This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3e63f05-83d7-421c-a1c0-06814db20a9d.roa
File:                     e3e63f05-83d7-421c-a1c0-06814db20a9d.roa (raw, json)
Hash identifier:          bTY3xty+XPgiU0hmU3Ebilsnd/5IND1EObnfqEaMhds=
Subject key identifier:   39:15:35:B8:E8:F8:AE:98:DC:CE:0A:2C:49:7B:3C:06:07:2C:C4:EE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6FC334438DBE256246833D8A3810C9955B57D0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3e63f05-83d7-421c-a1c0-06814db20a9d.roa
Signing time:             Tue 25 Nov 2025 11:10:11 +0000
ROA not before:           Tue 25 Nov 2025 11:10:11 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c44::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c3:34:43:8d:be:25:62:46:83:3d:8a:38:10:c9:95:5b:57:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 11:10:11 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=44b3ad7bac9c00fa775a3c33304bb6fd4f67e7cc2a3c0784fafc19d64d2db743, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:fe:5e:39:3f:f2:26:8d:13:10:d5:b9:a9:
                    6e:7a:39:93:4a:0b:6c:04:89:22:b1:86:7f:35:9a:
                    47:17:b3:a1:ef:8f:e9:e6:32:c7:3d:ae:71:3e:d2:
                    bd:6b:a1:fe:88:8a:de:51:6d:d4:12:4f:bf:9f:71:
                    a0:1e:66:43:52:44:51:41:0f:f4:19:77:e4:bc:dd:
                    5e:04:31:a2:a7:d4:eb:28:35:12:20:10:19:5b:26:
                    9c:16:66:8d:ee:81:02:58:a3:44:ca:ca:35:d1:d9:
                    62:42:1b:73:12:40:68:d3:14:3e:2a:34:3b:f3:80:
                    a5:2e:b7:96:92:b5:04:b7:5b:da:6b:73:a7:d3:59:
                    6e:43:52:0d:13:74:4f:cc:e8:7e:38:32:31:51:65:
                    db:7f:93:7e:10:ad:c5:5d:ca:63:f9:7b:c8:f9:18:
                    af:a3:a4:62:e3:5c:05:e5:6e:8c:85:d8:b2:0e:47:
                    b8:eb:f6:65:da:fa:81:6e:01:55:f4:6e:5d:36:c8:
                    ce:2a:c9:0f:7f:d1:7f:2b:19:7d:29:cc:8f:6d:56:
                    44:7a:f0:71:1f:e4:74:ff:00:2b:73:53:88:36:3d:
                    72:c8:9e:8f:a3:f0:03:fe:df:dc:5b:1b:cb:27:35:
                    be:c4:76:93:e9:ac:42:62:83:94:e1:1b:67:8a:52:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:15:35:B8:E8:F8:AE:98:DC:CE:0A:2C:49:7B:3C:06:07:2C:C4:EE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3e63f05-83d7-421c-a1c0-06814db20a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c44::/46

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:51:3e:ba:51:04:e9:f2:04:8b:ab:3e:37:23:09:4d:d5:
         45:c5:c5:1e:4c:ba:03:4e:1d:3f:8d:b9:e3:6e:f1:e3:77:b1:
         9a:88:65:52:b4:93:29:ba:84:db:0a:34:07:a9:dc:b1:d2:ae:
         f6:bd:94:6a:c1:cd:93:0f:f3:16:81:18:de:b6:f8:11:5b:d9:
         d9:50:8c:2c:ed:d6:a6:44:b5:22:c0:52:5b:f8:e5:82:52:f1:
         d1:18:e4:e2:5e:9e:3a:68:5d:96:d6:5d:02:a9:64:7c:d0:f7:
         0a:a2:5f:81:21:d4:ba:14:66:75:70:2c:6a:a7:e1:ea:5a:6e:
         57:9d:32:f5:5b:53:f7:c3:4e:9a:4a:96:54:c6:82:3b:97:e5:
         0b:76:c3:c3:e6:31:79:75:29:4b:f6:50:18:8b:ad:96:7f:7b:
         be:a3:e4:03:6a:8f:99:2d:76:6c:dc:05:3f:18:12:89:72:2c:
         65:b6:1c:57:fa:a0:87:33:67:bc:5b:79:1a:7e:72:59:13:9d:
         44:47:e6:d1:c8:25:27:2b:c7:6e:31:af:06:8c:7c:8a:a2:9f:
         79:ce:6a:d1:90:17:26:d0:7b:65:df:9b:4d:bd:38:ef:98:00:
         74:8f:39:13:d1:f7:99:b0:7c:17:50:6d:d7:23:aa:1b:a8:70:
         96:20:65:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:07:28 2025 by rpki-client