This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e88f8d60-e771-4b33-a004-0a1824cb6c59.roa
File:                     e88f8d60-e771-4b33-a004-0a1824cb6c59.roa (raw, json)
Hash identifier:          dJwOPyJGJE5N4W3clmLNvnEP7PFZa2HkVo40rUvy/sw=
Subject key identifier:   DB:98:F4:74:32:83:37:AC:35:CA:7C:A2:E3:62:81:CB:E1:7D:7A:55
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A763A7B47893E75574B3FEBD8C848CE8AB4175E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e88f8d60-e771-4b33-a004-0a1824cb6c59.roa
Signing time:             Tue 25 Nov 2025 01:32:02 +0000
ROA not before:           Tue 25 Nov 2025 01:32:02 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c44::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:76:3a:7b:47:89:3e:75:57:4b:3f:eb:d8:c8:48:ce:8a:b4:17:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 01:32:02 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=f29c7ba13e792d5eae097d02570d745b56ff786ffd3b981bd543615d6d3614bc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:23:d6:fd:55:94:b9:cb:65:ee:a6:a2:99:81:
                    57:b6:3e:c5:e1:25:19:b9:9d:ce:dd:51:ff:bb:d0:
                    c5:49:e0:d0:15:d1:a0:d4:96:de:b6:b3:05:e0:d2:
                    82:da:f8:1b:52:09:e7:db:25:ac:f2:99:88:70:0f:
                    0d:f2:93:93:66:fb:29:e0:53:b0:40:08:e1:cc:9d:
                    30:c3:f2:1f:12:a5:4a:11:e7:62:d6:c3:a2:ce:96:
                    9b:51:54:22:37:f8:f7:90:ba:91:8d:d1:5f:db:e2:
                    34:63:88:5f:97:40:de:27:d4:79:7f:b7:ae:6d:68:
                    16:4c:98:da:a4:de:ca:24:5a:4b:43:73:20:12:51:
                    7d:bb:78:98:ac:24:27:ea:00:57:f5:a8:fc:2a:63:
                    05:a8:25:f2:6f:05:e0:24:cd:82:2e:fc:1b:40:3c:
                    b0:a6:41:9a:12:dc:fd:a8:1e:95:b5:7e:04:44:36:
                    8a:dc:23:33:05:ad:ac:82:8b:38:13:a8:4b:f9:f1:
                    6d:5b:e4:eb:7f:61:2c:80:2d:67:91:89:76:51:2a:
                    11:42:37:68:30:b9:95:09:84:ee:0e:5a:25:3e:84:
                    29:64:11:b7:fd:0c:53:e3:67:e5:62:ec:0b:3c:5f:
                    13:b4:41:de:98:0a:05:e0:01:a5:63:c4:0a:87:3d:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:98:F4:74:32:83:37:AC:35:CA:7C:A2:E3:62:81:CB:E1:7D:7A:55
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e88f8d60-e771-4b33-a004-0a1824cb6c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c44::/46

    Signature Algorithm: sha256WithRSAEncryption
         a0:2e:1d:00:a3:97:1f:f3:96:44:a8:cf:21:89:2e:2b:40:9d:
         43:53:3f:6c:77:c6:f6:26:fc:6a:8d:c8:bc:d4:a4:d6:df:c5:
         a0:1a:56:ed:73:1a:90:df:a6:15:dd:73:70:f2:6b:48:2f:24:
         e8:d1:cb:1d:4c:5b:47:69:ad:f5:cf:81:cf:38:9a:17:e8:df:
         8d:b5:77:b7:13:d3:f4:dd:d1:d6:24:14:3f:a5:4b:19:00:10:
         da:50:10:c2:54:5d:3a:b4:b4:e8:50:d7:94:7d:23:09:e4:0b:
         57:ae:db:d4:cf:ff:74:4b:9a:18:cf:7a:10:8e:7b:35:cc:ee:
         0c:73:b9:99:8d:4d:e5:99:ee:bc:09:b0:27:72:12:9c:a9:a7:
         be:13:2f:91:c0:b4:0d:f2:0d:88:e4:8f:19:5e:8a:64:ef:64:
         b4:87:69:d9:f0:38:c8:d1:2a:1c:ca:b8:3d:3d:8a:7a:1c:55:
         ef:48:49:98:74:10:1f:ae:80:f0:a0:c2:80:56:19:2e:ef:f5:
         7d:94:c2:9b:4c:33:6a:df:1c:f7:a6:81:4f:55:95:6a:27:9f:
         63:bd:88:7a:7a:e6:38:81:19:e0:59:4d:58:4a:b3:d2:47:47:
         eb:17:d1:24:dd:df:bf:44:5b:b8:23:1b:35:a5:bd:ad:e0:8c:
         25:02:56:a4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSnY6e0eJPnVXSz/r2MhIzoq0F14wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDEzMjAyWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmMjljN2JhMTNlNzkyZDVlYWUwOTdkMDI1NzBkNzQ1YjU2
ZmY3ODZmZmQzYjk4MWJkNTQzNjE1ZDZkMzYxNGJjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUI9b9VZS5y2XupqKZgVe2PsXhJRm5nc7dUf+70MVJ4NAV
0aDUlt62swXg0oLa+BtSCefbJazymYhwDw3yk5Nm+yngU7BACOHMnTDD8h8SpUoR
52LWw6LOlptRVCI3+PeQupGN0V/b4jRjiF+XQN4n1Hl/t65taBZMmNqk3sokWktD
cyASUX27eJisJCfqAFf1qPwqYwWoJfJvBeAkzYIu/BtAPLCmQZoS3P2oHpW1fgRE
NorcIzMFrayCizgTqEv58W1b5Ot/YSyALWeRiXZRKhFCN2gwuZUJhO4OWiU+hClk
Ebf9DFPjZ+Vi7As8XxO0Qd6YCgXgAaVjxAqHPXVhAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU25j0dDKDN6w1ynyi42KBy+F9elUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2U4OGY4ZDYwLWU3NzEtNGIzMy1hMDA0LTBhMTgyNGNiNmM1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALEQwDQYJKoZIhvcNAQELBQADggEBAKAuHQCjlx/zlkSozyGJLitA
nUNTP2x3xvYm/GqNyLzUpNbfxaAaVu1zGpDfphXdc3Dya0gvJOjRyx1MW0dprfXP
gc84mhfo3421d7cT0/Td0dYkFD+lSxkAENpQEMJUXTq0tOhQ15R9IwnkC1eu29TP
/3RLmhjPehCOezXM7gxzuZmNTeWZ7rwJsCdyEpypp74TL5HAtA3yDYjkjxleimTv
ZLSHadnwOMjRKhzKuD09inocVe9ISZh0EB+ugPCgwoBWGS7v9X2UwptMM2rfHPem
gU9VlWonn2O9iHp65jiBGeBZTVhKs9JHR+sX0STd379EW7gjGzWlva3gjCUCVqQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:31:11 2025 by rpki-client