This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f5ab0f77-babe-4d38-8d99-63e50c0181ab.roa
File:                     f5ab0f77-babe-4d38-8d99-63e50c0181ab.roa (raw, json)
Hash identifier:          atUoBknzotVZgSWyFWwrfNx4aovy0+PM9VTdRbGzMwQ=
Subject key identifier:   B5:B8:09:B2:E7:1D:5F:58:79:21:8B:D7:1A:58:46:6F:0E:ED:8C:E6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       56B53677A484BB0C2B6C875B8865A716EBCEE655
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f5ab0f77-babe-4d38-8d99-63e50c0181ab.roa
Signing time:             Mon 24 Nov 2025 01:00:53 +0000
ROA not before:           Mon 24 Nov 2025 01:00:53 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f48::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b5:36:77:a4:84:bb:0c:2b:6c:87:5b:88:65:a7:16:eb:ce:e6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 01:00:53 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=2ae6d9e5b2082ee98072a9aea6da665028c30292106df812266919902246f0dd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:56:96:a1:c7:5a:03:4f:2f:a5:92:5e:d0:
                    be:21:ee:d4:0f:62:82:94:5d:09:40:1e:b2:e1:3e:
                    ed:b9:13:e1:b1:f0:b2:08:8a:c1:a8:c3:25:83:72:
                    f7:fa:79:09:42:45:e0:aa:85:0b:cd:2d:a8:d0:b6:
                    bd:b9:5a:f6:3c:40:d3:a4:7c:09:2a:12:f1:57:90:
                    8b:b0:86:cb:35:ad:a0:9e:67:9b:6c:63:a9:fd:bd:
                    b5:7f:87:00:95:76:ff:c3:a7:14:31:0e:54:29:a8:
                    3c:e2:ee:f9:c4:e1:b1:7f:2c:a3:1b:ee:a3:ff:8a:
                    df:9c:5e:9f:80:36:b8:08:0c:22:5e:06:a8:74:6a:
                    fa:50:21:a9:4a:25:3e:ea:d8:d2:ca:25:99:ed:2b:
                    f0:d4:88:d9:44:bc:81:6a:30:fb:5a:e2:47:a1:c4:
                    1f:21:21:7d:70:a1:b9:5a:08:84:5e:74:ca:4c:ff:
                    23:94:68:6a:6b:b6:12:bb:0d:43:1b:c2:6d:e1:02:
                    34:67:53:d1:ac:f7:8b:9a:c5:b0:89:ef:65:e6:67:
                    9d:3c:de:ae:e6:f0:32:20:9b:1f:a1:3f:0b:b7:3a:
                    de:df:31:ba:5a:15:de:e3:d3:47:34:a2:68:90:aa:
                    2b:e1:94:b0:d8:c9:ee:c1:9e:ea:5f:a7:28:9a:44:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B8:09:B2:E7:1D:5F:58:79:21:8B:D7:1A:58:46:6F:0E:ED:8C:E6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f5ab0f77-babe-4d38-8d99-63e50c0181ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f48::/47

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:73:e2:a8:ff:1c:cf:e0:a3:19:d1:75:db:05:82:3e:ae:
         33:08:9d:49:29:79:e5:ef:09:d7:72:4e:31:43:bd:fc:3c:63:
         8a:73:e3:07:2e:21:e3:8b:3a:27:f7:07:59:f2:eb:fe:f6:0b:
         43:78:38:3f:74:37:49:44:8c:a5:3a:d9:f5:06:ac:79:a9:d2:
         19:2f:90:91:28:87:91:8c:5f:4a:0b:9b:14:8e:23:1d:bc:ea:
         a6:b0:84:0b:6e:70:91:ac:c2:c5:91:04:68:0c:d7:e5:14:d6:
         c5:50:f1:dd:30:0f:a3:49:90:c6:ba:87:fb:69:3e:1b:76:47:
         0f:ba:4f:87:d0:26:a7:70:01:a2:64:c2:88:43:71:ce:7e:5f:
         28:41:89:11:a8:da:55:cf:e7:01:2c:2d:b7:8f:2b:b5:e7:5f:
         40:90:1d:1c:6a:c2:5c:c8:55:15:d8:e0:85:f9:5b:38:72:26:
         16:74:48:5f:f0:4c:8a:19:b3:2b:40:f3:96:7b:57:c0:d8:a0:
         90:d5:9e:79:e1:81:9a:bf:33:b4:69:ef:3e:13:c4:e1:8f:92:
         4f:31:ea:d3:96:10:58:83:7f:f4:50:04:ae:26:4c:aa:e1:ba:
         72:8a:87:74:6b:b5:51:45:71:6e:d5:2b:6a:10:9d:1f:69:3c:
         00:bb:12:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:13:15 2025 by rpki-client