This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb4056dd-8047-4d88-bc61-87b5eb5804c6.roa
File:                     fb4056dd-8047-4d88-bc61-87b5eb5804c6.roa (raw, json)
Hash identifier:          pWEF79M79az3lizK2F7n3dC1R6Y+i3OAKfAIFO9Piqs=
Subject key identifier:   15:72:4C:E2:BE:37:89:77:E4:8E:50:F8:A4:CD:CF:2A:F4:31:D2:EA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       06D89565BBE1DF3078A65A759CBB425DE5F95115
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb4056dd-8047-4d88-bc61-87b5eb5804c6.roa
Signing time:             Tue 25 Nov 2025 09:10:59 +0000
ROA not before:           Tue 25 Nov 2025 09:10:59 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38a0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d8:95:65:bb:e1:df:30:78:a6:5a:75:9c:bb:42:5d:e5:f9:51:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 09:10:59 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=5c74e6d3bcad9a903784b2e95ab8f5eb9974e3fe5d97a3e5224aaaddc366f16e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:0a:89:11:5b:7c:7a:81:08:4a:87:d8:96:
                    62:fa:8b:74:2d:ea:b2:8f:19:bc:c4:2f:77:fb:8b:
                    a5:5a:49:ff:51:28:bd:3a:26:61:df:c1:7e:11:14:
                    63:34:ba:8b:a1:60:da:25:40:55:fe:09:d4:35:09:
                    c2:30:ae:62:ce:59:17:4c:85:9e:56:00:9d:d4:b6:
                    4f:0b:69:fb:e3:b5:e3:40:fe:df:bb:b8:f6:ac:38:
                    e7:7e:64:d0:93:42:c4:57:83:e6:f1:9d:5a:f1:a9:
                    3f:ef:99:5a:9e:8d:7e:18:fa:7f:8e:86:ed:ea:17:
                    d1:27:00:eb:af:d5:cc:aa:18:b7:bc:13:f6:3d:fd:
                    be:0f:1e:12:15:c0:a7:d6:4c:b7:8a:c8:f4:06:2c:
                    c1:4e:93:3d:b6:bd:5e:97:e2:06:76:92:6f:74:57:
                    2b:a8:b4:38:66:f1:14:05:f6:73:26:aa:3d:9a:7a:
                    96:94:21:93:12:5b:91:29:2f:d1:7c:48:2b:12:0b:
                    5e:dd:12:d1:d8:3d:09:4d:38:7b:fe:b3:69:2f:08:
                    1d:d3:21:e1:57:24:9f:0f:0d:7d:af:03:c6:a5:92:
                    85:24:fb:68:a2:02:6b:10:d6:94:83:10:c4:ef:4c:
                    1e:4e:1d:ec:c3:80:e3:65:7e:bb:ff:b2:f6:8d:5c:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:72:4C:E2:BE:37:89:77:E4:8E:50:F8:A4:CD:CF:2A:F4:31:D2:EA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb4056dd-8047-4d88-bc61-87b5eb5804c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38a0::/47

    Signature Algorithm: sha256WithRSAEncryption
         b9:df:c3:65:9b:83:7c:40:3c:c4:95:00:59:40:fe:79:64:01:
         c0:0e:de:e7:8c:b0:32:4e:59:ea:bb:9e:57:cd:f0:d7:0f:35:
         92:df:e4:02:2d:54:e0:1a:f1:3d:5e:0c:8a:cb:76:d1:d1:87:
         8a:02:2e:e6:59:89:9b:fa:8c:12:51:15:d5:79:b2:4f:23:f7:
         ed:a2:00:1c:c0:c3:e3:9e:78:26:76:06:64:f7:c4:ee:69:12:
         56:68:bf:72:19:fe:a7:38:90:92:3f:91:12:e1:29:81:6e:cd:
         00:6c:18:80:05:79:00:e7:87:8e:a2:86:61:8d:72:8c:25:46:
         0d:30:14:32:70:12:57:9d:9f:97:0d:e4:c8:fe:7b:89:a5:8b:
         4b:35:54:f3:24:d6:20:5a:31:66:2c:4c:b6:c9:5a:4f:16:eb:
         6b:b6:d5:dd:8a:a0:80:2a:d6:10:3f:f9:0b:d1:74:92:21:4b:
         f4:5c:9b:e2:78:82:91:f0:5a:ac:20:18:5c:87:2b:0f:c0:3e:
         c4:a2:74:8a:9b:05:98:ec:b0:6d:15:fb:b5:e3:79:7b:4f:fc:
         79:ed:61:18:64:03:dc:11:72:9f:a2:04:b4:00:7a:bf:f3:78:
         7d:81:1f:da:a8:61:ee:f7:82:15:17:3d:5d:ff:d4:99:c5:e5:
         d4:d6:4e:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:50:15 2025 by rpki-client