This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddbb2430-2de1-4af2-9703-0d9a591d47b6.roa
File:                     ddbb2430-2de1-4af2-9703-0d9a591d47b6.roa (raw, json)
Hash identifier:          BcTuB/hxnKwqg4XNWLV+qC8SnSI5bQ+iqf7U6OzDsO8=
Subject key identifier:   C4:F8:93:27:F2:00:0A:1E:7B:A4:E7:ED:06:B1:E1:2B:7B:8A:E1:32
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       35F7BC9675612DE523C14C5D4C5DF6A70C167CB9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddbb2430-2de1-4af2-9703-0d9a591d47b6.roa
Signing time:             Tue 25 Nov 2025 16:40:10 +0000
ROA not before:           Tue 25 Nov 2025 16:40:10 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f7:bc:96:75:61:2d:e5:23:c1:4c:5d:4c:5d:f6:a7:0c:16:7c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 16:40:10 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=1ad608ef9d7feeac143cf761e5ef2fb94316a6758bc3e42afcf9614d05df2985, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:05:e1:2f:f3:82:d8:bd:f3:3a:a3:27:d6:
                    eb:ae:7f:80:04:04:63:a3:7e:7d:62:00:d8:5b:6e:
                    63:fd:9f:48:2e:f6:7d:9c:94:86:a4:61:19:8b:f3:
                    7d:ee:ac:b7:10:14:44:89:26:fa:64:9f:d8:52:5f:
                    d6:ac:aa:94:10:6c:54:ea:8b:2c:5f:6d:2f:a3:67:
                    44:5c:13:87:7f:ff:cf:4e:9f:f7:27:e1:08:0f:bd:
                    f2:02:c0:6f:b9:7c:af:9b:22:b9:61:88:54:21:46:
                    c4:75:c7:27:4f:35:94:ab:16:37:b5:95:e6:33:63:
                    97:2a:53:9f:f7:58:7e:e6:0e:9b:bc:38:d9:09:fe:
                    34:65:6c:0f:b8:be:7d:e5:97:40:b3:9d:b3:81:29:
                    7c:33:f5:fd:1c:3f:3c:0d:0d:61:04:f3:79:11:14:
                    e6:d8:f4:f2:5c:38:b2:a9:90:78:e6:d2:67:b1:b2:
                    60:55:f1:09:3b:f4:df:fd:3d:93:25:81:d7:9f:85:
                    f7:b8:12:8a:8c:43:ed:6c:b9:7a:da:da:89:00:08:
                    b0:6f:89:e4:ab:2f:f4:32:c1:aa:f3:6b:b9:fb:ab:
                    3d:14:2a:02:96:a9:84:60:3b:d1:29:6a:ae:6a:99:
                    e6:90:a9:52:5a:a4:cd:e1:2d:41:f5:32:4c:2d:f4:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F8:93:27:F2:00:0A:1E:7B:A4:E7:ED:06:B1:E1:2B:7B:8A:E1:32
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddbb2430-2de1-4af2-9703-0d9a591d47b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f40::/42

    Signature Algorithm: sha256WithRSAEncryption
         97:e7:d6:b8:ec:61:0e:b8:77:c1:64:1f:77:e1:9a:13:1a:2e:
         71:65:b6:eb:1a:ea:f1:49:8a:04:8e:6e:74:7c:96:bf:01:7a:
         b5:d6:b6:af:93:b2:1f:71:50:5b:ea:ec:f8:e1:d9:ee:dc:bd:
         29:54:6f:78:2b:8b:19:fe:8c:4b:84:40:4a:55:f5:44:db:25:
         ec:b5:6e:97:7f:6c:1f:9e:c3:58:0c:70:d8:71:e8:c1:89:13:
         86:f2:2c:0c:ce:4b:82:fb:e0:22:ae:75:73:6f:ac:91:cb:75:
         ba:c7:e0:61:0a:11:24:ca:d0:10:5a:c1:de:e2:1e:e7:21:87:
         50:1e:e9:4a:17:c0:a5:32:56:74:8d:b5:ae:cb:09:d7:f8:a6:
         f3:e8:37:e1:44:32:05:54:88:ba:88:c0:53:fc:f3:58:a6:f1:
         ad:8b:71:fb:2e:ef:5d:6f:ae:eb:a2:9c:c0:58:eb:f9:16:71:
         2a:d5:a5:1b:cb:94:ee:78:37:6d:65:f3:80:c0:84:6f:89:f0:
         5d:bb:93:de:23:c8:d6:32:d8:7b:d8:64:e6:26:cf:80:28:6b:
         9a:83:e1:4c:21:5b:5b:6d:40:11:58:2f:24:35:40:b7:82:b3:
         a1:c0:d0:76:81:bb:dc:3f:ce:50:b0:e6:ee:a7:94:d6:a1:42:
         90:c0:43:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:32 2025 by rpki-client