This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3c3c8a8-b31c-4352-b052-2c85f67c3071.roa
File:                     f3c3c8a8-b31c-4352-b052-2c85f67c3071.roa (raw, json)
Hash identifier:          LevNqkZtQGCHO4Vg44iMG+XVPWBMGqTT9JXy1ii2log=
Subject key identifier:   B0:B0:DA:15:2B:68:D9:0C:21:A6:BC:58:2C:80:A3:07:E7:2E:7F:01
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3274BBB4F0FC16E4845917E64753C7A62D002731
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3c3c8a8-b31c-4352-b052-2c85f67c3071.roa
Signing time:             Mon 24 Nov 2025 08:10:09 +0000
ROA not before:           Mon 24 Nov 2025 08:10:09 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a0e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:74:bb:b4:f0:fc:16:e4:84:59:17:e6:47:53:c7:a6:2d:00:27:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 08:10:09 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=5881b360760885f0c8f1330a9788f0223328c3321ad891d5fd30107743b6878e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:bc:c2:a3:b7:e6:3d:98:05:b6:86:3a:a8:
                    8c:e9:07:10:30:31:14:6b:80:88:6c:f5:7a:11:28:
                    5a:16:83:6c:4d:4d:43:02:39:db:b8:db:67:d6:ce:
                    d7:ee:6c:17:9f:d5:50:9d:7d:11:b9:e7:89:a4:aa:
                    b1:f5:5f:98:76:89:4a:6a:a6:0c:7e:d0:4c:93:58:
                    26:23:39:2e:13:0f:be:31:84:43:d9:42:d3:0d:68:
                    11:03:0d:a1:87:e9:34:84:0f:65:d8:c8:7b:f8:c3:
                    df:0e:2f:2c:f9:95:54:d5:93:fa:6d:6f:a2:78:66:
                    4e:2f:db:6e:20:0c:b5:d3:a1:c0:11:b3:fe:9f:e6:
                    55:56:80:43:e4:fc:52:00:84:48:9b:c1:eb:ce:d1:
                    44:0e:34:b6:f0:9c:2d:99:33:72:e6:68:f7:ab:01:
                    d6:9d:4b:cc:ed:d5:78:bd:66:6a:5c:9e:19:10:96:
                    95:51:eb:e4:4a:6d:f4:fc:a8:c3:37:29:82:92:b4:
                    16:79:0a:88:00:17:30:ad:ad:d7:39:7b:ea:f9:0c:
                    6d:78:ee:84:d6:1a:aa:b3:e5:41:47:f8:7b:ba:46:
                    f8:33:6a:32:8b:2f:49:ca:47:7a:33:4b:06:91:2a:
                    b7:7a:36:28:a5:21:79:38:38:6f:86:e8:52:be:a9:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B0:DA:15:2B:68:D9:0C:21:A6:BC:58:2C:80:A3:07:E7:2E:7F:01
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3c3c8a8-b31c-4352-b052-2c85f67c3071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a0e::/47

    Signature Algorithm: sha256WithRSAEncryption
         4c:7f:4f:a7:86:36:34:b0:91:c9:2e:90:ad:76:e1:3c:77:d8:
         71:53:00:29:df:21:6c:fd:46:33:5a:8f:1b:f3:e6:b7:c8:93:
         e2:2d:ae:1b:1a:65:fe:ea:fd:c4:6e:88:49:15:80:bd:fd:a6:
         66:46:3e:29:fa:88:57:89:48:7e:f0:0e:0d:49:7d:0f:7a:15:
         f6:82:2b:10:93:61:95:ee:a8:d0:e7:cd:3d:d2:59:50:ba:ed:
         ab:86:78:4d:1b:8c:d2:72:5a:52:09:20:a3:a3:b6:22:ea:5a:
         c8:35:8a:98:25:ef:b5:c2:6e:1d:cc:67:a9:b4:07:24:80:a7:
         96:57:5f:2c:6a:ff:15:d8:fe:13:1a:57:92:a8:63:5f:44:d1:
         24:e4:db:a1:eb:0b:92:1b:13:12:b9:e4:83:75:b3:0f:a8:8c:
         0b:da:f7:cf:02:b6:bc:3f:79:d9:3f:77:f1:60:74:a9:a1:dd:
         39:2f:b1:61:de:49:0b:a4:8c:75:7f:ca:76:48:c9:e7:77:22:
         33:10:db:9c:43:18:8e:66:7b:a9:86:8d:c7:d8:f3:b6:13:1d:
         19:c5:54:9b:c2:da:cd:44:71:84:84:29:bb:91:4d:9f:94:ee:
         73:1f:93:b3:de:b0:06:4a:dd:13:35:63:d2:57:3f:3d:3e:4d:
         30:f9:d6:3f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMnS7tPD8FuSEWRfmR1PHpi0AJzEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDgxMDA5WhcNMjYwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ODgxYjM2MDc2MDg4NWYwYzhmMTMzMGE5Nzg4ZjAyMjMz
MjhjMzMyMWFkODkxZDVmZDMwMTA3NzQzYjY4NzhlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUjbzCo7fmPZgFtoY6qIzpBxAwMRRrgIhs9XoRKFoWg2xN
TUMCOdu422fWztfubBef1VCdfRG554mkqrH1X5h2iUpqpgx+0EyTWCYjOS4TD74x
hEPZQtMNaBEDDaGH6TSED2XYyHv4w98OLyz5lVTVk/ptb6J4Zk4v224gDLXTocAR
s/6f5lVWgEPk/FIAhEibwevO0UQONLbwnC2ZM3LmaPerAdadS8zt1Xi9ZmpcnhkQ
lpVR6+RKbfT8qMM3KYKStBZ5CogAFzCtrdc5e+r5DG147oTWGqqz5UFH+Hu6Rvgz
ajKLL0nKR3ozSwaRKrd6NiilIXk4OG+G6FK+qan/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUsLDaFSto2QwhprxYLICjB+cufwEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2YzYzNjOGE4LWIzMWMtNDM1Mi1iMDUyLTJjODVmNjdjMzA3MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAGg4wDQYJKoZIhvcNAQELBQADggEBAEx/T6eGNjSwkckukK124Tx3
2HFTACnfIWz9RjNajxvz5rfIk+ItrhsaZf7q/cRuiEkVgL39pmZGPin6iFeJSH7w
Dg1JfQ96FfaCKxCTYZXuqNDnzT3SWVC67auGeE0bjNJyWlIJIKOjtiLqWsg1ipgl
77XCbh3MZ6m0BySAp5ZXXyxq/xXY/hMaV5KoY19E0STk26HrC5IbExK55IN1sw+o
jAva988Ctrw/edk/d/FgdKmh3TkvsWHeSQukjHV/ynZIyed3IjMQ25xDGI5me6mG
jcfY87YTHRnFVJvC2s1EcYSEKbuRTZ+U7nMfk7PesAZK3RM1Y9JXPz0+TTD51j8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:52:00 2025 by rpki-client