This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d588aef-dd6d-4314-86bb-29808b3e63c0.roa
File:                     4d588aef-dd6d-4314-86bb-29808b3e63c0.roa (raw, json)
Hash identifier:          icQHtswYerUdxzQgf0LtvwyhlDOHDVZZhrcxJomlkzA=
Subject key identifier:   27:E8:76:C2:63:53:1A:3D:7E:2E:6B:FF:88:3C:60:FF:F9:C9:A2:F8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02B941A8797D885E896D64A3499B3A96BFD36D98
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d588aef-dd6d-4314-86bb-29808b3e63c0.roa
Signing time:             Sun 16 Nov 2025 00:40:04 +0000
ROA not before:           Sun 16 Nov 2025 00:40:04 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.137.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b9:41:a8:79:7d:88:5e:89:6d:64:a3:49:9b:3a:96:bf:d3:6d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 16 00:40:04 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=67306ed73679f0672e4db3ff6d84600dcc43307f551f5352a053e3d6bf06a5d8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:60:4d:ba:18:03:04:aa:46:b1:3e:b5:e5:
                    c1:f5:f0:cc:ae:a8:c6:b3:0d:4d:3d:25:39:7d:a0:
                    5f:be:32:33:f1:43:85:5e:cc:ac:41:ca:78:9f:28:
                    03:7c:1e:aa:9c:b5:6c:53:e7:e8:12:cf:e2:2c:e5:
                    bd:2e:5c:20:fd:70:e8:81:b4:d5:4c:3b:18:0f:fa:
                    08:7b:5c:17:40:0a:f5:dd:b9:82:8a:57:27:fd:4a:
                    a9:c1:37:ae:fa:be:01:2c:fe:57:ec:e4:10:d7:b4:
                    a3:09:40:9c:d2:2c:4d:03:6c:25:33:8e:fd:5c:21:
                    f5:6f:4b:ea:22:1b:f1:e6:7f:f8:d0:a8:d3:77:19:
                    46:b9:45:51:6d:b3:9d:fa:c1:97:e7:5c:c0:47:b0:
                    15:f4:64:0c:38:57:b4:ee:3d:fc:f7:a8:29:0e:6e:
                    14:bf:5d:3b:78:e7:7a:bc:68:f0:d0:74:d7:3b:4b:
                    16:94:1f:82:f1:aa:eb:f9:a7:e4:66:ba:99:85:a6:
                    9d:06:dd:45:c1:c8:2a:d1:dd:b1:e9:89:fa:65:91:
                    48:c9:4e:fe:a3:c1:ad:21:1c:5f:c1:13:dd:ee:22:
                    cb:dc:b0:af:43:c6:e7:89:8b:e7:05:c1:3f:fc:73:
                    35:e6:7d:fb:a1:fd:54:41:84:9d:6e:5c:00:0a:d9:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E8:76:C2:63:53:1A:3D:7E:2E:6B:FF:88:3C:60:FF:F9:C9:A2:F8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d588aef-dd6d-4314-86bb-29808b3e63c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:f3:13:d0:86:70:e0:26:77:1e:e3:79:9c:c8:f7:f9:d4:b9:
         4a:2e:82:50:68:c0:5a:c2:fb:f5:4d:58:fa:9c:c4:7a:b6:c7:
         32:07:18:ff:eb:49:35:cf:03:e8:ad:c4:18:44:ad:1b:96:2e:
         30:16:94:68:5f:99:bd:d8:85:12:1f:07:9e:63:a4:63:dc:44:
         c6:90:d0:ab:bf:c5:cc:0f:e9:09:02:8b:de:5a:8c:46:ee:0b:
         17:68:8f:bf:c9:4f:11:d6:71:b7:65:92:b6:2e:e7:12:ec:36:
         7d:11:7e:9c:9b:d8:b8:29:be:52:99:5b:2c:61:56:87:c8:11:
         d1:f1:1e:af:1c:f3:52:b2:77:48:83:57:6e:4b:b7:14:1b:fd:
         7a:e0:58:ac:27:c7:fa:eb:0d:53:5e:0b:88:82:ab:6b:de:55:
         0d:07:74:68:82:1d:a8:64:e9:64:de:a0:37:ad:15:e1:f1:0f:
         e3:2f:1c:51:e6:cc:9d:15:c0:44:72:a4:63:e8:1a:8a:88:43:
         ce:7d:a4:f5:81:3a:dd:20:a8:5d:a7:f0:bd:b3:ff:36:7c:d9:
         a3:0e:ab:40:dd:28:03:96:ab:4a:05:e7:52:a9:33:68:b8:25:
         02:26:9c:28:ec:ca:f5:c8:a6:06:b8:72:5f:32:c9:e5:d4:c0:
         08:16:e9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 11:49:51 2025 by rpki-client