This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1cbbe60-4ec5-4fb7-bf01-b288872ef058.roa
File:                     f1cbbe60-4ec5-4fb7-bf01-b288872ef058.roa (raw, json)
Hash identifier:          JtR8K1Pa/S3S+7KYfeua8x0qLvwJ4UNT+rlC0B0+SO0=
Subject key identifier:   60:C3:7D:15:0A:F2:54:BE:9F:50:2A:6A:63:82:E3:61:F7:27:3B:7D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       599BA1D2670BDFD12767731D7C608899EB2B11F6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1cbbe60-4ec5-4fb7-bf01-b288872ef058.roa
Signing time:             Mon 24 Nov 2025 04:30:57 +0000
ROA not before:           Mon 24 Nov 2025 04:30:57 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1556::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9b:a1:d2:67:0b:df:d1:27:67:73:1d:7c:60:88:99:eb:2b:11:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:30:57 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=a0810cf0522e83ce64d9a911ec6657354930159b70a9044c3656d1bb81007bed, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d3:31:5f:46:0d:08:d3:ec:13:f1:15:6a:0e:
                    04:af:9e:3a:44:6d:df:90:07:b7:e1:d5:a0:6a:5f:
                    a3:6b:7c:10:32:b1:6b:f8:90:84:5c:cd:cf:57:84:
                    30:eb:7a:17:10:a7:22:1a:8c:19:fd:4e:0c:5b:35:
                    80:5a:18:bd:b5:35:91:4f:e9:95:3f:30:89:4e:f4:
                    5e:12:c3:de:b5:6f:9b:5b:26:9f:84:15:87:79:40:
                    7b:47:5b:9e:d1:4f:6c:f7:b1:b7:dd:a3:ee:c6:0a:
                    17:ec:70:18:05:21:eb:c5:13:89:a0:12:a1:4e:33:
                    67:aa:95:a0:d9:6f:53:fb:b5:45:a7:f4:9c:02:da:
                    d0:4a:1c:ff:f4:26:60:65:56:79:37:d2:eb:63:d6:
                    2c:87:70:dd:02:d3:3c:15:61:59:69:31:22:43:0c:
                    90:ab:4d:e3:42:bf:54:82:21:59:d2:6b:fe:3b:19:
                    3c:a4:58:f1:58:79:ee:c8:8f:cf:e4:71:a5:68:f7:
                    aa:f3:e3:e8:92:cf:b0:32:18:2e:58:4a:8d:16:96:
                    33:e9:2f:97:5c:93:95:38:cc:7e:c5:d2:7f:08:1c:
                    60:a5:58:41:f6:f9:cd:fc:ea:b1:82:f6:5b:64:be:
                    4f:5b:2c:40:c4:6a:fd:bb:75:3e:4e:ac:0a:8e:be:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C3:7D:15:0A:F2:54:BE:9F:50:2A:6A:63:82:E3:61:F7:27:3B:7D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1cbbe60-4ec5-4fb7-bf01-b288872ef058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1556::/47

    Signature Algorithm: sha256WithRSAEncryption
         c0:70:09:ed:3a:4c:c4:22:5c:f5:d4:02:f5:63:8b:5b:d4:f9:
         f3:e5:20:0c:61:59:72:9d:1a:af:9e:73:b3:d7:d6:5a:2e:cb:
         e6:28:8c:5e:a5:f8:b6:1f:01:99:73:bd:54:ab:1b:4c:d2:bb:
         58:14:cd:fe:41:79:5d:97:69:11:0f:1a:13:3c:7f:c6:4f:fd:
         61:d5:f6:93:f6:e1:45:58:a6:99:2a:97:23:08:f7:06:b7:64:
         7f:00:19:12:ca:06:2a:a5:6b:93:26:21:65:25:de:47:c9:de:
         8f:45:2f:72:dd:e9:4b:75:82:5d:b8:63:64:9a:37:6a:bc:c6:
         b3:6c:3b:4a:b2:4c:e0:3f:38:c0:3c:75:2b:a9:36:f8:89:3d:
         7b:70:4e:d2:88:0d:17:23:f3:84:66:fd:3f:3a:94:f5:aa:7a:
         37:80:2c:f2:72:b4:24:09:aa:79:ea:4d:44:18:11:1a:07:24:
         f7:b2:85:bb:20:17:b2:50:f1:82:af:40:80:23:0a:2e:72:c2:
         e2:4c:d8:23:3e:1d:ba:14:9a:79:01:44:cf:a7:b6:a8:c3:0f:
         79:e8:9a:b5:43:31:a6:29:66:6b:d5:31:5b:98:7d:0c:31:55:
         3b:50:79:6a:80:34:60:16:2b:8f:c9:0f:d1:c7:32:f9:bf:c8:
         fc:b8:4b:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:54 2025 by rpki-client