This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0bfa129-9176-4e5a-abe5-1f25173cae2a.roa
File:                     f0bfa129-9176-4e5a-abe5-1f25173cae2a.roa (raw, json)
Hash identifier:          OxHc0qjE9CKbQIC1BNsy/4gpF7cgpfXrR5awq5GJeP0=
Subject key identifier:   67:41:49:61:8C:B0:A6:C8:CD:9E:DE:51:7C:80:D1:1A:9F:53:DF:53
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       172D48E8D705F9B7FF0645C3D3278E7C179A5C5C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0bfa129-9176-4e5a-abe5-1f25173cae2a.roa
Signing time:             Mon 24 Nov 2025 08:00:06 +0000
ROA not before:           Mon 24 Nov 2025 08:00:06 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31f6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2d:48:e8:d7:05:f9:b7:ff:06:45:c3:d3:27:8e:7c:17:9a:5c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 08:00:06 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=b082450232ee55173d487400dcf45ec150ea879798ae0710ef613ebc6bcadb71, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d2:c8:ae:31:9e:27:cb:6c:73:2e:2f:32:cc:
                    52:be:ec:60:c2:9c:60:fc:09:1c:bc:8c:a4:14:ba:
                    02:a2:7b:5c:65:34:a8:4c:16:b1:c1:0b:09:21:61:
                    58:11:d2:10:d0:18:bf:f4:2f:11:c2:aa:ec:ef:95:
                    e1:d6:cd:e4:87:f0:33:97:e0:97:4e:ea:b7:2f:37:
                    00:d3:ba:0d:3b:9c:db:92:b6:29:77:c2:32:b6:c5:
                    ef:98:4a:33:fd:c0:e2:68:47:a9:b9:0b:f6:d6:c5:
                    ba:42:d7:2b:75:10:56:65:e7:6e:c9:c7:55:47:a9:
                    78:d5:68:3e:3c:a5:73:d1:6f:84:6e:7d:d7:cb:ee:
                    85:6f:f4:e3:07:b7:19:18:64:91:d1:1e:bb:6c:2e:
                    3a:e4:9d:56:c5:ed:a2:2d:66:32:52:00:5a:47:c5:
                    8f:a0:c8:21:c5:d8:33:f1:b8:9f:88:93:1e:fe:c0:
                    fb:18:fe:8f:0d:19:93:e2:90:93:ba:8b:c3:8b:19:
                    af:c4:d6:c8:8a:b5:0b:ac:54:ed:aa:1c:9f:f1:03:
                    2b:c0:54:59:c9:8a:d1:f4:00:c1:ff:c3:8d:bf:f2:
                    bd:44:69:e8:d1:34:ef:96:ea:a9:a9:67:fe:5e:51:
                    48:20:6d:93:e3:bf:11:b9:82:89:ee:7c:da:bf:b2:
                    cf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:41:49:61:8C:B0:A6:C8:CD:9E:DE:51:7C:80:D1:1A:9F:53:DF:53
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0bfa129-9176-4e5a-abe5-1f25173cae2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31f6::/47

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:f0:7a:7b:6b:dc:cd:38:3a:5a:1f:b3:45:53:c0:56:51:
         4f:c2:96:6a:d2:89:44:90:0b:86:8a:12:b2:c5:f5:4e:31:12:
         fc:de:6e:d0:32:6a:e4:f3:bd:c2:d9:3b:1c:f8:8c:bf:e3:99:
         22:1e:56:20:6e:cb:51:b4:84:cd:89:e3:48:d7:76:94:84:18:
         8d:4c:b3:f6:05:3c:b5:e0:3a:5b:40:ed:2d:db:71:82:4c:41:
         8b:15:dd:e2:bf:19:25:3b:7b:05:f3:8c:20:cf:2c:52:5e:80:
         25:0f:23:08:99:3f:74:79:17:45:e4:1c:be:56:d7:f1:cb:90:
         bc:b3:d2:79:02:f6:57:2b:55:5c:f5:6f:27:ae:c0:12:b2:4f:
         97:22:27:12:84:8e:87:a8:a8:07:fb:85:9c:d6:0e:67:7e:f5:
         03:c5:b0:56:52:db:4e:04:9a:de:0f:9b:b2:ce:54:7f:4f:81:
         5c:cf:05:50:78:cf:64:6b:f4:43:8d:ce:1b:d3:7b:78:e9:14:
         fa:65:f7:fc:81:94:b4:e9:93:0d:5a:e6:54:ca:34:ac:02:e7:
         ef:6d:4e:06:42:d7:23:f0:fd:9b:11:2c:36:e2:c6:88:7a:4f:
         d3:3d:68:7e:c2:81:95:d3:a0:b5:05:4b:9d:d9:a1:4a:6b:cb:
         7f:6b:1a:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:12:59 2025 by rpki-client