This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff7d8f6c-2ddf-447d-b1d1-dbd51d2573a6.roa
File:                     ff7d8f6c-2ddf-447d-b1d1-dbd51d2573a6.roa (raw, json)
Hash identifier:          54ggy3Vxx3gqwYwxpLIO3vDtLtj38ywqrfbNyXgiZ8g=
Subject key identifier:   A0:B1:33:43:62:5A:00:3A:3C:5F:FB:89:EE:2B:AE:CE:5D:0C:77:90
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       554850C804732B8CB1E62A4DAA12F68B869B82EF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff7d8f6c-2ddf-447d-b1d1-dbd51d2573a6.roa
Signing time:             Tue 25 Nov 2025 15:41:33 +0000
ROA not before:           Tue 25 Nov 2025 15:41:33 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1aa0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:48:50:c8:04:73:2b:8c:b1:e6:2a:4d:aa:12:f6:8b:86:9b:82:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 15:41:33 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=fb1b493d9dd3d51e118817197e88a67ec74798e36cc8caac77ec9cf2bd996418, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:f7:24:3b:4c:af:ef:75:bb:0a:9a:e0:bb:
                    d3:24:21:1e:a9:b3:9d:22:a0:d2:30:16:2c:11:cb:
                    51:04:24:87:4f:24:25:a7:72:a6:06:5b:92:c1:ce:
                    6c:79:9b:01:4a:d4:b5:e0:d9:fb:68:06:0f:a0:be:
                    6e:2d:43:15:7a:05:74:d6:b6:4d:43:48:99:e9:9d:
                    2d:eb:d7:58:6f:26:2f:4b:95:d4:fa:ed:51:44:62:
                    39:30:ad:70:12:ca:4e:bf:3b:68:dd:51:5a:60:3c:
                    c1:40:3b:49:f3:f5:76:ff:19:fb:4c:c0:57:56:47:
                    cb:5a:ed:07:72:4f:3b:b1:ad:0c:45:12:6e:5a:3f:
                    24:1d:f4:c0:ec:b7:4d:da:2d:1f:48:c1:a8:1d:06:
                    df:33:cf:98:11:bc:61:02:e2:2d:5b:4f:ee:69:24:
                    2d:82:48:d6:7c:2c:78:3b:46:84:68:12:6a:be:2d:
                    a3:42:30:6a:54:2f:db:6a:a4:61:b9:27:95:3a:2e:
                    9e:3d:84:65:32:82:f9:82:54:2e:4f:c6:77:6d:e1:
                    73:fc:ee:38:22:a6:6c:2c:d5:7f:11:ce:6a:0c:96:
                    9b:39:27:46:62:49:d3:22:dd:92:f2:e0:f8:5b:f6:
                    b5:97:39:5b:1b:d3:0e:bd:6f:8a:0e:82:d0:cc:78:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B1:33:43:62:5A:00:3A:3C:5F:FB:89:EE:2B:AE:CE:5D:0C:77:90
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff7d8f6c-2ddf-447d-b1d1-dbd51d2573a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1aa0::/45

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:60:40:46:6d:a0:9f:af:da:7a:01:36:cd:a2:51:6c:51:
         8f:f2:07:0b:30:3b:a8:b5:76:c7:a2:7c:cd:95:7d:8a:a3:d7:
         94:57:50:e9:8d:5e:7a:fd:ab:51:ef:44:0b:dc:9a:31:8a:fa:
         c6:30:66:84:5c:e3:cb:c2:d5:9c:39:ca:92:31:f7:bd:c5:c3:
         b7:24:bd:6f:8b:ac:b8:7e:80:bb:2b:ed:97:3b:10:11:ae:28:
         61:ce:78:61:1d:ff:70:68:f8:92:3e:e2:70:93:44:d0:0c:27:
         6f:e9:ad:2d:79:ac:9d:af:aa:4f:2e:56:77:22:ee:36:83:5d:
         08:cc:77:ba:2b:4f:ea:71:a6:48:94:75:64:1d:49:ed:06:bb:
         4f:89:26:9b:a1:dd:22:af:6f:27:3b:cf:96:5e:8a:62:8e:c6:
         9c:ee:50:88:c9:34:09:5f:44:f3:75:ac:a1:c6:67:a3:be:b4:
         ae:4d:1c:38:ae:da:62:68:7b:c0:77:4d:2b:ff:f6:d7:df:76:
         a6:37:6d:94:13:88:35:cd:fc:80:b0:a0:ea:59:7a:2f:54:ca:
         f8:1f:f0:67:20:b6:26:b9:0f:6d:a0:13:04:94:00:74:a2:3a:
         60:cd:4b:7c:b3:9b:0d:99:9f:4b:0d:34:90:20:7d:cf:00:bb:
         8e:8c:7c:f5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVUhQyARzK4yx5ipNqhL2i4abgu8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTU0MTMzWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYjFiNDkzZDlkZDNkNTFlMTE4ODE3MTk3ZTg4YTY3ZWM3
NDc5OGUzNmNjOGNhYWM3N2VjOWNmMmJkOTk2NDE4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC66/ckO0yv73W7Cprgu9MkIR6ps50ioNIwFiwRy1EEJIdP
JCWncqYGW5LBzmx5mwFK1LXg2ftoBg+gvm4tQxV6BXTWtk1DSJnpnS3r11hvJi9L
ldT67VFEYjkwrXASyk6/O2jdUVpgPMFAO0nz9Xb/GftMwFdWR8ta7QdyTzuxrQxF
Em5aPyQd9MDst03aLR9IwagdBt8zz5gRvGEC4i1bT+5pJC2CSNZ8LHg7RoRoEmq+
LaNCMGpUL9tqpGG5J5U6Lp49hGUygvmCVC5Pxndt4XP87jgipmws1X8RzmoMlps5
J0ZiSdMi3ZLy4Phb9rWXOVsb0w69b4oOgtDMeEmPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUoLEzQ2JaADo8X/uJ7iuuzl0Md5AwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2ZmN2Q4ZjZjLTJkZGYtNDQ3ZC1iMWQxLWRiZDUxZDI1NzNhNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAGqAwDQYJKoZIhvcNAQELBQADggEBAFZfYEBGbaCfr9p6ATbNolFs
UY/yBwswO6i1dseifM2VfYqj15RXUOmNXnr9q1HvRAvcmjGK+sYwZoRc48vC1Zw5
ypIx973Fw7ckvW+LrLh+gLsr7Zc7EBGuKGHOeGEd/3Bo+JI+4nCTRNAMJ2/prS15
rJ2vqk8uVnci7jaDXQjMd7orT+pxpkiUdWQdSe0Gu0+JJpuh3SKvbyc7z5ZeimKO
xpzuUIjJNAlfRPN1rKHGZ6O+tK5NHDiu2mJoe8B3TSv/9tffdqY3bZQTiDXN/ICw
oOpZei9Uyvgf8Gcgtia5D22gEwSUAHSiOmDNS3yzmw2Zn0sNNJAgfc8Au46MfPU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:51:23 2025 by rpki-client