This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de1a9af2-76c4-499e-bdd2-0fb51a148df8.roa
File:                     de1a9af2-76c4-499e-bdd2-0fb51a148df8.roa (raw, json)
Hash identifier:          wplzDnqDF1abyMdmzYJOBhnAcSsMxfA50gP+FSCfCuY=
Subject key identifier:   95:CC:B4:74:A5:D6:DF:BC:12:44:BD:71:76:C7:D8:3A:BD:AA:9A:F5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5F9485BA0ECA5A1C036D67257C3526695AEDC17C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de1a9af2-76c4-499e-bdd2-0fb51a148df8.roa
Signing time:             Tue 25 Nov 2025 15:40:07 +0000
ROA not before:           Tue 25 Nov 2025 15:40:07 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a5c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:94:85:ba:0e:ca:5a:1c:03:6d:67:25:7c:35:26:69:5a:ed:c1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 15:40:07 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b99aaeba73e211861ca887421394a7048611f5f718b7a90172d64e66ae98ef70, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:3b:18:65:0e:31:7b:aa:40:e6:4a:11:32:
                    c9:16:b2:cf:cb:b2:9b:a7:b5:79:d9:18:f6:58:5f:
                    dc:f9:1a:a0:54:52:6c:2a:3d:d5:39:74:b4:0d:e5:
                    59:01:24:c9:7f:03:7e:65:66:5d:0e:e2:7c:e4:73:
                    a5:07:34:a1:02:3d:b8:e3:26:84:ba:c5:4f:1b:c0:
                    bf:77:5d:a6:72:c5:ec:c4:e2:33:03:c7:53:fe:fe:
                    3a:ea:a2:1f:26:56:bf:a4:8e:0f:35:a1:80:99:42:
                    06:af:03:58:96:84:1c:29:8c:ce:2c:49:49:67:63:
                    5d:1d:dc:3c:a2:9b:ac:3e:bc:1c:86:25:e1:17:20:
                    81:0a:a0:01:1a:68:71:a7:2b:d7:e6:c9:48:53:94:
                    1d:4d:5f:13:49:11:e6:a6:a2:a9:f0:4c:1a:44:62:
                    c8:5f:c6:fa:65:bd:0d:e2:20:c8:7f:55:d3:df:16:
                    cc:73:be:31:e5:92:ad:ff:13:d5:68:07:e9:d3:9b:
                    bc:59:e8:16:44:44:3a:33:63:26:6a:a0:c2:e9:b3:
                    b5:26:83:df:43:f6:f1:3a:7a:11:b6:92:75:27:fb:
                    10:d6:e8:ec:90:b7:86:68:23:52:70:06:2f:56:fb:
                    4b:2a:12:95:ec:77:74:85:de:c7:52:2e:2e:cf:21:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CC:B4:74:A5:D6:DF:BC:12:44:BD:71:76:C7:D8:3A:BD:AA:9A:F5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de1a9af2-76c4-499e-bdd2-0fb51a148df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a5c::/46

    Signature Algorithm: sha256WithRSAEncryption
         b8:d7:48:d6:21:28:bd:8f:fc:a2:93:c7:9b:de:4f:eb:46:22:
         39:2a:9d:58:0c:ed:bc:bc:12:66:fd:2b:7d:05:14:12:46:ea:
         c1:7f:4d:ac:e1:52:75:b0:92:7e:f6:e3:d9:14:44:79:81:29:
         3d:c9:19:e0:2f:db:b4:c4:e4:58:b2:31:5d:d2:ab:94:7f:27:
         81:b4:21:96:77:38:30:59:1c:76:87:f6:48:7c:70:d9:89:2c:
         a7:d9:8b:16:7e:20:83:48:fa:8b:33:12:f4:27:17:cb:82:61:
         c8:6f:b4:50:a0:05:f3:34:4d:cd:c6:6b:cb:a5:47:ec:d6:40:
         27:53:24:46:e5:20:96:51:94:62:67:37:a9:e9:09:c8:69:5f:
         37:d0:22:76:1e:76:c7:e0:3e:8c:c2:9d:00:71:75:e4:4c:bb:
         cf:57:f8:fa:9b:49:f2:24:54:dc:9b:f4:76:f8:7b:b3:9a:85:
         1a:5e:a8:27:42:5d:37:57:2c:87:34:16:b6:93:cb:ff:d0:ad:
         71:4d:6d:d0:32:05:c9:00:c3:a0:33:ae:89:4d:26:53:50:a7:
         bb:d6:85:9b:ea:7a:9c:b5:91:54:0c:bf:5d:f2:ab:12:05:c4:
         38:27:27:f2:26:22:ec:ad:55:d1:ca:45:67:0f:39:43:70:e5:
         04:f5:17:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:29 2025 by rpki-client