This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb4dcd50-9b99-41a6-b92a-e595c67ca39e.roa
File:                     fb4dcd50-9b99-41a6-b92a-e595c67ca39e.roa (raw, json)
Hash identifier:          8kGwFkgCa1YMjbxHSNwbai8we3Ldk5TQuaYYbnxUsXg=
Subject key identifier:   9A:75:1B:5B:74:24:F7:D4:7C:69:A3:81:89:91:11:08:87:46:4A:5C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2F2E07CA8AB038F43875B4CEC9BBF6BF764109FF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb4dcd50-9b99-41a6-b92a-e595c67ca39e.roa
Signing time:             Tue 25 Nov 2025 08:42:16 +0000
ROA not before:           Tue 25 Nov 2025 08:42:16 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f10::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2e:07:ca:8a:b0:38:f4:38:75:b4:ce:c9:bb:f6:bf:76:41:09:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 08:42:16 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b104cbfebc61abb8da69dbd0b3efa3ef74ffc0bdf85167c9e6ee16f0eb5d23b9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:e7:98:46:ef:d1:7e:4d:c5:a5:9d:7c:ef:
                    b1:5b:98:e1:d1:84:e4:20:b5:b9:c3:e6:5f:c1:10:
                    11:be:9d:41:fa:9f:5e:a6:60:80:1b:af:bb:4b:10:
                    51:6f:92:83:3f:a0:d3:d6:97:83:31:cb:8b:49:c0:
                    42:80:79:c8:44:f5:1f:98:85:e0:a6:87:2a:2a:e8:
                    6c:bf:4e:10:77:0f:5d:4f:ad:6e:90:11:da:9e:20:
                    38:5a:f0:d0:3b:ec:10:c3:cd:d4:b8:0e:60:c3:b8:
                    41:2c:7d:cd:e8:d6:e6:1b:af:8c:a2:00:95:27:fc:
                    d9:8a:19:ac:bf:13:d7:16:13:44:8c:68:0b:05:87:
                    26:b7:f4:4f:fe:d7:d9:76:77:c1:36:69:14:ec:fa:
                    7a:d0:d5:3e:bb:44:e5:e6:74:2c:3b:7e:d3:d6:56:
                    e0:2b:d5:3f:81:e7:07:e2:7f:39:9c:13:72:7e:69:
                    0e:3d:ca:98:8a:cc:b9:b4:55:c8:6b:49:d2:45:1e:
                    8a:d5:02:9a:58:c8:b6:51:cb:7e:0b:3a:17:47:9e:
                    c9:5c:ec:80:7a:ae:6c:3f:e5:7c:0a:72:7f:ee:05:
                    cd:b8:b3:9a:90:c8:a6:6a:c1:2d:97:2c:05:40:c8:
                    6e:a4:da:51:fa:04:d8:89:f4:03:d9:c2:b0:12:f3:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:75:1B:5B:74:24:F7:D4:7C:69:A3:81:89:91:11:08:87:46:4A:5C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb4dcd50-9b99-41a6-b92a-e595c67ca39e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f10::/45

    Signature Algorithm: sha256WithRSAEncryption
         53:e4:3e:ff:a0:51:7a:31:01:b2:8e:4e:a6:36:3c:08:f7:85:
         db:58:ce:bb:59:ff:d9:fa:02:4c:6e:9d:20:a2:fe:92:42:b7:
         f8:95:1a:69:e0:ad:fb:6b:f6:38:21:44:bd:a6:f4:74:78:b6:
         62:b3:3d:69:05:cf:73:60:e1:22:40:5a:f3:92:11:08:77:90:
         29:8f:76:19:eb:97:c9:51:b9:fa:48:8a:b7:ef:b6:26:5a:0f:
         6d:ba:50:f6:77:4b:2a:2b:b5:5c:dc:5f:f8:f4:a8:42:f7:30:
         0b:f9:56:a2:45:84:aa:27:52:80:a5:88:0d:e1:b9:58:e5:d2:
         eb:d0:c7:48:13:6a:10:d5:ee:47:76:c8:ce:c8:e9:21:0a:61:
         32:47:0d:9e:a8:16:4b:af:68:88:12:bc:ab:22:2c:61:c6:1b:
         7e:35:59:f0:b5:79:05:87:bb:9c:38:3a:98:16:d1:9e:45:21:
         f3:9f:c4:c9:30:e2:94:05:68:62:db:fe:f5:be:5d:90:2c:c1:
         2c:7d:40:1c:09:96:51:5a:50:c2:28:a1:67:2a:af:cd:cd:21:
         da:ec:ae:09:13:e0:42:f5:ea:c7:b1:22:fd:9c:46:69:f6:66:
         16:9e:ec:8d:fc:60:b6:87:34:4b:f7:2e:bc:fe:6b:b7:68:41:
         4e:4e:fc:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:27:23 2025 by rpki-client