This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ede7b39d-9cb1-4cbe-81ae-0adc716bbd56.roa
File:                     ede7b39d-9cb1-4cbe-81ae-0adc716bbd56.roa (raw, json)
Hash identifier:          ws7ad5+c8Unqou3TAZaw/W0tP/LGNJ9miauSBbQFIlo=
Subject key identifier:   EC:7B:62:81:66:C0:70:36:4E:11:4C:6E:37:4B:F7:FA:C9:EF:2B:41
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       230ED9DC981148F088EB8F82653DD481C50161F7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ede7b39d-9cb1-4cbe-81ae-0adc716bbd56.roa
Signing time:             Tue 25 Nov 2025 02:02:09 +0000
ROA not before:           Tue 25 Nov 2025 02:02:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33ec::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0e:d9:dc:98:11:48:f0:88:eb:8f:82:65:3d:d4:81:c5:01:61:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 02:02:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=de95dc7c934fc69308eeca9b0a1aa122b7f1b20c0bcc302d86fe4c693cd50662, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:36:96:b6:33:93:c6:02:a5:8f:12:18:18:
                    a3:29:49:d7:57:86:c5:18:02:af:26:67:d9:66:76:
                    f2:8d:37:86:1d:d2:1d:5a:e6:07:41:fc:1c:e0:65:
                    8f:b8:9b:e9:f5:0d:6e:d3:e0:dd:46:ca:16:b0:d5:
                    0f:b6:fd:72:e3:28:ac:07:2f:75:c0:05:91:ce:77:
                    54:50:e4:88:f2:49:38:b6:56:32:9d:59:38:e3:89:
                    70:ba:46:89:62:0b:db:9a:a7:08:22:02:88:5e:10:
                    8e:df:7c:f9:c2:f6:0d:ec:9e:99:8f:58:29:7c:c6:
                    fa:8d:db:ac:6f:3d:2c:a5:2f:eb:e2:7c:82:09:60:
                    bc:31:2a:11:cb:77:b9:93:a2:21:42:61:c5:19:cc:
                    18:3a:6c:49:c1:cf:b7:75:e5:cd:e7:59:79:e0:f8:
                    2d:41:9e:9e:a9:d3:cc:88:37:24:5a:1a:3b:e4:ed:
                    d1:7a:94:94:6a:70:54:71:a6:68:8a:7e:ff:4e:a2:
                    3d:d1:69:0d:39:c8:e6:fd:a7:d0:28:14:a3:4d:64:
                    dc:ff:0c:e7:ce:78:36:72:14:a3:44:a0:5e:b0:de:
                    17:d8:11:5b:38:34:4b:ee:56:1e:3a:09:54:e3:aa:
                    49:17:05:54:fd:fe:3b:e7:36:e9:d0:47:96:57:7b:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7B:62:81:66:C0:70:36:4E:11:4C:6E:37:4B:F7:FA:C9:EF:2B:41
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ede7b39d-9cb1-4cbe-81ae-0adc716bbd56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33ec::/47

    Signature Algorithm: sha256WithRSAEncryption
         a9:9f:8f:82:1a:5a:7f:2f:a4:c7:3d:d3:bb:f7:99:fa:b9:12:
         48:64:64:c2:66:c4:bc:06:1a:27:f8:96:83:9e:2b:a2:d8:fe:
         83:ef:74:ef:5a:ec:83:ac:4d:9f:d1:e4:25:40:e2:b7:01:74:
         5a:08:9e:64:9e:72:65:af:2e:c3:76:1e:8b:d5:c6:05:66:de:
         00:e4:79:8b:51:cf:3d:67:aa:e8:91:01:ab:be:8a:79:66:7a:
         9b:a3:47:61:86:07:ed:4b:70:dc:33:43:51:be:0a:2e:bd:8f:
         51:58:ec:7c:05:06:67:c9:13:38:43:2e:cb:28:cb:04:ba:5e:
         0c:3c:8c:cd:e6:71:12:41:36:50:e9:a1:14:4f:a8:75:ff:31:
         62:5a:59:aa:22:d8:9a:8d:4a:25:9d:02:ee:c0:b4:3b:3e:5b:
         05:04:2f:0c:32:cb:06:64:9a:2f:fd:39:cf:39:8b:85:c2:6e:
         d5:8f:cd:1d:32:20:d7:e9:f9:ea:2a:7a:35:5a:75:48:b2:82:
         a1:81:69:1f:87:76:a3:ff:8a:a9:27:76:42:ed:32:c7:de:ef:
         c2:f3:08:d2:bb:4c:51:03:a5:ab:42:fa:33:76:01:09:7b:d9:
         b4:ac:ee:7f:ce:5d:c3:40:aa:a0:f0:6b:ba:b4:67:3b:e5:e5:
         85:bf:19:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:27 2025 by rpki-client