This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f25f0a32-57d1-4480-a47e-616addadc9cb.roa
File:                     f25f0a32-57d1-4480-a47e-616addadc9cb.roa (raw, json)
Hash identifier:          ndnEH/nyUlyE2vUJPW8dy0t6GhacScE3eEgyws7NMLM=
Subject key identifier:   65:8F:30:91:3B:AE:3F:6D:01:AE:C8:92:50:99:0A:3C:10:21:41:69
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0B291B6CA0BD125C37DA8C2FBD8369A895BD669C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f25f0a32-57d1-4480-a47e-616addadc9cb.roa
Signing time:             Tue 25 Nov 2025 07:12:00 +0000
ROA not before:           Tue 25 Nov 2025 07:12:00 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36c0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:29:1b:6c:a0:bd:12:5c:37:da:8c:2f:bd:83:69:a8:95:bd:66:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 07:12:00 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=697147a84d54d901516745fef673a7bf4a0e7475fa7a232c17ff1e76e29133ce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:a0:67:ec:cb:df:a7:e7:77:73:cb:0d:f5:
                    2c:cf:70:61:50:21:25:47:eb:9d:a4:c1:74:ae:2a:
                    24:44:2e:52:62:30:01:a0:52:a7:c7:1b:53:37:3a:
                    67:86:1d:20:d3:c0:33:de:f1:ad:87:3e:8d:0f:2a:
                    b1:af:02:0e:4b:c9:75:b2:51:e7:33:74:88:15:a0:
                    00:e1:3d:1e:b5:b0:2d:d4:84:ac:76:33:05:58:4c:
                    f2:04:a7:b8:5c:88:f9:5c:7d:cc:f8:13:68:99:6e:
                    e3:6e:16:1a:73:07:15:3d:fa:6e:f7:70:82:1a:5b:
                    80:70:b5:20:f9:eb:e0:29:b5:69:2c:1d:a2:9d:26:
                    ec:13:44:80:16:2b:11:98:ff:1e:da:4c:4f:81:ef:
                    09:eb:da:16:a4:c8:2e:62:27:46:b6:cb:b5:0b:39:
                    a3:f7:bd:81:48:c8:16:6d:62:07:8d:f0:6b:f7:9c:
                    e4:16:b7:aa:5e:45:d2:b2:d4:8a:a4:dc:3c:2c:77:
                    10:19:85:30:8c:c0:38:e2:9d:f8:85:0e:c8:cd:d2:
                    1f:33:3b:3f:79:63:b2:c7:c9:ee:76:3b:df:cd:da:
                    d0:4c:16:3c:6a:19:94:9d:9c:e5:12:a9:66:06:25:
                    da:95:4c:63:c0:47:74:61:b0:92:0d:19:3a:a7:d2:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:30:91:3B:AE:3F:6D:01:AE:C8:92:50:99:0A:3C:10:21:41:69
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f25f0a32-57d1-4480-a47e-616addadc9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         0f:57:fb:38:5f:96:31:15:e9:e5:db:d1:26:7f:9c:89:5a:5f:
         7f:f1:f9:d8:7e:1e:72:ce:af:b1:1f:f1:27:ef:9c:37:8f:62:
         eb:56:d6:e0:78:78:23:60:b5:e8:db:a3:37:0c:aa:9e:bc:ad:
         4a:35:07:f3:02:1b:ac:20:26:68:48:42:5a:72:6c:15:69:b2:
         03:8a:97:2a:42:6b:38:f6:ed:59:28:90:a7:e8:b6:95:1e:0a:
         0d:4a:49:25:15:c2:df:11:1c:fd:05:04:b8:9b:69:a9:8c:6d:
         b3:1e:c1:0d:b4:bc:b5:ec:d4:62:04:e2:b9:1a:0d:00:15:85:
         6e:93:22:ff:ce:98:65:54:f0:36:d0:56:7d:6d:08:39:8a:92:
         38:da:f2:d5:7e:30:9c:ee:54:90:02:5a:b6:db:00:2e:30:dc:
         3d:eb:49:78:ef:ae:1d:14:1d:ee:12:a3:cd:00:1c:41:4a:a2:
         8c:cf:ec:d5:fb:cb:60:44:44:cb:c3:ec:19:29:ab:34:4e:5a:
         a4:39:43:9c:2c:3d:45:02:12:54:00:d2:3e:ba:23:1a:72:d5:
         8b:64:2b:40:47:a7:67:0b:74:ca:1d:27:a9:99:49:a5:d9:d5:
         52:54:6b:ba:62:0b:dd:e0:b0:5a:a1:15:62:bc:7d:a3:18:2d:
         ad:4b:84:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:00 2025 by rpki-client