This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e79bf893-add2-450f-becc-cb2160c915db.roa
File:                     e79bf893-add2-450f-becc-cb2160c915db.roa (raw, json)
Hash identifier:          PJJBUpQs7vh6dBcbyput8JxXrFEXzU/AbxqBfO4gA0I=
Subject key identifier:   BF:05:CD:CF:D4:F6:43:CA:F3:DE:A2:07:D4:3E:18:14:C9:A5:4A:78
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4FDDE7AAFCC5955FA0F05812E4BC5D55DDCD4D8E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e79bf893-add2-450f-becc-cb2160c915db.roa
Signing time:             Mon 24 Nov 2025 03:21:35 +0000
ROA not before:           Mon 24 Nov 2025 03:21:35 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:19ea::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dd:e7:aa:fc:c5:95:5f:a0:f0:58:12:e4:bc:5d:55:dd:cd:4d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 03:21:35 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=9d2170188c22429afe6c976204f11387bdd29b883e6ac9d6cb9569a1be00d773, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:50:a0:bb:7f:37:09:ea:e7:66:1d:8f:b8:
                    2a:2b:07:ca:3d:6e:07:72:03:07:cc:b7:44:f2:cd:
                    41:4f:3c:50:d3:44:be:d4:0b:2c:6f:9c:35:37:30:
                    a2:40:39:ae:64:19:ce:50:22:86:a2:4a:66:29:5d:
                    5c:86:f4:f9:35:b9:bb:61:54:c3:c9:28:81:cf:ac:
                    5e:98:91:6b:15:0b:c6:18:b5:f9:d9:2d:4a:18:ae:
                    64:d9:39:02:3e:11:5a:c4:5b:b6:6e:d4:2f:10:a4:
                    37:a7:70:40:ac:34:8c:2d:c3:f3:63:c2:36:e6:bb:
                    f7:c7:67:c9:a7:b3:16:c7:68:fb:d8:9b:41:4e:ad:
                    5e:49:f0:ad:c0:30:f5:97:98:a5:7c:83:55:50:57:
                    3f:34:49:1a:4a:ee:9c:aa:a4:25:02:8a:b4:bf:81:
                    a6:94:64:10:5b:c7:aa:6f:7d:ee:79:99:65:67:1a:
                    bf:39:86:2e:0f:83:c4:a9:66:41:f9:99:93:19:0b:
                    a5:8a:92:83:43:52:68:07:04:45:ad:be:7d:af:2c:
                    29:2e:72:a4:ce:e5:3e:9b:e3:c8:df:e6:61:6a:2e:
                    35:d6:69:3d:dd:12:9a:89:b8:f1:ad:bc:09:25:9a:
                    05:bc:c5:e3:36:48:a9:9d:01:9e:5d:b9:68:92:dc:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:05:CD:CF:D4:F6:43:CA:F3:DE:A2:07:D4:3E:18:14:C9:A5:4A:78
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e79bf893-add2-450f-becc-cb2160c915db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:19ea::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:e2:33:00:0b:b6:b7:97:bc:35:3c:00:5a:d9:1b:c8:4c:fc:
         42:13:d0:ea:13:08:ff:86:40:0f:92:a0:09:2d:c4:3b:2f:20:
         aa:04:93:11:af:2a:38:6a:0b:0e:be:64:2c:71:15:3d:46:bc:
         f4:06:f4:f1:27:5a:39:a2:77:69:44:e1:ba:4f:e4:7a:fb:75:
         49:09:d1:bf:f0:f7:7c:90:35:c1:72:97:52:8a:cf:20:de:9d:
         98:74:75:32:88:fb:6c:a9:f9:a0:84:f9:d8:24:4b:7c:91:a4:
         07:3f:39:db:5e:f7:ff:87:d6:b7:69:88:2b:f2:4d:d8:9a:70:
         32:97:69:ba:8d:7f:5e:12:df:b6:b0:4e:4c:00:df:17:d3:fc:
         a4:f5:46:cc:ce:4f:b1:e0:6d:b8:91:60:e9:2a:0e:29:ee:02:
         c9:1d:5f:a4:01:f2:00:30:bb:fe:0b:0e:ba:1d:28:7e:17:35:
         51:37:be:43:5b:18:84:27:11:c5:03:89:dd:fe:9f:f0:15:fe:
         94:6c:59:d2:06:ca:c0:cf:54:3d:bd:a5:03:2d:b5:a0:d9:40:
         50:83:c0:c3:ff:e3:9c:50:be:a2:f7:5a:47:9a:50:6f:3e:e9:
         76:24:41:95:c5:c9:13:2f:14:b1:db:e0:9b:f6:3d:09:b2:19:
         78:d7:76:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:31 2025 by rpki-client