This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9e23c70-3e0e-4198-831b-d7d60b8bdc74.roa
File:                     d9e23c70-3e0e-4198-831b-d7d60b8bdc74.roa (raw, json)
Hash identifier:          cRFiX+hde4vR0sNeo5ndET97Ct/FXexO56QrKgy0CMI=
Subject key identifier:   5E:1E:98:26:86:3D:E1:D8:AA:2D:F3:7A:43:B8:7B:FD:ED:CC:2E:16
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A1CB8CC11EDFFC05BCF6035B75C2AD96289AF59
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9e23c70-3e0e-4198-831b-d7d60b8bdc74.roa
Signing time:             Tue 25 Nov 2025 08:20:53 +0000
ROA not before:           Tue 25 Nov 2025 08:20:53 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2dd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1c:b8:cc:11:ed:ff:c0:5b:cf:60:35:b7:5c:2a:d9:62:89:af:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:20:53 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=bbad6225fcea1ce31ba565c5ad9ed262967bc1f7b4c18c4c953dad365f953229, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:16:0e:6a:da:e1:d5:ec:a0:3d:cd:fd:cb:
                    12:21:b1:31:10:24:59:20:75:48:68:e5:fe:10:68:
                    33:93:ec:1c:54:af:5d:91:bf:85:41:17:e3:ce:ee:
                    1d:6c:d6:ed:da:8e:f6:f4:0a:01:be:2c:a0:76:8c:
                    4e:e2:1a:32:a5:70:34:37:33:db:18:cb:ea:c8:fa:
                    15:6d:0b:15:1f:cb:55:a0:55:cd:a2:13:2a:b5:b5:
                    bc:54:0c:19:13:54:7b:35:61:99:81:43:2e:e3:1e:
                    33:b6:33:27:f0:19:e5:0d:dc:32:00:60:48:4e:52:
                    2e:c6:ff:dd:18:8d:71:90:e3:4d:13:e9:69:ac:d5:
                    b9:4f:da:b6:1c:db:c1:e0:bd:91:ea:c4:6a:90:74:
                    8b:9f:a2:33:b6:57:51:41:52:c1:42:a4:7b:16:26:
                    ea:40:ca:2f:cc:2b:66:af:77:71:79:49:d9:5b:7b:
                    28:8a:2f:29:c4:00:7b:c4:bf:86:1a:1c:e4:fa:15:
                    14:f9:20:df:e3:0b:00:e6:d0:65:47:ee:6a:55:18:
                    72:a9:90:d6:a0:c1:b3:4b:e8:16:0d:af:51:35:58:
                    ac:26:bd:f9:29:98:79:2a:28:73:70:61:82:13:65:
                    61:87:18:a5:9b:6f:b1:b7:2d:0c:bb:b7:e3:20:7e:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1E:98:26:86:3D:E1:D8:AA:2D:F3:7A:43:B8:7B:FD:ED:CC:2E:16
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9e23c70-3e0e-4198-831b-d7d60b8bdc74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2dd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:d6:bb:e7:20:7b:57:52:38:10:82:75:2a:8b:c3:2b:34:c3:
         7d:17:f9:7c:b4:bd:79:22:88:f5:c2:c7:f6:84:c4:36:67:18:
         a1:71:00:72:9d:20:fe:7c:0d:29:17:c6:10:7a:cf:84:69:df:
         42:55:d5:36:0c:01:f5:3e:3e:6d:f2:7d:96:d1:6d:c5:31:6a:
         81:1d:4e:87:51:36:03:0a:ac:eb:c9:f2:db:dd:cc:ae:42:bb:
         a4:26:3f:96:e4:11:b5:ed:0e:22:9f:25:cc:af:dc:4f:ca:a4:
         cd:86:42:49:3f:35:60:c6:6c:1c:fe:b3:cc:86:f0:f7:23:a5:
         ca:1f:22:2f:56:af:38:b3:be:33:f6:6c:64:2b:bc:97:ad:79:
         3f:d2:81:30:97:a8:6f:e3:76:28:47:98:76:00:83:4b:73:29:
         29:31:4d:08:01:62:06:d9:59:f5:53:86:b3:a3:fe:13:67:37:
         15:13:11:0a:3b:6a:79:84:4b:75:73:87:d4:06:e2:50:70:6f:
         b1:f9:b7:45:1c:ef:32:8a:34:97:61:f5:3d:74:ca:65:9a:2c:
         fc:8f:a9:ab:ca:0b:0c:62:85:23:d0:21:9b:a1:58:14:b8:b1:
         96:1c:f0:09:6b:ab:ef:4a:b5:f6:6b:dd:ee:81:ac:81:d1:d3:
         ae:1c:aa:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:08 2025 by rpki-client