This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e491d13b-b80f-40a8-a4d1-404686221f5c.roa
File:                     e491d13b-b80f-40a8-a4d1-404686221f5c.roa (raw, json)
Hash identifier:          QoHKfydTqPJDprYwrTR30xz6tY3WeG1NscIwoVX+q3o=
Subject key identifier:   16:74:B3:DE:88:95:98:BB:5F:E3:0A:A3:A0:5E:33:2A:52:48:CB:22
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15525181B5CE8CFFD70FE049764F9014AAE0ED
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e491d13b-b80f-40a8-a4d1-404686221f5c.roa
Signing time:             Mon 24 Nov 2025 05:32:20 +0000
ROA not before:           Mon 24 Nov 2025 05:32:20 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a0c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:52:51:81:b5:ce:8c:ff:d7:0f:e0:49:76:4f:90:14:aa:e0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:32:20 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=a3e6429a7b38745e3131c7e6ec5886a3e5215b45869be8f3802e76a12e359089, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:f4:64:19:8e:76:2c:2b:03:02:71:66:2b:
                    dc:0f:cc:45:20:7d:43:e0:ca:68:98:00:28:ac:89:
                    6f:1d:ce:26:51:3c:2b:59:a1:79:2b:32:d6:0c:b7:
                    05:8c:14:95:d9:8a:4f:0b:87:3a:66:cb:67:15:01:
                    86:b6:22:05:b0:b1:1e:76:25:96:e6:ec:2f:44:34:
                    33:8c:5a:8e:17:93:37:d9:b7:45:22:e3:dc:b9:21:
                    89:97:b1:07:c1:66:97:02:58:42:78:7f:a3:a1:df:
                    8e:42:d1:85:31:f3:bd:5c:b3:3f:06:85:bc:b2:49:
                    6b:21:82:44:33:fd:ba:e9:de:85:38:17:09:2e:a8:
                    f3:e7:f2:d6:63:7d:a5:5f:d6:d2:80:a3:71:f3:fd:
                    de:11:a0:c8:b5:a8:d6:46:e7:48:d1:72:49:ba:c6:
                    6a:32:a1:eb:3b:3f:a8:aa:0b:64:eb:ae:c1:69:c2:
                    0c:59:2b:9f:51:35:f3:4d:a0:1b:d9:c5:ed:be:02:
                    5a:37:e9:84:c4:f5:36:72:22:a7:b8:bc:90:94:95:
                    87:41:ce:78:6a:19:66:94:60:70:c2:2f:3b:7a:7f:
                    ca:f7:ad:ef:fe:a5:df:bd:19:ac:0b:8d:4d:6a:a9:
                    cd:98:4a:87:74:48:e6:6c:48:bb:b8:70:4a:a1:31:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:74:B3:DE:88:95:98:BB:5F:E3:0A:A3:A0:5E:33:2A:52:48:CB:22
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e491d13b-b80f-40a8-a4d1-404686221f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a0c::/47

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:e6:61:0c:3e:0e:50:48:a2:91:df:7f:4b:30:f1:71:81:
         14:5d:bc:e3:5f:36:bf:59:5f:c1:78:9f:3b:f2:63:a9:d4:a8:
         48:de:b6:ae:cc:e1:45:21:ea:3e:d5:b7:4e:4a:4b:ff:1d:77:
         20:29:44:26:7e:c9:da:69:64:b5:e7:d5:fe:3d:c7:6e:4b:ef:
         c5:bc:f5:8d:e4:4f:3f:dc:0c:9f:30:90:d2:9f:f7:b1:17:49:
         e9:40:1f:57:64:f0:3c:c4:1f:88:dd:60:0c:9d:72:dd:fe:34:
         36:fd:be:e3:a2:a9:0d:a7:17:c2:6b:ea:c3:6b:23:5d:96:49:
         10:da:a2:61:1c:da:1b:67:dd:dd:2c:45:f0:e6:58:3b:1e:54:
         29:51:91:70:07:bd:aa:34:8e:64:a8:d1:ad:7c:ae:fc:ac:92:
         d2:9b:30:49:db:e3:64:e4:a1:7b:36:4e:77:7e:13:bc:31:da:
         1b:61:f7:5d:4d:f5:e3:14:a8:fa:34:2c:b1:49:ba:26:c3:f5:
         3a:90:91:cd:3a:3d:c7:3f:70:90:43:98:0e:2f:1b:5c:4e:47:
         7b:66:2c:df:3d:cb:e2:21:bc:18:f9:5b:a8:1b:8a:44:7a:bb:
         78:fe:91:b3:55:a2:0c:9c:04:a3:14:89:ac:e8:76:f2:b1:81:
         ae:86:65:90
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITFVJRgbXOjP/XD+BJdk+QFKrg7TANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTExMjQwNTMyMjBaFw0yNjAyMjIyMzU5NTla
MHoxSTBHBgNVBAUTQGEzZTY0MjlhN2IzODc0NWUzMTMxYzdlNmVjNTg4NmEzZTUy
MTViNDU4NjliZThmMzgwMmU3NmExMmUzNTkwODkxLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXS9GQZjnYsKwMCcWYr3A/MRSB9Q+DKaJgAKKyJbx3OJlE8
K1mheSsy1gy3BYwUldmKTwuHOmbLZxUBhrYiBbCxHnYllubsL0Q0M4xajheTN9m3
RSLj3LkhiZexB8FmlwJYQnh/o6HfjkLRhTHzvVyzPwaFvLJJayGCRDP9uunehTgX
CS6o8+fy1mN9pV/W0oCjcfP93hGgyLWo1kbnSNFySbrGajKh6zs/qKoLZOuuwWnC
DFkrn1E1802gG9nF7b4CWjfphMT1NnIip7i8kJSVh0HOeGoZZpRgcMIvO3p/yvet
7/6l370ZrAuNTWqpzZhKh3RI5mxIu7hwSqEx7HsCAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBQWdLPeiJWYu1/jCqOgXjMqUkjLIjAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvZTQ5MWQxM2ItYjgwZi00MGE4LWE0ZDEtNDA0Njg2MjIxZjVjLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHASYAkAAaDDANBgkqhkiG9w0BAQsFAAOCAQEAiPHmYQw+DlBIopHff0sw8XGB
FF284182v1lfwXifO/JjqdSoSN62rszhRSHqPtW3TkpL/x13IClEJn7J2mlktefV
/j3Hbkvvxbz1jeRPP9wMnzCQ0p/3sRdJ6UAfV2TwPMQfiN1gDJ1y3f40Nv2+46Kp
DacXwmvqw2sjXZZJENqiYRzaG2fd3SxF8OZYOx5UKVGRcAe9qjSOZKjRrXyu/KyS
0pswSdvjZOShezZOd34TvDHaG2H3XU314xSo+jQssUm6JsP1OpCRzTo9xz9wkEOY
Di8bXE5He2Ys3z3L4iG8GPlbqBuKRHq7eP6Rs1WiDJwEoxSJrOh28rGBroZlkA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:41:13 2025 by rpki-client