:dd:
         a2:93:d1:6b:79:69:e3:98:e7:bc:3f:de:d7:ed:c5:c7:f1:78:
         79:b8:40:8d:3c:19:55:c4:eb:d4:08:4a:0e:83:14:bd:c0:8e:
         c6:eb:37:39:88:3c:78:5e:20:0e:70:a1:ea:9c:40:3d:0e:62:
         0e:7d:ec:3d:fd:d7:5a:6b:09:12:32:3a:8c:36:1e:c4:e8:bd:
         22:d9:b4:06:fe:bf:e4:e2:c0:2f:96:42:df:f9:5b:ab:be:d1:
         9f:a2:d9:da:58:a5:4d:02:4f:42:bd:55:a1:7f:24:46:8e:87:
         1c:fa:11:6d:ec:a0:b2:8b:fc:7b:1a:3b:29:5e:9e:5f:7e:b3:
         a5:25:ca:de:f7:2d:cc:c6:ac:7e:3f:b7:b4:fd:83:c4:c7:0a:
         3c:eb:af:f4:ca:4f:2b:20:8a:f6:b9:f3:eb:33:5a:5b:28:16:
         f6:ff:49:cc:dc:98:54:aa:87:3d:83:cf:b2:58:16:f7:73:24:
         e7:ff:43:70:f4:31:fb:47:78:7e:00:ae:17:63:bb:39:8a:46:
         d1:8c:ad:4b:e6:64:31:f4:19:ab:48:25:e3:fa:e7:a7:b7:46:
         b7:27:07:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:34:13 2025 by rpki-client