This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5f1f7ab-2257-4bc6-8f47-4f97b433b7dc.roa
File:                     e5f1f7ab-2257-4bc6-8f47-4f97b433b7dc.roa (raw, json)
Hash identifier:          0a3GWbgsyAnyzDsmPErFIhRFsXnpPBB2bRp5ImxL2Hs=
Subject key identifier:   5C:0A:BF:56:E1:36:C4:2F:26:7E:05:7C:07:78:3E:B7:5F:05:A2:64
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       33C5BE6FAC8F538C176F8F1B1A398FA65B8D6E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5f1f7ab-2257-4bc6-8f47-4f97b433b7dc.roa
Signing time:             Tue 25 Nov 2025 04:11:56 +0000
ROA not before:           Tue 25 Nov 2025 04:11:56 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3440::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c5:be:6f:ac:8f:53:8c:17:6f:8f:1b:1a:39:8f:a6:5b:8d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:11:56 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=3be206cc9e72aaada88210f1e2aa3add70ff9f7b8d3da590c1354fcc2de0941b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:b5:55:de:c4:24:13:95:49:32:f2:ba:b2:
                    1e:22:64:2a:f8:ec:9a:f6:fa:9e:8f:b8:40:0e:19:
                    62:54:40:db:10:ee:5b:e6:5d:55:96:b9:b7:fc:67:
                    98:71:96:7b:f8:4b:41:f9:4b:5e:38:0e:cb:69:54:
                    26:ed:6b:d4:70:cd:5f:52:1a:96:84:10:ee:e5:6d:
                    71:9c:d0:99:6e:37:93:b5:13:ce:94:46:e3:0e:e1:
                    ef:e3:1e:2d:dc:62:cc:84:52:2f:3f:27:9d:8c:42:
                    85:06:46:9c:b8:92:63:c2:ac:40:21:18:55:e0:84:
                    ca:31:58:ea:7e:7e:46:12:a0:eb:1e:68:61:99:4e:
                    fd:ec:23:23:40:dd:e8:1f:2e:b7:c5:9b:84:a1:90:
                    1c:0e:75:36:db:a9:b5:8a:4e:26:e2:3c:0e:56:7d:
                    cd:1b:77:42:65:f9:d2:de:7b:d4:d4:eb:d9:9f:66:
                    27:31:81:e0:26:b0:d8:1c:c5:ff:44:f9:fb:e2:ec:
                    1b:b2:3a:ad:bf:df:5a:0c:93:99:f3:1b:78:64:c7:
                    8b:9c:c3:c5:85:45:4c:7e:38:e7:96:5d:99:c8:0f:
                    d2:73:3a:96:05:d2:b5:98:44:28:87:ea:b6:62:ff:
                    39:e5:43:e0:e2:41:ee:f3:f0:f6:99:e9:43:d0:3f:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0A:BF:56:E1:36:C4:2F:26:7E:05:7C:07:78:3E:B7:5F:05:A2:64
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5f1f7ab-2257-4bc6-8f47-4f97b433b7dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3440::/42

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:40:e9:26:e4:90:1a:96:30:0f:84:58:86:84:52:de:fb:
         7b:00:25:a1:eb:76:10:6c:03:72:e1:2e:7a:48:d0:a3:2c:5e:
         34:1b:24:10:db:b3:66:9f:f6:a5:18:f4:27:ec:99:ee:e0:20:
         e5:b3:a2:0f:56:4c:54:18:22:f2:03:8d:1b:1d:5c:0c:a2:ba:
         d0:3c:ed:b4:3c:93:7b:63:a7:6f:71:11:8f:8c:e3:6a:bf:72:
         3c:60:fc:6c:72:fb:73:21:a6:66:c6:31:e4:80:25:a5:5d:2a:
         52:46:cf:25:e8:0a:ba:0d:33:24:08:51:e6:55:3b:82:bd:2d:
         c2:5a:31:f5:6e:2b:28:9c:bb:e7:3f:9b:27:6d:e9:96:d7:d9:
         a7:d4:d0:ca:91:95:81:82:c5:4f:99:be:d0:d0:d3:ac:19:bd:
         db:89:e9:e8:e3:e7:46:70:7f:89:8c:8f:9f:1e:b6:32:5f:72:
         ba:fe:d8:6b:73:82:09:bd:1a:e9:48:df:cf:1f:ff:fa:b2:4b:
         cc:e4:58:a7:57:46:80:e2:35:f2:94:33:03:59:4c:8d:3c:ae:
         b0:6b:56:ed:14:50:b2:dc:f3:42:42:86:22:84:26:01:d7:48:
         6f:d1:79:9b:b0:ab:b5:aa:c3:f2:0b:68:c0:d6:77:07:22:43:
         6b:9d:bb:af
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITM8W+b6yPU4wXb48bGjmPpluNbjANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTExMjUwNDExNTZaFw0yNjAyMjMyMzU5NTla
MHoxSTBHBgNVBAUTQDNiZTIwNmNjOWU3MmFhYWRhODgyMTBmMWUyYWEzYWRkNzBm
ZjlmN2I4ZDNkYTU5MGMxMzU0ZmNjMmRlMDk0MWIxLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8/tVXexCQTlUky8rqyHiJkKvjsmvb6no+4QA4ZYlRA2xDu
W+ZdVZa5t/xnmHGWe/hLQflLXjgOy2lUJu1r1HDNX1IaloQQ7uVtcZzQmW43k7UT
zpRG4w7h7+MeLdxizIRSLz8nnYxChQZGnLiSY8KsQCEYVeCEyjFY6n5+RhKg6x5o
YZlO/ewjI0Dd6B8ut8WbhKGQHA51NtuptYpOJuI8DlZ9zRt3QmX50t571NTr2Z9m
JzGB4Caw2BzF/0T5++LsG7I6rb/fWgyTmfMbeGTHi5zDxYVFTH4455ZdmcgP0nM6
lgXStZhEKIfqtmL/OeVD4OJB7vPw9pnpQ9A/q3UCAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBRcCr9W4TbELyZ+BXwHeD63XwWiZDAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvZTVmMWY3YWItMjI1Ny00YmM2LThmNDctNGY5N2I0MzNiN2RjLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBiYAkAA0QDANBgkqhkiG9w0BAQsFAAOCAQEATP1A6SbkkBqWMA+EWIaEUt77
ewAloet2EGwDcuEuekjQoyxeNBskENuzZp/2pRj0J+yZ7uAg5bOiD1ZMVBgi8gON
Gx1cDKK60DzttDyTe2Onb3ERj4zjar9yPGD8bHL7cyGmZsYx5IAlpV0qUkbPJegK
ug0zJAhR5lU7gr0twlox9W4rKJy75z+bJ23pltfZp9TQypGVgYLFT5m+0NDTrBm9
24np6OPnRnB/iYyPnx62Ml9yuv7Ya3OCCb0a6Ujfzx//+rJLzORYp1dGgOI18pQz
A1lMjTyusGtW7RRQstzzQkKGIoQmAddIb9F5m7CrtarD8gtowNZ3ByJDa527rw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:56 2025 by rpki-client