This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd785405-7f12-475d-bcce-af5dfcccd0f4.roa
File:                     dd785405-7f12-475d-bcce-af5dfcccd0f4.roa (raw, json)
Hash identifier:          WSll2o+y1RKhGmV+4msJIJI62TIy4AgQEyYJ1jTm32A=
Subject key identifier:   1A:E0:B5:93:9F:34:31:69:E7:1C:97:14:B2:A6:C6:92:F0:06:88:14
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       39D8F219D849EE5C2CCA31E2FBAA7AC21FC6A487
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd785405-7f12-475d-bcce-af5dfcccd0f4.roa
Signing time:             Tue 25 Nov 2025 16:02:01 +0000
ROA not before:           Tue 25 Nov 2025 16:02:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38a4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d8:f2:19:d8:49:ee:5c:2c:ca:31:e2:fb:aa:7a:c2:1f:c6:a4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:02:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=67b09e7e1b655811def52059a84f263ec0aefdcdcfeb4dcae347e935284b960e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:e7:e8:0b:df:f9:0f:fb:9a:98:dc:f3:ea:
                    56:81:3b:8d:6c:78:7d:a0:54:05:b5:77:6f:c8:0d:
                    2a:0b:aa:7f:b3:9e:94:a3:76:65:34:57:9c:24:73:
                    17:41:de:0e:54:49:c1:95:6e:a4:a0:8a:65:30:d7:
                    d7:09:2f:7b:5a:a4:37:0a:3c:63:60:75:d9:a0:b6:
                    0c:c3:e2:6b:9a:d2:cf:ef:b8:7d:13:3e:7a:3b:94:
                    c8:9a:5d:3e:f6:b1:7b:76:18:29:ad:96:39:26:47:
                    01:68:dd:36:33:90:68:2b:2b:c9:5e:95:5d:1c:66:
                    58:63:cf:ae:7a:dd:c2:f3:3a:a9:09:61:53:04:d5:
                    1e:50:2d:64:de:60:75:2d:ae:3b:22:ef:d6:fe:0b:
                    17:57:93:47:30:5c:b8:d6:63:00:66:06:7d:61:c6:
                    d3:9f:da:57:21:d3:e5:8b:a9:71:94:86:aa:93:36:
                    95:36:0e:80:04:b0:fe:a3:e6:8d:84:00:88:d0:31:
                    7e:87:9a:f0:4b:75:ff:41:04:92:74:35:0d:1b:19:
                    f6:59:3b:0a:7c:ab:a1:de:23:dd:58:27:ce:63:58:
                    da:ec:bb:82:bc:c4:15:b6:24:a8:8a:06:67:bc:0c:
                    12:8b:41:cd:b4:f8:91:44:b2:2e:7d:06:c4:6a:14:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E0:B5:93:9F:34:31:69:E7:1C:97:14:B2:A6:C6:92:F0:06:88:14
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd785405-7f12-475d-bcce-af5dfcccd0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38a4::/47

    Signature Algorithm: sha256WithRSAEncryption
         97:06:5f:7b:d4:86:0d:b5:82:89:7d:ea:1c:ef:59:3a:f2:a0:
         78:dd:7a:50:56:94:a0:32:47:e6:b5:f6:dd:37:e9:e9:8a:60:
         0c:5a:f9:01:c8:66:1b:df:fa:a5:55:53:b1:2e:9a:8f:69:81:
         97:f6:61:52:8f:b9:22:cb:10:7d:2f:3f:1d:eb:1d:6d:6a:10:
         a7:6a:cc:cf:50:19:67:b3:9d:11:3e:29:b9:b8:f7:51:29:e2:
         41:9a:3f:89:f4:dc:55:0b:18:c4:16:1a:fb:50:85:96:92:73:
         24:7b:2e:82:bc:11:56:3a:ef:89:a5:ae:66:b5:70:3b:05:4c:
         e4:5d:6f:38:d9:e9:5a:de:6d:71:0f:37:4e:35:51:a3:aa:37:
         40:31:81:4e:fe:6c:a0:61:78:86:cf:8c:b1:ea:8a:9f:db:e4:
         5a:e7:8b:d2:3a:13:f2:5e:ba:dc:2e:62:28:8f:59:7e:44:29:
         30:ab:c5:3f:ff:53:54:2e:a4:24:3a:aa:9b:68:81:7f:03:a2:
         f9:c2:ed:94:f0:39:d9:f1:fe:04:ed:dd:ef:17:d8:49:f9:33:
         de:6d:61:e1:f1:74:c9:bc:fb:25:6b:f8:94:a0:a3:90:d2:9f:
         a5:c3:64:4c:40:51:aa:5a:14:a6:cf:b7:4c:31:64:9c:90:c7:
         3a:48:c7:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:32 2025 by rpki-client