This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e9cc1e6d-4104-496c-84ba-29db993207db.roa
File:                     e9cc1e6d-4104-496c-84ba-29db993207db.roa (raw, json)
Hash identifier:          2eAWNSCcYRPlGKRDuTMdyeudKltj9hj0zWXbqHj3Swc=
Subject key identifier:   46:EE:BB:D0:94:C9:90:FA:E4:BC:3A:84:9C:8C:33:8E:D7:4D:1F:7C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4F0B7BA580BC55E4D1727D35AE03527F4BE44498
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e9cc1e6d-4104-496c-84ba-29db993207db.roa
Signing time:             Tue 25 Nov 2025 13:42:13 +0000
ROA not before:           Tue 25 Nov 2025 13:42:13 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39aa::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0b:7b:a5:80:bc:55:e4:d1:72:7d:35:ae:03:52:7f:4b:e4:44:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 13:42:13 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=22c93749d23127bfd6a14a98ecf121db9cebd22c87f092abc74494a755111f8a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:aa:1b:d2:f5:23:da:1e:6a:69:99:28:8a:
                    4c:33:52:92:f6:32:d7:1f:fd:68:fc:6a:59:f3:3e:
                    2d:4d:d8:78:ee:44:f9:fe:5e:4c:62:02:1d:b4:8d:
                    65:72:55:10:ba:81:b0:03:48:fe:cf:29:fd:d9:fe:
                    ed:00:2d:60:9e:89:cb:7b:7e:c1:46:e3:a6:d1:d6:
                    72:d6:dd:4a:54:22:29:25:30:16:1d:1e:b2:63:80:
                    80:83:ed:e6:89:de:42:08:0d:ec:6f:78:21:c1:d1:
                    81:4f:26:56:75:cb:64:a0:22:36:96:a4:16:32:01:
                    e7:ca:4e:2b:f3:4a:e0:88:15:f4:d2:ae:07:1c:0b:
                    ea:13:d6:d9:3c:8e:23:0a:9e:b1:56:cf:75:36:8d:
                    ea:93:6f:8a:86:c1:d3:b3:1a:e0:a4:b3:d3:64:22:
                    45:a5:2b:eb:e9:de:e8:0e:c5:74:b1:9a:9c:71:b5:
                    a8:66:b6:b4:99:39:72:f4:41:9f:7f:73:5d:95:f1:
                    99:30:78:0a:73:fc:26:62:ef:04:ca:61:d6:4a:63:
                    e4:bc:e7:85:28:ba:0a:d2:61:81:09:02:e8:36:45:
                    b4:b9:f3:54:60:63:1c:bf:41:4c:2c:eb:fc:12:47:
                    95:f1:04:83:72:32:7d:5c:10:c3:d4:b2:12:5d:1b:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EE:BB:D0:94:C9:90:FA:E4:BC:3A:84:9C:8C:33:8E:D7:4D:1F:7C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e9cc1e6d-4104-496c-84ba-29db993207db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39aa::/47

    Signature Algorithm: sha256WithRSAEncryption
         63:c5:24:3a:a3:dc:d1:39:e5:cf:a8:f7:3f:cf:72:9c:ab:12:
         a7:bc:66:f2:fa:0d:9d:b5:04:95:c5:74:9b:26:71:54:db:08:
         94:24:51:13:7f:d5:e1:07:de:e7:81:5c:91:1e:64:d7:25:c2:
         37:fc:3a:12:8e:52:a3:c1:94:21:c0:68:e2:27:43:22:6f:e6:
         e9:ec:dd:5c:7b:3c:fb:06:c7:02:b5:3a:aa:e3:61:32:c0:ad:
         92:e3:c7:88:17:01:15:3f:f7:3a:86:ce:44:96:b8:b0:29:3e:
         a0:67:42:90:ca:67:4c:c5:0e:93:5e:49:85:d6:2f:c9:6c:39:
         8d:1e:cf:dc:1f:18:15:5f:da:ef:f4:1b:fd:4e:ef:99:80:03:
         55:e0:04:d4:71:b8:4a:72:42:f4:3b:68:6b:c3:21:b2:24:66:
         00:f1:79:10:44:db:83:2e:f5:4b:cd:2b:13:23:e8:9c:cb:64:
         92:bc:e5:62:aa:b5:e2:0d:d0:19:07:27:41:38:c1:f7:34:08:
         49:99:6f:7e:30:0d:ca:fb:52:e8:31:23:be:8b:e8:3a:27:f4:
         90:c4:e9:24:2d:a3:96:25:5d:06:7d:4e:3f:e2:e4:ca:24:bb:
         62:fe:fc:1b:f9:9b:64:28:a7:93:ec:86:49:92:15:2f:87:a6:
         04:c8:ca:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:38:35 2025 by rpki-client