This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e119ea80-fa47-4d32-b6fd-0a2780cb4f5a.roa
File:                     e119ea80-fa47-4d32-b6fd-0a2780cb4f5a.roa (raw, json)
Hash identifier:          tzlodeqgSM2/ZBrchxtax80cNvl4yb01AixridtFKpA=
Subject key identifier:   55:1E:E3:7A:91:95:15:9A:CF:24:DC:9B:29:D5:46:7B:6D:3A:88:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6811C5A326C4B6694F539E1E1D546804DCF529D9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e119ea80-fa47-4d32-b6fd-0a2780cb4f5a.roa
Signing time:             Tue 25 Nov 2025 14:00:10 +0000
ROA not before:           Tue 25 Nov 2025 14:00:10 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b5a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:11:c5:a3:26:c4:b6:69:4f:53:9e:1e:1d:54:68:04:dc:f5:29:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 14:00:10 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=f785376beb8045bc17c9f6fb869b7cceaf9ce800a831587d51f30c74c4ea6458, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:44:fe:5d:23:11:fc:1c:0b:52:79:06:83:
                    61:ba:4c:a2:50:20:03:9f:63:e0:08:8e:cf:86:05:
                    4d:89:88:cd:b9:0c:08:93:d2:cb:95:8a:c1:fa:8f:
                    46:18:69:a2:18:8c:d0:af:3d:1f:36:00:25:f9:74:
                    0c:b3:2a:3d:3b:9b:61:50:dd:68:6d:37:08:ef:6e:
                    d6:b9:13:e8:7a:d0:4e:89:86:73:8b:4b:11:d8:c8:
                    ae:69:b1:7d:27:0c:52:36:da:67:79:10:53:87:8b:
                    87:f1:e2:2a:29:52:cd:4c:62:df:65:1b:9e:42:b2:
                    0f:7c:c3:57:33:52:ce:57:ca:22:95:d3:cc:5a:1f:
                    90:02:55:72:c2:02:f0:e6:e5:4c:aa:67:70:51:85:
                    b7:8a:86:3f:32:cf:d7:2e:72:bf:4b:4f:5e:d0:a0:
                    e4:72:a6:ff:7b:2f:1a:76:59:be:b3:05:ea:f3:12:
                    8e:fb:f0:31:f1:26:28:3d:46:dd:13:dc:dc:37:bc:
                    d7:a0:a4:91:7a:ea:a9:79:be:63:e8:2e:b9:26:d6:
                    3f:14:76:21:b9:61:6c:5e:62:1a:cb:1c:75:af:fc:
                    ff:c5:a5:73:8c:de:3c:54:cd:a3:41:5d:37:e1:46:
                    16:74:e5:be:2a:78:98:76:36:ac:f3:0e:bd:33:79:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1E:E3:7A:91:95:15:9A:CF:24:DC:9B:29:D5:46:7B:6D:3A:88:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e119ea80-fa47-4d32-b6fd-0a2780cb4f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b5a::/47

    Signature Algorithm: sha256WithRSAEncryption
         57:48:9b:24:f0:df:cf:05:d8:04:26:a9:2b:a1:28:10:1f:e8:
         a6:c4:a5:66:a4:e4:db:87:79:01:16:f8:09:e5:27:5c:bc:06:
         cd:6f:10:21:ca:db:57:4d:70:c3:0e:dd:2a:f5:b4:1f:72:f8:
         6c:b9:e7:fa:b1:cf:c9:df:93:c6:a6:79:44:00:cb:7e:bd:68:
         23:25:33:8e:3c:08:78:63:13:e9:5c:d0:e2:70:c4:81:4c:c2:
         2d:3d:35:d1:55:a4:ad:4f:49:05:80:e8:74:80:69:8b:7a:1d:
         5d:93:5b:f8:9d:93:36:8d:54:4e:74:c7:52:90:84:87:cd:44:
         75:4a:16:1e:5d:57:d3:a4:35:e3:a3:da:c4:96:37:2f:83:15:
         39:80:e9:2d:00:09:ea:c5:a6:cb:df:30:b5:dc:4b:bb:ab:25:
         3e:3d:c6:97:4d:f1:91:43:d9:c9:2c:78:5c:90:59:89:75:10:
         97:72:a8:4f:79:67:61:e6:2e:ad:ae:4b:22:b5:ba:0b:e7:9c:
         c3:1a:b6:29:97:5e:98:63:d2:b6:2a:87:4b:30:9d:d3:91:f5:
         ce:c8:57:20:00:93:5b:12:64:e7:48:89:1f:31:d3:37:d3:63:
         3f:52:13:90:b1:c0:c0:88:5e:cb:64:bb:f2:80:1b:92:95:7f:
         c7:9e:eb:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:31 2025 by rpki-client