This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ebfeb91b-c15e-47a8-91d3-8e195a816d2e.roa
File:                     ebfeb91b-c15e-47a8-91d3-8e195a816d2e.roa (raw, json)
Hash identifier:          2FDuy+BxevHBhG/Yz0FdZcTgJqLxfVzYA3mR5FYpKRc=
Subject key identifier:   CF:17:FE:6B:42:77:3A:66:F1:8F:A7:05:16:6F:E7:B8:1C:4B:40:67
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       05BA6DDD4DFAFA549E850279431E85AC55D55780
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ebfeb91b-c15e-47a8-91d3-8e195a816d2e.roa
Signing time:             Tue 25 Nov 2025 17:50:44 +0000
ROA not before:           Tue 25 Nov 2025 17:50:44 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3aa8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ba:6d:dd:4d:fa:fa:54:9e:85:02:79:43:1e:85:ac:55:d5:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 17:50:44 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b8135ebdffd46f51e58dc9c0e4d7b4fb012fa7ebe79abe9b7f4b47d5bb280e29, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:12:1a:32:29:b6:52:d3:0a:07:a7:ab:f7:
                    74:68:f7:a3:15:40:42:ab:42:91:23:52:91:cc:60:
                    77:eb:e2:4a:d4:ee:e2:cb:71:57:2f:af:87:54:c6:
                    95:98:c4:fa:78:24:86:d0:5f:33:e8:7b:e8:48:f6:
                    59:9e:8e:71:82:47:e3:da:1b:2c:00:88:6a:12:ef:
                    8e:93:54:99:2d:ed:04:e8:1f:c6:b0:4f:70:b0:cf:
                    6e:55:1d:fa:d1:92:b0:3c:0c:78:05:8d:7c:18:8b:
                    f4:86:4a:1a:fa:05:51:0d:ba:a8:54:3c:7c:5e:fa:
                    e0:3e:73:df:89:28:cf:e4:b5:7b:b3:95:87:cc:e1:
                    e9:0c:2a:ff:e0:40:7c:f7:48:ed:fb:5d:c1:14:38:
                    71:e7:f9:50:58:7e:72:bc:b2:ef:08:a9:e5:55:49:
                    fc:d6:66:bb:3e:03:a0:d1:1e:ca:0b:bc:cc:a7:ee:
                    07:d6:d3:d0:f4:05:5b:45:78:df:ca:42:bb:d0:a0:
                    f3:f2:78:26:43:35:30:b9:f2:8f:96:13:f2:f5:c9:
                    8d:99:f3:e8:6c:49:5b:4b:4d:29:4d:b6:48:64:f0:
                    10:7a:65:a8:66:ce:93:ae:34:46:79:49:a7:2e:eb:
                    6a:d7:50:34:3d:22:1e:02:94:df:4e:99:d2:bc:c2:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:17:FE:6B:42:77:3A:66:F1:8F:A7:05:16:6F:E7:B8:1C:4B:40:67
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ebfeb91b-c15e-47a8-91d3-8e195a816d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3aa8::/45

    Signature Algorithm: sha256WithRSAEncryption
         ae:a8:6c:10:69:74:a0:70:39:e2:1f:71:b7:bd:63:8c:f2:38:
         f6:86:48:fb:54:f9:02:5d:c3:51:5f:c0:61:8d:91:47:28:74:
         c2:3d:89:df:ce:12:26:80:b3:61:b0:3e:c6:e0:1d:f5:1b:10:
         04:92:6c:25:b2:b5:ed:1e:47:73:90:a8:2e:96:4a:99:eb:ee:
         78:3c:0a:1d:51:ee:19:ac:f9:ed:d0:01:8a:34:45:82:49:55:
         d4:b3:5d:43:d8:45:56:3a:c5:82:b2:1f:af:3d:da:99:cb:e1:
         a6:43:07:94:bc:86:42:9c:b2:c8:8d:af:8a:2b:e2:c1:ab:5a:
         81:57:ed:a1:94:d2:7c:e8:ff:ca:17:c7:b5:50:1e:fc:a4:5e:
         00:53:a6:11:62:c0:5e:8e:e4:91:ec:ed:02:1f:4a:61:80:3c:
         1c:d7:23:d5:3f:a2:29:16:18:27:bb:fa:3d:ed:01:8f:1f:2d:
         bb:5c:0e:1b:fd:e4:cf:08:d5:47:ff:cd:53:e0:1f:63:49:d7:
         04:37:fc:93:94:2c:85:2b:98:8f:de:f8:4a:6a:9c:2b:89:f3:
         17:47:30:5f:10:1b:64:e6:21:e4:cf:56:c2:8b:06:9b:36:68:
         5a:13:53:e6:72:5e:f4:77:cc:0e:89:74:9d:47:d2:f1:bc:7a:
         67:e0:47:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:39 2025 by rpki-client