This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e9da0ba2-7efa-47b5-9d24-964226ab6f88.roa
File:                     e9da0ba2-7efa-47b5-9d24-964226ab6f88.roa (raw, json)
Hash identifier:          8CNJETdS6j047Kbp0OgbwowLcnGtmxNIMrs4oyNouBE=
Subject key identifier:   5F:02:45:51:0A:D0:02:3E:CD:2B:76:08:29:4C:2E:DF:8B:FB:96:A6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       63B099A61EF0D36674CE4CE7C59D63DE59B43C3F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e9da0ba2-7efa-47b5-9d24-964226ab6f88.roa
Signing time:             Mon 24 Nov 2025 00:52:19 +0000
ROA not before:           Mon 24 Nov 2025 00:52:19 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:19d2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b0:99:a6:1e:f0:d3:66:74:ce:4c:e7:c5:9d:63:de:59:b4:3c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 00:52:19 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=6c25126f747d5d828e879c56272f4d05c398eceb1abc9b387bfea6cbad84230e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:0b:a4:0f:03:4d:b8:04:d9:34:6a:22:52:
                    39:e8:00:cb:78:35:59:7d:66:71:8a:67:9f:46:ab:
                    97:2d:d8:5d:49:3a:58:68:8e:89:37:ca:3d:96:c8:
                    46:c9:fd:6a:7e:37:fc:32:5a:32:2e:5e:0f:3d:49:
                    22:23:c0:ec:85:ff:25:10:97:06:b2:f7:5a:c3:c2:
                    f5:ca:df:1c:8f:c9:9a:4d:6b:4a:a1:86:bb:fc:07:
                    08:0c:a9:e3:9e:f6:e1:d3:1b:52:82:82:f4:35:bc:
                    46:1f:0b:07:35:d6:cd:24:2a:84:4e:e2:a2:34:49:
                    af:7c:e6:4d:b2:fa:13:92:cb:49:32:13:fd:4a:16:
                    8c:07:99:e0:a3:5a:93:fd:73:85:a3:33:c5:4e:2a:
                    a9:8b:d2:4a:e0:a2:3c:7f:62:ee:67:6e:b6:c2:23:
                    66:10:94:e5:a2:1b:70:4c:93:7c:d8:94:f2:4b:6a:
                    0d:bf:b7:dd:59:62:58:93:6f:6c:8a:4d:e4:6d:1f:
                    5c:17:4e:44:e0:1d:14:08:dc:73:ec:c8:fd:9f:19:
                    d8:aa:c7:c3:9a:5c:b4:28:e1:0c:01:06:80:52:45:
                    10:70:cd:8f:47:56:81:8c:67:61:4b:67:7c:6f:3d:
                    43:88:2a:74:cb:53:b7:c5:34:cf:47:8e:65:2a:e9:
                    8a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:02:45:51:0A:D0:02:3E:CD:2B:76:08:29:4C:2E:DF:8B:FB:96:A6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e9da0ba2-7efa-47b5-9d24-964226ab6f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:19d2::/47

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:bd:b3:5e:1a:c7:b1:cf:f9:6c:08:f8:4b:20:69:67:b6:
         15:b3:96:00:3e:b0:f0:d4:b0:80:10:74:d9:35:ae:4f:93:0a:
         a2:88:bc:bf:26:06:0c:96:7a:7b:f7:95:bb:c2:e5:03:55:51:
         95:5c:a4:53:3e:26:72:44:5c:69:b0:9e:45:3d:59:43:8e:67:
         63:bb:61:f4:1f:fd:b8:d7:c0:60:22:71:a4:6f:6e:cd:08:f0:
         40:42:04:7e:6e:d6:bf:a8:db:32:b8:c9:30:63:9e:39:b8:ac:
         7a:73:a7:c0:23:3f:3f:82:a2:d5:59:3b:70:3d:d8:2e:db:ca:
         4f:b0:24:9e:84:4a:34:98:39:ad:b0:1f:a2:d0:21:2d:4f:40:
         45:fe:91:d7:39:56:e5:28:9e:2d:2e:92:d8:a5:9d:02:68:b8:
         d7:9d:15:2b:83:cf:be:53:35:ce:a0:5a:85:21:43:cd:44:06:
         74:57:93:ad:6b:cc:fa:62:53:9e:09:fc:8d:f3:4d:9d:8f:f0:
         b0:14:5e:55:b5:24:ef:e8:c4:85:74:f9:3a:90:5e:3b:d5:c9:
         f2:24:bf:be:7b:dd:5a:69:f6:f4:91:1b:15:1e:2c:80:6d:14:
         ed:e9:6b:99:0f:fd:57:ff:03:12:83:cc:a4:fb:54:3d:f0:98:
         54:4d:c5:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:11:16 2025 by rpki-client