This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2a7f042-41be-4ab8-8f49-0bf0f5102d23.roa
File:                     f2a7f042-41be-4ab8-8f49-0bf0f5102d23.roa (raw, json)
Hash identifier:          mDPeLje+4SbU7j21beag2heTaxurpd6hL8mlHf8gYa8=
Subject key identifier:   3A:1D:F4:CE:6B:D1:33:34:92:67:13:34:27:04:12:0F:02:58:28:6F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46201DA8D3722D2204394EC329455CB709347CAA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2a7f042-41be-4ab8-8f49-0bf0f5102d23.roa
Signing time:             Tue 25 Nov 2025 01:30:46 +0000
ROA not before:           Tue 25 Nov 2025 01:30:46 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f4c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:20:1d:a8:d3:72:2d:22:04:39:4e:c3:29:45:5c:b7:09:34:7c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 01:30:46 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=d06322d424db1ea480b943dfc5874119282cd25a10ed01391a886cafc8d6987d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:f3:44:9e:8d:ff:ca:f2:ca:07:91:20:fc:
                    d6:f1:f8:6c:37:c0:62:75:03:9d:ad:4f:38:16:28:
                    ec:43:9b:43:16:97:00:b8:06:77:ae:e2:6c:45:4a:
                    f6:5e:92:a6:77:ca:02:5c:2d:46:8d:3a:76:31:2c:
                    70:cf:f5:c9:0f:6a:c0:4f:00:e7:2f:d5:7e:68:a2:
                    ab:b3:0e:06:22:d6:b6:36:2b:e4:3b:52:b7:14:fe:
                    6b:2a:79:57:3b:1e:7e:e5:02:3a:c2:0d:09:f9:c4:
                    34:71:b0:7a:0a:93:73:e7:21:d3:57:ec:f8:ac:10:
                    58:f3:41:85:70:25:8a:4d:6d:17:1a:7b:7a:0d:3b:
                    e0:5d:ed:20:33:19:6b:30:fc:6e:d9:a7:92:9c:f1:
                    fb:33:60:87:32:c5:92:52:72:19:c8:62:40:0f:18:
                    7e:32:78:0b:9c:8a:96:4e:ff:a3:db:44:9f:1b:5f:
                    64:8f:3a:e8:0c:df:a7:75:8f:97:f3:9f:da:d8:ee:
                    39:ca:00:8f:0f:dd:16:46:40:5d:4b:2c:28:af:0a:
                    e0:74:e4:dc:9b:59:97:4e:2d:67:02:28:9a:a8:1d:
                    0a:f4:90:3c:fc:cb:18:5a:d1:be:c3:00:55:41:d0:
                    4e:13:80:50:6f:eb:08:da:32:2a:c1:bd:06:3c:74:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1D:F4:CE:6B:D1:33:34:92:67:13:34:27:04:12:0F:02:58:28:6F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2a7f042-41be-4ab8-8f49-0bf0f5102d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f4c::/47

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:d7:67:18:cc:30:c4:67:49:6a:71:95:96:7d:6b:65:10:
         48:77:c0:a9:93:7f:30:5d:26:b2:4b:1a:75:d9:a9:6c:af:97:
         3b:93:27:c1:20:7d:fc:42:26:14:ec:6d:62:a3:dd:80:87:79:
         62:fa:b9:1b:ca:fe:7a:86:df:fd:ac:f2:36:b1:34:98:81:b3:
         ee:ed:d2:24:0a:76:8d:b0:5b:04:79:10:c3:56:22:17:c4:9e:
         18:82:31:77:64:54:dd:f7:b3:2c:a0:99:a1:59:37:b6:58:03:
         0e:6a:ff:b6:18:e0:2b:58:b8:a5:b3:39:1e:0c:4a:f8:30:68:
         7e:50:63:17:a8:30:14:dd:6c:e9:be:d0:98:0d:8d:8a:4f:24:
         9d:b7:08:e8:a9:af:b0:73:90:57:6a:51:5c:53:9c:b4:ff:bb:
         2c:25:be:40:e2:be:cf:a3:93:71:ff:21:d2:d4:7b:0d:ef:86:
         35:b9:09:b3:80:31:01:47:10:91:34:dc:8b:43:6e:fd:f9:25:
         d7:93:43:60:5d:c6:7e:3c:d9:0b:8a:e5:f9:f7:1e:b8:16:04:
         5d:3f:d4:c0:51:d9:04:97:1e:12:b6:bc:a8:5b:5b:56:d3:f7:
         ec:e8:cb:f6:56:a0:20:ea:cd:51:0f:6c:e1:3e:74:56:4d:40:
         fa:c0:eb:d7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURiAdqNNyLSIEOU7DKUVctwk0fKowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MDEzMDQ2WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMDYzMjJkNDI0ZGIxZWE0ODBiOTQzZGZjNTg3NDExOTI4
MmNkMjVhMTBlZDAxMzkxYTg4NmNhZmM4ZDY5ODdkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDO6vNEno3/yvLKB5Eg/Nbx+Gw3wGJ1A52tTzgWKOxDm0MW
lwC4Bneu4mxFSvZekqZ3ygJcLUaNOnYxLHDP9ckPasBPAOcv1X5ooquzDgYi1rY2
K+Q7UrcU/msqeVc7Hn7lAjrCDQn5xDRxsHoKk3PnIdNX7PisEFjzQYVwJYpNbRca
e3oNO+Bd7SAzGWsw/G7Zp5Kc8fszYIcyxZJSchnIYkAPGH4yeAucipZO/6PbRJ8b
X2SPOugM36d1j5fzn9rY7jnKAI8P3RZGQF1LLCivCuB05NybWZdOLWcCKJqoHQr0
kDz8yxha0b7DAFVB0E4TgFBv6wjaMirBvQY8dFCjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUOh30zmvRMzSSZxM0JwQSDwJYKG8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2YyYTdmMDQyLTQxYmUtNGFiOC04ZjQ5LTBiZjBmNTEwMmQyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAP0wwDQYJKoZIhvcNAQELBQADggEBAGMP12cYzDDEZ0lqcZWWfWtl
EEh3wKmTfzBdJrJLGnXZqWyvlzuTJ8EgffxCJhTsbWKj3YCHeWL6uRvK/nqG3/2s
8jaxNJiBs+7t0iQKdo2wWwR5EMNWIhfEnhiCMXdkVN33syygmaFZN7ZYAw5q/7YY
4CtYuKWzOR4MSvgwaH5QYxeoMBTdbOm+0JgNjYpPJJ23COipr7BzkFdqUVxTnLT/
uywlvkDivs+jk3H/IdLUew3vhjW5CbOAMQFHEJE03ItDbv35JdeTQ2Bdxn482QuK
5fn3HrgWBF0/1MBR2QSXHhK2vKhbW1bT9+zoy/ZWoCDqzVEPbOE+dFZNQPrA69c=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:46:53 2025 by rpki-client