This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/db626191-22ad-4db8-921d-16e2754551f1.roa
File:                     db626191-22ad-4db8-921d-16e2754551f1.roa (raw, json)
Hash identifier:          IuwVTtO6VPzZF4Lm47GP0lmkNNki87hCc0Re6OqBOVI=
Subject key identifier:   3F:77:87:65:FF:9B:48:E3:03:85:3F:69:03:82:0F:F8:F0:24:54:25
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3DEC250C5509C52E8F27DD7294458584599A14
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/db626191-22ad-4db8-921d-16e2754551f1.roa
Signing time:             Tue 25 Nov 2025 17:10:43 +0000
ROA not before:           Tue 25 Nov 2025 17:10:43 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3306::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ec:25:0c:55:09:c5:2e:8f:27:dd:72:94:45:85:84:59:9a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 17:10:43 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=a22ad60de3cad9a0c792fc1d483ebd701ed73d83c26172f8ce2a728d9cdcc211, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:67:94:82:59:07:f7:c0:21:35:6c:70:79:
                    b8:20:69:d0:6b:85:d1:6b:be:5d:30:a0:c0:5b:5e:
                    c5:9e:ca:c7:4b:27:a8:08:ca:09:56:08:18:f8:24:
                    f6:b2:bf:88:f5:00:4e:36:e3:5f:cd:65:71:9e:13:
                    01:a5:c9:47:89:74:44:ac:40:66:0d:b5:7a:40:5e:
                    f1:72:f2:13:31:e1:79:e6:c1:f8:32:5e:9e:fa:fe:
                    58:8b:13:7e:7a:83:fc:40:bb:87:c8:32:07:79:49:
                    25:1a:ed:f3:67:9a:f6:3a:74:6e:d6:dd:72:b4:77:
                    99:e2:58:53:96:84:32:fb:49:ba:78:a5:48:0e:21:
                    06:88:ed:56:cc:81:de:3f:1b:9e:5d:13:56:d7:81:
                    63:32:e8:11:4b:c4:08:98:72:6b:c4:bb:10:ca:43:
                    b4:a3:03:ae:ac:21:86:4e:14:42:e2:95:8e:56:3d:
                    d7:ed:35:cf:72:96:65:98:72:81:e1:c5:1c:d8:84:
                    59:65:7a:cf:22:3a:9d:7b:7d:73:d8:af:a0:02:95:
                    2b:b6:77:14:41:b8:14:6a:32:15:72:8b:50:7b:ff:
                    eb:81:46:76:d2:0e:3d:c7:79:49:d8:6e:84:fb:ed:
                    19:16:01:77:7e:df:e2:fb:99:7c:f4:ed:3d:a4:e7:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:77:87:65:FF:9B:48:E3:03:85:3F:69:03:82:0F:F8:F0:24:54:25
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/db626191-22ad-4db8-921d-16e2754551f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3306::/47

    Signature Algorithm: sha256WithRSAEncryption
         9d:4d:79:1f:2e:ac:a7:7d:48:9c:f4:b1:4c:52:13:e8:bc:26:
         61:b8:e9:49:ff:e4:7a:69:49:d3:c6:93:1d:1c:9f:dc:17:a5:
         54:22:69:fb:f1:dd:35:cd:bb:3d:88:6a:08:c0:e6:48:44:ec:
         59:fe:ec:bc:f1:fa:59:6e:c1:8d:59:c5:0a:a0:62:ad:a3:40:
         b5:51:0b:df:13:48:9e:6d:d2:a2:37:33:e7:3c:fb:7e:da:4a:
         2e:02:c0:40:3e:b2:78:3a:46:15:2e:9a:28:70:58:7a:33:24:
         49:c6:2d:9d:45:81:18:77:52:86:3f:3f:5c:cc:fb:d9:c8:a1:
         03:fe:b4:18:7e:4d:49:22:d7:42:49:eb:ea:f4:c6:50:f8:10:
         71:e2:d1:76:16:1b:83:71:74:ac:5f:55:86:23:b1:d3:df:6c:
         e8:19:5d:c5:f4:e5:ab:53:6b:64:85:dc:35:6d:3f:18:2d:21:
         21:26:37:56:fc:5d:9a:73:b6:04:d6:7e:32:82:65:d6:96:3e:
         84:87:ca:86:63:af:30:d0:8d:7b:e3:14:e9:65:2e:7c:2f:e7:
         24:2a:6b:5f:5f:08:cc:a8:e3:b4:ba:50:04:31:d8:f7:19:7e:
         46:58:9f:19:6b:14:61:49:02:15:e9:fc:29:ab:ad:9c:db:77:
         13:cb:ba:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:02 2025 by rpki-client