This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eebbc872-a054-4fe2-ba4c-31708c3ec100.roa
File:                     eebbc872-a054-4fe2-ba4c-31708c3ec100.roa (raw, json)
Hash identifier:          fgAdOwaGcbEA2IwLnQO+VZVvvmXD08dPhOPPNnLd0qY=
Subject key identifier:   A2:02:5C:25:46:3B:5D:72:D7:58:D2:A0:C6:D3:E0:FD:3B:93:76:EB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       35607E9939E137BA8E1867B6F8D4B9BA1F711BF7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eebbc872-a054-4fe2-ba4c-31708c3ec100.roa
Signing time:             Tue 25 Nov 2025 12:41:27 +0000
ROA not before:           Tue 25 Nov 2025 12:41:27 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:358c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:60:7e:99:39:e1:37:ba:8e:18:67:b6:f8:d4:b9:ba:1f:71:1b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 12:41:27 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=edabcb5ab4861f0faafe05bba5dbee54777eaf527b6e8ad066d51e7613dc5a11, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:11:83:fb:7d:af:45:04:4f:43:71:65:f2:
                    17:05:a3:99:af:05:37:1b:1f:b7:42:48:06:72:8d:
                    de:af:2f:97:f5:62:e0:f3:7c:85:b2:f1:b0:59:83:
                    b5:ca:45:fc:9f:14:8b:ef:c8:36:09:65:3a:71:e1:
                    9d:88:c7:b4:6e:4b:1f:49:8e:3d:b5:cd:d7:c5:95:
                    65:c0:a7:8a:89:ee:58:fe:28:48:bb:ff:24:66:a8:
                    d7:0a:b3:89:b9:b4:56:89:74:04:5a:6a:cd:d2:55:
                    ea:a2:05:0e:97:9c:87:ac:5e:62:28:78:fa:58:8d:
                    bf:f8:1d:be:c3:d6:48:9b:0f:be:d6:5d:85:58:38:
                    ef:93:02:5b:aa:8f:82:e9:4e:7c:00:40:ee:67:13:
                    06:48:a4:fb:ac:1c:31:42:70:22:7d:5e:cf:07:10:
                    1b:f9:c2:ba:e4:1c:5c:66:89:62:06:6a:1a:95:dd:
                    a6:53:60:d3:11:8b:0f:c3:ca:da:ae:66:f9:56:dd:
                    2e:18:7e:e7:da:6b:c8:87:e2:56:25:b5:39:2b:4a:
                    7a:2d:90:de:99:5c:5c:e1:90:42:ce:8b:29:56:a2:
                    79:94:00:01:1d:f9:7c:bb:71:ba:49:0b:1a:b4:95:
                    b1:94:af:c5:1f:aa:6b:31:24:15:fb:d2:ad:bc:5b:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:02:5C:25:46:3B:5D:72:D7:58:D2:A0:C6:D3:E0:FD:3B:93:76:EB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eebbc872-a054-4fe2-ba4c-31708c3ec100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:358c::/47

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:74:2f:14:3d:82:7e:ee:b8:62:0e:24:d8:22:90:f3:3a:
         54:27:07:7c:ed:bd:d0:2f:7d:06:26:16:ba:93:4f:4b:d0:a4:
         f5:18:8f:3e:f2:51:ab:54:6d:dd:e5:24:9c:d8:90:f7:7f:8e:
         5e:f2:2c:d0:ef:09:e4:da:65:5d:96:52:5a:e6:5e:7a:d1:7d:
         08:87:b2:f9:7a:95:e1:40:4f:de:2c:4d:de:12:73:bf:db:e8:
         cd:cd:cb:e6:4e:82:de:08:b8:ce:c9:54:49:58:94:f8:4f:25:
         c5:cb:11:6b:63:1d:46:65:03:f1:80:b8:d8:c8:42:25:c5:33:
         5e:10:cd:a9:14:ee:53:a7:d5:98:a5:fe:eb:88:83:20:f5:2e:
         55:08:bb:60:95:83:69:0b:6f:86:2c:ad:0a:ea:90:d5:27:8e:
         7d:21:66:ad:2e:44:34:89:3d:8b:60:1a:d7:65:89:a9:e0:f3:
         86:7a:e8:eb:bf:08:a1:78:19:d8:d6:98:86:6a:21:f6:ac:a4:
         59:70:a0:78:42:2e:72:24:03:3d:6e:fd:5d:1f:43:ae:80:16:
         b8:5d:b6:43:59:dd:41:bc:98:47:27:fe:88:38:4b:e3:d7:9d:
         65:48:9d:9e:a7:78:56:93:58:5e:f8:f3:a5:09:12:c5:52:e4:
         c0:ff:87:d1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNWB+mTnhN7qOGGe2+NS5uh9xG/cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTI0MTI3WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZGFiY2I1YWI0ODYxZjBmYWFmZTA1YmJhNWRiZWU1NDc3
N2VhZjUyN2I2ZThhZDA2NmQ1MWU3NjEzZGM1YTExMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAxRGD+32vRQRPQ3Fl8hcFo5mvBTcbH7dCSAZyjd6vL5f1
YuDzfIWy8bBZg7XKRfyfFIvvyDYJZTpx4Z2Ix7RuSx9Jjj21zdfFlWXAp4qJ7lj+
KEi7/yRmqNcKs4m5tFaJdARaas3SVeqiBQ6XnIesXmIoePpYjb/4Hb7D1kibD77W
XYVYOO+TAluqj4LpTnwAQO5nEwZIpPusHDFCcCJ9Xs8HEBv5wrrkHFxmiWIGahqV
3aZTYNMRiw/DytquZvlW3S4Yfufaa8iH4lYltTkrSnotkN6ZXFzhkELOiylWonmU
AAEd+Xy7cbpJCxq0lbGUr8UfqmsxJBX70q28W//lAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUogJcJUY7XXLXWNKgxtPg/TuTduswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2VlYmJjODcyLWEwNTQtNGZlMi1iYTRjLTMxNzA4YzNlYzEwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANYwwDQYJKoZIhvcNAQELBQADggEBAE8/dC8UPYJ+7rhiDiTYIpDz
OlQnB3ztvdAvfQYmFrqTT0vQpPUYjz7yUatUbd3lJJzYkPd/jl7yLNDvCeTaZV2W
UlrmXnrRfQiHsvl6leFAT94sTd4Sc7/b6M3Ny+ZOgt4IuM7JVElYlPhPJcXLEWtj
HUZlA/GAuNjIQiXFM14QzakU7lOn1Zil/uuIgyD1LlUIu2CVg2kLb4YsrQrqkNUn
jn0hZq0uRDSJPYtgGtdliang84Z66Ou/CKF4GdjWmIZqIfaspFlwoHhCLnIkAz1u
/V0fQ66AFrhdtkNZ3UG8mEcn/og4S+PXnWVInZ6neFaTWF7486UJEsVS5MD/h9E=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:48:54 2025 by rpki-client