This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc26735f-8e45-4ec3-8231-616d0fc2f918.roa
File:                     dc26735f-8e45-4ec3-8231-616d0fc2f918.roa (raw, json)
Hash identifier:          33xCVv2ltOzISenGhy+8jW/8K3mIrdkbO0QUJYCw6Tk=
Subject key identifier:   78:62:48:7E:95:A5:65:12:AF:C2:84:57:8F:7F:99:1C:BC:A6:49:4C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       42678E772D1D46B09DDB23463447EE70D6543910
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc26735f-8e45-4ec3-8231-616d0fc2f918.roa
Signing time:             Mon 24 Nov 2025 06:31:40 +0000
ROA not before:           Mon 24 Nov 2025 06:31:40 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:169a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:67:8e:77:2d:1d:46:b0:9d:db:23:46:34:47:ee:70:d6:54:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 06:31:40 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=65d858346db288a06872fc5cf2e9e0510e02d07d9b1612537c6516d50ba45fef, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:81:fd:95:66:38:be:12:3b:13:98:d0:89:
                    74:45:a5:71:9a:12:e1:6f:8a:c9:77:ed:54:9b:c9:
                    be:a5:9b:85:61:4a:88:e2:37:a1:77:f5:24:33:0f:
                    52:51:d7:79:bf:48:9d:53:34:b9:be:1d:d7:f7:82:
                    c4:35:34:38:dd:ac:ab:8d:e9:6f:44:18:72:8f:58:
                    97:c6:4b:9a:73:45:81:c2:75:c5:b1:e2:31:b3:bc:
                    ea:35:8c:cc:a3:16:71:da:d1:d4:ae:c1:70:98:eb:
                    2e:b4:3a:41:04:aa:f1:e7:56:01:82:ec:b2:5b:76:
                    a1:01:de:d1:7d:63:69:95:9f:7d:b4:23:ff:1c:c8:
                    c8:ff:90:17:bd:26:a6:cb:72:4a:8d:1e:8f:8d:62:
                    1d:fe:fd:fe:84:09:d9:ed:76:4f:e7:8d:60:dd:d1:
                    f6:3b:77:7c:e7:12:0f:97:48:4a:ca:f9:f0:73:b9:
                    26:b3:16:2f:5f:60:75:dc:74:e7:01:28:f8:3e:b9:
                    d6:aa:91:99:df:10:e0:4e:dd:f1:b6:01:6b:05:e7:
                    1e:cb:78:b2:82:f8:70:f6:ee:cb:74:e2:a2:d0:88:
                    a5:b1:f8:8e:fa:61:3f:04:de:37:80:84:5d:17:24:
                    92:fc:14:ca:f3:fd:c3:20:e2:ff:b6:47:f6:95:0d:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:62:48:7E:95:A5:65:12:AF:C2:84:57:8F:7F:99:1C:BC:A6:49:4C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc26735f-8e45-4ec3-8231-616d0fc2f918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:169a::/47

    Signature Algorithm: sha256WithRSAEncryption
         93:74:f3:ee:c0:05:bb:88:02:8f:a7:8b:f7:24:93:38:58:ac:
         f7:6f:f3:a8:64:86:aa:04:6f:05:cd:8b:8a:91:c7:3a:9d:be:
         01:a1:59:8f:0e:b9:ef:5b:c4:0c:5f:4a:12:c3:f7:b5:61:59:
         dd:42:34:64:5b:26:b7:e0:7a:e0:02:01:cb:24:b8:19:c4:d2:
         03:f9:62:9b:2f:18:1a:25:91:d9:95:6c:b4:7b:31:60:60:a4:
         d2:ae:49:da:66:41:97:25:2a:eb:f1:16:18:c3:3f:41:0d:b7:
         ca:cc:12:d3:28:66:52:58:a8:02:d0:5a:43:35:5e:84:ce:fd:
         e2:e1:c5:b0:a8:16:ef:20:97:5e:36:c5:99:40:1e:10:18:0a:
         df:a4:83:20:e3:80:ae:4c:fa:5b:f5:e3:8e:f3:b3:79:91:fd:
         2c:f8:0b:7d:b9:85:19:aa:83:4f:93:30:9d:e4:d8:fb:98:9f:
         fe:e2:a8:fc:aa:e6:a2:29:72:f9:33:68:68:b1:c1:e3:28:8d:
         2b:bd:d7:09:b9:74:16:52:1d:4d:56:9f:bb:c2:e2:db:94:1e:
         f4:9f:b3:0e:f9:d4:94:a0:7b:2c:c6:b6:40:b5:ee:50:01:61:
         a9:fd:54:e2:c0:22:6b:db:eb:9d:9a:f2:09:aa:b9:5b:48:01:
         ab:be:6b:15
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQmeOdy0dRrCd2yNGNEfucNZUORAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDYzMTQwWhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NWQ4NTgzNDZkYjI4OGEwNjg3MmZjNWNmMmU5ZTA1MTBl
MDJkMDdkOWIxNjEyNTM3YzY1MTZkNTBiYTQ1ZmVmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLdYH9lWY4vhI7E5jQiXRFpXGaEuFvisl37VSbyb6lm4Vh
SojiN6F39SQzD1JR13m/SJ1TNLm+Hdf3gsQ1NDjdrKuN6W9EGHKPWJfGS5pzRYHC
dcWx4jGzvOo1jMyjFnHa0dSuwXCY6y60OkEEqvHnVgGC7LJbdqEB3tF9Y2mVn320
I/8cyMj/kBe9JqbLckqNHo+NYh3+/f6ECdntdk/njWDd0fY7d3znEg+XSErK+fBz
uSazFi9fYHXcdOcBKPg+udaqkZnfEOBO3fG2AWsF5x7LeLKC+HD27st04qLQiKWx
+I76YT8E3jeAhF0XJJL8FMrz/cMg4v+2R/aVDVgLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUeGJIfpWlZRKvwoRXj3+ZHLymSUwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2RjMjY3MzVmLThlNDUtNGVjMy04MjMxLTYxNmQwZmMyZjkxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAFpowDQYJKoZIhvcNAQELBQADggEBAJN08+7ABbuIAo+ni/ckkzhY
rPdv86hkhqoEbwXNi4qRxzqdvgGhWY8Oue9bxAxfShLD97VhWd1CNGRbJrfgeuAC
AcskuBnE0gP5YpsvGBolkdmVbLR7MWBgpNKuSdpmQZclKuvxFhjDP0ENt8rMEtMo
ZlJYqALQWkM1XoTO/eLhxbCoFu8gl142xZlAHhAYCt+kgyDjgK5M+lv1447zs3mR
/Sz4C325hRmqg0+TMJ3k2PuYn/7iqPyq5qIpcvkzaGixweMojSu91wm5dBZSHU1W
n7vC4tuUHvSfsw751JSgeyzGtkC17lABYan9VOLAImvb652a8gmquVtIAau+axU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:05:22 2025 by rpki-client