This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17b9226e-25fd-4578-84dc-8ac899b9ad31.roa
File:                     17b9226e-25fd-4578-84dc-8ac899b9ad31.roa (raw, json)
Hash identifier:          /YPWnzsSlFWOxoXKmYL+6z/266ij8iqJCKQEUjvfjRs=
Subject key identifier:   FE:7F:A3:8B:CC:95:F9:05:76:CC:F0:2C:DD:56:94:4F:35:C5:35:3D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       20F31599082298C006E1875B52B363B970131848
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17b9226e-25fd-4578-84dc-8ac899b9ad31.roa
Signing time:             Thu 30 Oct 2025 23:29:01 +0000
ROA not before:           Thu 30 Oct 2025 23:29:01 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2dc8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f3:15:99:08:22:98:c0:06:e1:87:5b:52:b3:63:b9:70:13:18:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:29:01 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=275b8857e17faa74f9ba02ee12f604867c10cb8a12abb0af38db20707c95aa97, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:60:85:40:3d:01:f3:bc:bf:12:64:a2:bd:
                    e2:27:fd:88:38:83:14:8f:d0:31:35:4f:c1:5e:50:
                    aa:a9:92:4e:30:7f:60:e3:86:06:9c:5d:74:52:6c:
                    13:61:a4:7f:49:bc:68:af:f1:30:5a:4e:79:a4:1b:
                    62:dc:97:2a:49:92:41:f7:c7:b1:51:21:23:8e:e7:
                    f0:74:8c:de:b4:a4:6e:36:0e:d2:33:bc:26:8a:48:
                    ee:b6:d3:a5:f1:23:80:7e:1a:f9:00:34:30:01:fc:
                    d8:84:0e:ac:e1:75:f6:12:05:ef:17:81:9c:4e:b7:
                    20:ac:42:45:57:e4:a5:7b:38:b0:8c:81:58:1e:83:
                    3c:12:56:d9:2a:d5:a1:63:b6:74:fc:7d:b5:d0:74:
                    1c:07:38:7c:ad:10:d1:3f:5e:87:6b:e6:f0:f1:4b:
                    4a:5d:fa:db:82:c5:cc:5a:e1:2f:c4:ed:59:64:61:
                    81:88:d4:89:a3:2e:86:bd:d2:c8:3f:97:e6:30:4c:
                    98:17:c9:cb:90:1b:65:17:52:7f:b2:a2:bd:5b:2a:
                    f1:15:56:0b:7e:15:0f:81:bb:a6:1f:1f:f5:3d:dc:
                    7b:93:e8:8e:dc:b5:4e:d9:41:4d:08:f8:42:74:52:
                    9e:13:4d:e4:61:f1:0e:d5:89:d3:48:a8:43:99:cc:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7F:A3:8B:CC:95:F9:05:76:CC:F0:2C:DD:56:94:4F:35:C5:35:3D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17b9226e-25fd-4578-84dc-8ac899b9ad31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2dc8::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:c9:2c:c7:d2:bb:f9:3c:78:51:33:af:9e:99:95:de:e6:b4:
         b6:51:9e:4b:5e:1a:1f:b7:0a:11:52:9a:0a:82:14:2f:c1:6f:
         5f:38:ca:7f:71:93:e1:6d:5c:b3:dd:73:1f:eb:3d:7d:ae:f8:
         02:8d:74:98:4c:e7:9e:7c:b4:7b:f1:4d:2f:ae:1f:a9:bd:bd:
         5f:a5:dd:b4:c5:c7:0e:19:3c:b8:ce:1c:cf:3d:c4:20:ef:14:
         7a:89:80:5a:81:11:57:bd:38:83:f1:2e:5b:4d:b5:61:67:aa:
         ac:11:e1:51:7b:58:32:af:6c:d2:1a:88:3e:d5:35:b9:73:af:
         14:41:4e:fb:e8:0b:d5:91:56:f9:f5:99:0d:6f:e3:c5:b5:20:
         c3:15:33:ab:e6:ef:3e:6f:d5:4e:30:3d:60:ee:e3:6a:5b:b3:
         04:66:26:ec:96:59:3b:7a:e0:29:af:e8:ee:ce:fd:68:81:f3:
         e0:2b:b3:26:4b:15:a8:3a:3d:6b:94:b7:9f:4b:8e:9a:bf:d5:
         fb:44:ed:60:20:26:04:51:be:c1:b9:b0:23:b3:60:96:db:93:
         c2:03:34:8c:26:68:10:95:46:5c:da:11:bf:71:f5:c8:6a:fe:
         6d:29:0a:11:60:39:55:bb:59:13:7a:58:fd:45:5f:73:44:d0:
         57:e9:c5:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 14:24:55 2025 by rpki-client