This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f54ded7c-3632-4c5a-bdac-adbe5548a332.roa
File:                     f54ded7c-3632-4c5a-bdac-adbe5548a332.roa (raw, json)
Hash identifier:          PdQqTi8Y1WeFgoUANTTimrqyueqQ3Vg8cpl9esTcy1Q=
Subject key identifier:   9B:BA:92:F1:AA:FC:57:2D:DD:97:73:37:1F:9D:AD:31:1B:D4:50:4F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1FC38CE0515A97BA2CD8FC14898E80D66CC6DAB1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f54ded7c-3632-4c5a-bdac-adbe5548a332.roa
Signing time:             Tue 25 Nov 2025 17:50:46 +0000
ROA not before:           Tue 25 Nov 2025 17:50:46 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2db0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c3:8c:e0:51:5a:97:ba:2c:d8:fc:14:89:8e:80:d6:6c:c6:da:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 17:50:46 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=faa90751730929a89d16534d529f13fa418993965699c04b6e9ffc8f4c8d0b94, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:bd:5e:76:9d:81:8f:aa:f4:b3:7b:34:55:
                    3d:de:ed:4d:35:c4:9e:ca:9f:d1:1d:69:f3:d1:a4:
                    72:93:03:eb:b3:a8:f4:ef:b4:c7:b0:73:31:ce:1b:
                    ef:4e:22:86:29:cd:be:c0:56:be:63:e1:b9:1e:1c:
                    c7:52:94:57:93:82:dd:a2:73:e7:36:56:48:0e:3d:
                    8f:05:28:a1:b1:72:cf:5c:55:b4:01:88:64:ec:31:
                    75:10:4f:94:ff:43:a2:16:0a:aa:61:bc:b7:5e:a1:
                    43:9c:2a:6d:77:d3:3e:94:e2:25:ab:fc:24:23:13:
                    e5:57:3f:3b:7f:63:11:fa:b7:bf:4b:03:a4:f0:73:
                    de:26:8b:2e:02:2f:14:ee:da:cc:82:53:ed:b5:9f:
                    20:3c:4e:06:78:69:b3:f6:7a:9b:63:48:34:c9:9f:
                    6c:23:48:77:ef:75:da:29:ab:4d:ad:91:7d:9f:28:
                    d8:5e:83:83:6a:a0:c8:0c:bb:af:ba:56:28:59:a1:
                    42:62:92:48:5a:d1:17:96:52:26:fb:5f:e5:85:15:
                    5f:00:2a:9c:cc:91:8e:cf:61:26:8a:d8:c6:90:ed:
                    f0:47:61:60:53:0b:a3:3d:39:39:5e:ae:d2:2e:d4:
                    ee:7e:57:02:01:ea:d3:b4:e9:e3:ef:4f:69:c0:4d:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BA:92:F1:AA:FC:57:2D:DD:97:73:37:1F:9D:AD:31:1B:D4:50:4F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f54ded7c-3632-4c5a-bdac-adbe5548a332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2db0::/45

    Signature Algorithm: sha256WithRSAEncryption
         a2:3f:7b:20:1e:04:31:c1:f8:41:d6:75:fe:97:4c:b6:3d:04:
         6b:28:00:02:d7:83:36:ca:9c:7a:7b:e9:e7:22:9c:69:bc:5d:
         6c:e8:eb:3f:ff:c9:9a:4d:9e:b4:c4:3d:28:9a:1e:79:e7:d1:
         bb:68:90:e6:4a:ea:70:90:07:89:83:e9:27:85:8b:a5:e3:96:
         0d:df:f0:20:a8:5e:bd:7f:7b:67:83:fc:86:9d:ca:13:ae:a7:
         aa:b7:ff:ba:58:e9:10:e9:70:25:86:0b:8a:27:22:32:31:9d:
         d2:c4:3b:be:b9:73:6b:f0:81:38:53:d6:92:b2:ec:9d:fc:f1:
         93:2c:2e:68:be:45:c4:c9:82:71:a1:35:42:97:6e:eb:d8:f3:
         c9:2c:04:b1:be:f4:52:21:da:f6:88:6e:88:0e:74:5b:b3:2c:
         4e:81:f4:3e:7e:e7:ab:b8:d7:cd:a1:65:9b:60:78:e9:52:78:
         6d:01:14:7c:84:a2:b0:f1:fd:ad:bb:cd:e6:9e:da:8a:5d:41:
         ea:8b:27:2b:1b:45:c6:63:82:8f:d9:48:ba:b8:ac:68:aa:e0:
         f4:d2:72:c9:38:ea:9c:a6:87:84:3f:d5:5a:08:69:a0:63:7c:
         ad:92:8c:c1:73:07:f0:4b:35:50:88:5d:da:49:1e:ca:73:ee:
         99:c3:29:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:35 2025 by rpki-client