This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5088e80-b3d7-496b-9c0e-662a03bcbd59.roa
File:                     e5088e80-b3d7-496b-9c0e-662a03bcbd59.roa (raw, json)
Hash identifier:          YbQyVyvT9PltZqN9ZN7Jp1hCJKugoXofHrD+fx+PezU=
Subject key identifier:   7F:13:29:B1:35:11:38:0C:7B:0B:7F:28:A2:8B:6C:53:46:E1:6E:F0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       21ACB9CFBDC7E5617E63F9E8EE265FFF7F8E9D14
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5088e80-b3d7-496b-9c0e-662a03bcbd59.roa
Signing time:             Tue 25 Nov 2025 08:32:04 +0000
ROA not before:           Tue 25 Nov 2025 08:32:04 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3848::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ac:b9:cf:bd:c7:e5:61:7e:63:f9:e8:ee:26:5f:ff:7f:8e:9d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:32:04 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=910a67d4e877765183ed3df4c3a0d9ad18a5d6eac6b2a2cfccb0225d6f56a0bc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:09:5a:57:4a:70:38:fb:c7:36:12:ff:fd:70:
                    1c:38:10:e9:a6:81:ca:bb:df:77:40:04:51:32:40:
                    bc:ae:91:7e:1d:ac:a4:64:90:01:d9:18:64:f6:b0:
                    c9:6a:3d:3b:3e:9d:de:6c:a2:74:b4:9d:6d:57:c9:
                    63:9f:1c:cb:c6:36:c4:09:1c:c1:6e:29:fe:f5:14:
                    d8:b6:74:72:0b:5d:93:1f:1a:74:71:1e:2f:8d:4c:
                    05:ff:fd:3f:82:67:d6:d4:d7:3f:8a:d5:c4:16:c7:
                    a5:23:ff:bc:5f:17:88:03:13:65:68:20:be:d6:df:
                    de:2b:21:7d:a3:ed:6d:70:07:3a:d2:83:77:a9:78:
                    45:17:10:bd:a5:8c:99:59:33:65:0e:b1:33:a8:dc:
                    9f:ec:21:23:2b:93:7e:f0:00:b1:86:26:8e:74:a9:
                    ad:48:c0:3b:34:a0:25:82:4a:91:27:b6:e6:34:90:
                    c0:5b:85:d5:0b:67:36:5b:98:f1:fb:0c:d2:c4:76:
                    cc:70:f6:69:06:b4:02:44:fa:e4:7a:84:f7:fd:03:
                    fc:e9:7c:5c:aa:80:b7:7e:6c:cf:7a:41:69:e9:1d:
                    92:bd:53:bf:90:e2:0f:48:3c:a7:6b:79:c1:88:3e:
                    8c:c0:86:13:09:0e:83:b6:c4:bb:5b:81:3a:fe:11:
                    fa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:13:29:B1:35:11:38:0C:7B:0B:7F:28:A2:8B:6C:53:46:E1:6E:F0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5088e80-b3d7-496b-9c0e-662a03bcbd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3848::/47

    Signature Algorithm: sha256WithRSAEncryption
         88:5d:63:5f:c9:a2:71:98:32:1d:46:86:21:cb:ba:1c:fc:4f:
         11:4f:e0:45:65:ac:0f:88:42:94:a0:d0:28:2f:98:9d:c4:77:
         1d:4c:47:21:26:e6:c1:b9:6b:cf:cf:a2:84:41:49:8d:44:63:
         e1:cf:1b:b4:67:81:b9:57:68:22:4c:21:ed:9d:3e:27:05:64:
         d9:ab:6b:76:bb:09:4d:58:4c:78:74:fd:88:0f:5f:f7:cb:a3:
         a7:12:9c:40:b5:43:94:81:5f:d3:6f:7d:4f:ae:c7:c2:85:91:
         c6:b6:cf:de:c2:a2:07:cf:a4:08:50:22:54:d4:bc:59:34:bc:
         be:66:7a:26:09:c4:4b:f2:51:f9:19:dc:e5:05:56:49:a1:6e:
         d8:cb:79:d7:1a:93:4a:c1:0a:3b:e8:43:b4:c2:14:53:e1:80:
         f8:bc:28:ff:23:ba:f1:b8:03:31:18:56:b2:dc:b7:71:6b:87:
         2e:49:a8:83:ec:5a:dd:b6:c5:df:48:e0:85:db:92:b8:70:12:
         71:7a:43:b3:9b:87:ad:73:5f:42:cc:de:9d:82:69:c1:e7:9c:
         a4:8b:72:0f:47:45:e9:e2:41:ef:db:95:c4:64:6a:a7:42:e8:
         e7:f8:19:65:25:f1:cf:71:6c:21:4e:6a:df:4a:b7:74:0e:44:
         20:c9:bb:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:31 2025 by rpki-client