This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/630c8b28-15e6-4e6d-a242-56264a6725c8.roa
File:                     630c8b28-15e6-4e6d-a242-56264a6725c8.roa (raw, json)
Hash identifier:          0kvywKe/ET4MdB71//RXRWnC4TJM1oeUi7ju8RO4o90=
Subject key identifier:   A5:7F:35:4D:E0:D2:46:E4:09:9B:9E:25:F4:C6:CE:79:6E:C3:09:D9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2FD42F3E463DDA9BAFB6E1B589D79609A74E14CD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/630c8b28-15e6-4e6d-a242-56264a6725c8.roa
Signing time:             Fri 31 Oct 2025 04:36:37 +0000
ROA not before:           Fri 31 Oct 2025 04:36:37 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39d0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d4:2f:3e:46:3d:da:9b:af:b6:e1:b5:89:d7:96:09:a7:4e:14:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:36:37 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=eada256ddcec12ee5b737c07498aed7e1b27e5f45c0ff234922d145f326aea9b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:3d:30:b3:31:7c:0f:ca:c3:c2:6f:96:49:
                    6d:c4:53:cc:7c:07:8e:bf:c5:84:42:94:98:bf:e8:
                    45:be:58:4c:b7:11:10:12:36:91:67:8b:83:37:d6:
                    67:f0:69:5f:c7:33:42:31:33:95:20:44:96:59:e4:
                    5a:c5:d5:b8:a3:8e:b2:d5:5d:71:cc:71:47:de:13:
                    25:ba:0b:66:31:2b:b1:3b:72:98:ab:ff:9e:2a:57:
                    85:a2:e7:a9:72:2b:81:c6:b2:60:27:d7:11:6a:82:
                    28:26:30:6a:53:09:f7:2c:90:7b:a7:cd:db:bb:2a:
                    f2:c6:58:4b:60:ba:5c:22:69:e1:bd:2f:c7:aa:d5:
                    a2:85:ed:46:7c:5f:15:ac:47:35:fa:a0:92:50:9c:
                    7d:f2:5e:f2:a9:ce:94:fa:7e:02:d3:10:37:cd:e9:
                    d1:59:e9:69:a2:c1:73:47:6a:04:42:14:80:34:1a:
                    b5:c2:ff:46:d9:e7:81:d9:dd:19:c3:0a:17:f5:d2:
                    ad:e8:f1:8d:26:42:8c:d1:d1:cd:cb:c0:7e:ee:f9:
                    8b:d5:1e:fb:d8:5e:d4:6f:e1:cf:7e:0f:98:bf:fa:
                    57:9f:f4:5b:49:ba:c4:c7:c9:a9:66:f3:27:f2:95:
                    2b:c6:81:75:e3:ad:32:d2:ac:a3:80:89:b8:a7:61:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:35:4D:E0:D2:46:E4:09:9B:9E:25:F4:C6:CE:79:6E:C3:09:D9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/630c8b28-15e6-4e6d-a242-56264a6725c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39d0::/46

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:74:71:aa:ca:86:b1:14:9b:61:21:85:35:d0:0a:65:7b:
         09:1d:91:23:08:6a:5e:d8:d4:90:8e:59:b7:bd:2a:36:9a:7d:
         d7:b3:bd:ee:88:a6:09:08:05:62:38:2b:03:60:05:3c:b0:ec:
         1b:f0:7f:89:03:e7:44:23:d4:f5:03:27:71:fc:84:a9:79:1f:
         34:e9:01:a1:1b:ce:e6:3f:6f:43:02:d3:74:23:f8:79:5d:37:
         a6:7a:df:0a:c1:0c:c0:79:7d:08:61:d2:13:a6:29:6b:27:40:
         cf:cf:da:37:e5:9b:0f:5a:a9:e2:ba:45:7f:63:8f:02:03:02:
         5f:67:ee:ad:8c:f0:c9:17:c2:fe:3d:36:3b:4e:bd:41:21:dc:
         8d:48:3a:21:53:f2:aa:f1:7a:69:4f:07:05:28:2a:6e:b0:dc:
         df:a2:58:51:5d:f1:1d:78:bc:91:0e:18:ca:f1:39:ef:a2:b4:
         2a:0b:c9:d2:e0:47:ec:8b:75:ef:e3:51:6c:7e:e4:71:dc:6a:
         46:8d:a4:b1:3c:9e:03:44:da:3b:93:a3:d3:bb:87:7a:43:8f:
         a8:30:b6:b2:0c:07:f6:4e:1c:0d:78:75:55:90:44:ba:1d:7e:
         c8:9f:2a:3e:1c:65:75:7f:97:7e:8b:f5:66:b5:bf:10:ea:2c:
         cd:26:ab:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 13:06:31 2025 by rpki-client