This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb70ca06-580a-405a-b7f5-742c6792f162.roa
File:                     fb70ca06-580a-405a-b7f5-742c6792f162.roa (raw, json)
Hash identifier:          l0h4RV7WSzyXzxDXacu5TUII9va/CG3+gClNF+Sl5ns=
Subject key identifier:   CA:82:03:E7:23:DD:4D:DC:58:FE:C6:A9:94:BB:63:BF:5A:6E:BA:E4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6E97595180A0541CF3EAB637090BA2D09475610E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb70ca06-580a-405a-b7f5-742c6792f162.roa
Signing time:             Tue 25 Nov 2025 07:32:22 +0000
ROA not before:           Tue 25 Nov 2025 07:32:22 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a68::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:97:59:51:80:a0:54:1c:f3:ea:b6:37:09:0b:a2:d0:94:75:61:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 07:32:22 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=23b05675eb304072def744c27777a8aa4ddab28f33903052e85c62e8beedd794, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:ec:8e:2d:15:e3:af:67:2e:cb:48:df:11:
                    3b:24:90:5f:b8:d0:44:2b:9e:a1:89:d6:73:39:87:
                    e2:8f:e8:8d:80:aa:61:95:1b:0b:83:0f:ae:45:33:
                    82:61:95:7f:fd:df:69:76:bb:42:46:9c:c4:35:77:
                    dd:91:b4:4d:ff:b4:3f:59:3e:94:85:69:7e:68:75:
                    34:b2:f4:06:86:f3:2c:b2:f9:6a:1a:7d:67:34:91:
                    7b:09:c9:64:b3:5b:93:31:93:f2:4b:9d:84:b1:39:
                    16:7c:b9:f8:21:74:13:4f:c3:3d:3f:bc:ad:3c:7c:
                    bb:c0:0b:62:52:ab:03:1f:18:b7:40:36:55:81:86:
                    d4:a1:1e:54:07:2a:78:1e:e0:f2:98:1d:46:a8:f2:
                    3b:ce:84:66:c7:88:ad:7f:92:4e:90:16:05:11:4f:
                    1e:33:11:ac:49:d2:0d:b5:ad:1c:a6:30:a0:46:2d:
                    1f:21:17:a0:87:7e:da:d4:a6:82:34:1f:17:d3:41:
                    44:e0:08:92:19:c0:5e:6c:8c:2c:03:6e:51:15:14:
                    84:96:a8:ae:b6:7a:34:73:7d:6d:09:61:90:7c:67:
                    bf:97:ec:8f:3d:07:45:f5:0c:80:02:15:b0:01:b2:
                    f4:cc:6c:5d:18:c0:1b:e6:be:04:d6:1f:83:2b:94:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:82:03:E7:23:DD:4D:DC:58:FE:C6:A9:94:BB:63:BF:5A:6E:BA:E4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb70ca06-580a-405a-b7f5-742c6792f162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a68::/46

    Signature Algorithm: sha256WithRSAEncryption
         73:38:39:71:ee:32:c0:3e:62:89:b4:f7:e8:c6:ee:1e:8c:1e:
         13:1e:04:0f:94:01:c2:10:87:bb:5c:44:d4:26:5a:a8:53:87:
         19:85:82:a1:01:ea:f8:f4:88:a4:0e:b7:0f:9a:c7:74:ce:0c:
         df:35:db:79:7c:a9:8f:82:1e:4c:e1:00:eb:18:8e:79:8d:3a:
         18:97:40:74:06:9e:05:38:1f:2b:90:29:91:20:65:c2:6a:4e:
         bc:0d:a9:8c:0c:02:be:e6:ee:51:7e:2c:a6:6f:fc:5f:04:c2:
         12:5a:ac:15:95:4e:3a:8f:96:0d:c8:f4:59:7c:45:80:e8:a2:
         6c:af:08:79:2d:ca:db:2b:3d:53:ef:00:8c:05:b2:f6:8b:2c:
         a0:9c:12:ba:03:22:3b:fc:d9:68:80:1e:8c:43:df:f2:a8:18:
         fa:7f:ef:32:c0:50:e6:28:be:86:fb:45:d5:46:c9:35:8b:b1:
         50:d5:fb:e6:b5:b1:11:ed:b1:45:bf:bd:53:79:ba:2a:ee:ee:
         a2:50:6d:4a:4f:f7:4d:58:5c:d6:07:cf:80:4f:b1:9d:e6:a3:
         fc:07:87:b0:48:bc:81:8c:5c:98:41:c1:56:be:98:a2:48:1f:
         22:68:82:c8:18:e4:73:19:1c:6e:09:1b:25:24:a8:7d:36:6c:
         c7:ad:3c:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:37 2025 by rpki-client