This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f22db7f9-40a0-461a-bc61-2cbc0c5fec9a.roa
File:                     f22db7f9-40a0-461a-bc61-2cbc0c5fec9a.roa (raw, json)
Hash identifier:          83ZFHAb+dsejrKPKWD4cQTwtWWNrKhBoVKax7ZMdzkw=
Subject key identifier:   06:AC:76:A3:29:60:BD:E4:F5:71:35:1B:64:17:C8:33:95:8C:0E:81
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2090A27E2EBD855988F09F7D3012BA481BBDD3A2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f22db7f9-40a0-461a-bc61-2cbc0c5fec9a.roa
Signing time:             Tue 25 Nov 2025 04:01:11 +0000
ROA not before:           Tue 25 Nov 2025 04:01:11 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:17d0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:a2:7e:2e:bd:85:59:88:f0:9f:7d:30:12:ba:48:1b:bd:d3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 04:01:11 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=eb0a4fb5f94dcbf01b08c5bca17ebc489ba53e64395b5f53111fb0f3600e94bd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:6c:3d:c6:16:e5:04:e7:2d:77:d4:94:32:
                    95:44:ba:06:f5:b8:92:99:b9:05:da:06:95:3e:af:
                    c6:b8:fa:54:bf:8e:77:37:ab:00:86:be:04:08:d4:
                    50:95:43:a9:82:f7:a1:88:6b:3a:59:e1:7d:b4:0f:
                    61:00:a2:28:ce:88:52:dd:bf:88:2f:3e:47:bc:47:
                    e4:46:9e:3e:59:6c:1a:ab:d8:77:17:51:c3:39:7c:
                    ce:ab:cb:76:47:ee:e3:aa:f8:18:6d:5a:92:61:46:
                    e1:f6:58:79:ba:ab:d2:00:5c:31:a9:71:27:58:86:
                    f3:86:44:cc:3a:eb:f2:89:1f:7f:17:3a:b0:d7:50:
                    73:b5:59:f2:29:ce:88:9a:72:47:5e:07:24:63:17:
                    da:db:41:32:07:5d:13:e2:ba:79:ae:67:c7:9a:ff:
                    e4:2e:c8:e2:38:f0:ca:ab:af:94:7d:8a:09:cc:72:
                    30:a4:6a:54:eb:9d:30:f4:b2:fa:ff:85:20:e6:0a:
                    be:ca:6d:4b:ae:bd:77:9e:e6:3b:d7:57:fc:61:f7:
                    68:52:a8:90:c4:e8:8e:5b:c6:cf:88:91:80:12:5f:
                    a6:4a:89:74:05:d9:fc:24:52:2b:32:d6:b3:b4:ab:
                    4b:a2:78:be:fd:f7:2e:be:84:eb:09:07:7b:31:00:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AC:76:A3:29:60:BD:E4:F5:71:35:1B:64:17:C8:33:95:8C:0E:81
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f22db7f9-40a0-461a-bc61-2cbc0c5fec9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:17d0::/45

    Signature Algorithm: sha256WithRSAEncryption
         47:7a:7f:20:0f:1c:9f:7b:05:c5:4d:1c:07:48:0d:f6:c1:a1:
         86:68:6f:a9:55:2c:7e:9f:e1:6e:11:2c:a4:0e:a2:17:84:7c:
         4e:ad:cc:0f:4a:a7:7b:9f:ff:8e:be:5a:2f:a7:8d:28:a4:1c:
         a4:a8:8e:1a:92:51:a1:d2:97:0f:91:6b:6c:d7:e1:20:de:1c:
         e7:ea:1b:4e:c6:91:c5:5d:e4:e3:08:f4:e2:98:66:63:e3:ab:
         1e:44:23:d3:6e:76:b6:02:57:35:de:50:f7:77:45:48:b1:13:
         c2:6e:cf:89:ee:4c:d0:49:cf:e6:a6:95:c6:ae:e7:5b:e2:14:
         3f:62:88:78:be:47:de:97:ab:7d:c9:b8:eb:f5:d3:79:a4:34:
         54:22:4d:e9:f8:5e:2b:cd:1f:9f:34:67:dd:61:bc:74:0f:5c:
         89:06:3e:a4:19:f7:bc:68:6d:0f:7a:f6:f9:1f:e8:a9:b6:49:
         76:01:a4:3e:42:4a:67:02:be:ca:92:6e:ea:8b:ff:9f:06:f3:
         24:6f:b0:93:d3:28:42:5d:29:ec:69:61:13:3c:7d:2d:07:a8:
         33:01:7b:76:5f:7e:12:4d:3e:84:c3:22:01:a0:6b:55:71:55:
         8d:53:a0:fe:72:eb:67:97:34:2f:cc:cf:a6:37:ae:23:4f:f5:
         43:c8:4e:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:42 2025 by rpki-client