This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15d6a17c-4f3a-414d-b4b7-d64530607b84.roa
File:                     15d6a17c-4f3a-414d-b4b7-d64530607b84.roa (raw, json)
Hash identifier:          3wjKkg0+b448I+OFCBNs4NBVOETMRn4XypK9+vFLLMo=
Subject key identifier:   E9:79:A1:DF:CC:32:88:B2:A7:37:9C:22:C9:CF:C7:C3:6A:1C:8D:70
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       49F8F357D9785FC5680816015F07754F827F32E6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15d6a17c-4f3a-414d-b4b7-d64530607b84.roa
Signing time:             Wed 31 Dec 2025 21:21:52 +0000
ROA not before:           Wed 31 Dec 2025 21:21:52 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:105a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f8:f3:57:d9:78:5f:c5:68:08:16:01:5f:07:75:4f:82:7f:32:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 21:21:52 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=48acd15655ad4e718b39219fddd3c4bc31791460e8f758a7f50ecba4f2cd0216, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:3f:45:d5:a6:01:bf:7c:41:73:7e:f9:14:
                    57:95:06:c7:ae:ec:ae:3f:3d:39:d8:c0:56:cc:f1:
                    e9:55:cb:7c:bc:13:9f:18:95:66:09:2b:48:74:e2:
                    73:cf:e5:da:a4:b7:62:6c:6c:9d:3c:cb:5d:a1:07:
                    dd:53:94:fe:a0:e9:90:e6:8b:e4:f9:ac:9f:72:cb:
                    6d:17:cb:24:69:d3:3e:c8:2b:f4:f1:b3:7e:25:3b:
                    dc:87:47:e2:46:48:81:9d:76:41:83:b1:f3:8a:1a:
                    4e:74:b2:c6:f5:20:4c:e2:5f:0d:f6:40:ea:1e:8b:
                    5b:e7:b4:2a:20:73:85:40:78:f4:5a:43:3e:e6:11:
                    a7:7e:b8:54:7b:b8:b8:f5:a8:4c:53:99:01:7c:1c:
                    f0:21:e3:d8:2f:30:60:da:8a:1a:37:1b:f0:fc:0b:
                    95:ea:3a:96:7b:f2:f6:26:ee:5d:04:b0:53:79:16:
                    73:af:68:11:8a:fd:65:8e:44:b2:a7:71:64:50:1d:
                    26:16:13:44:40:41:81:a2:87:2c:ee:3b:62:50:7a:
                    9d:b6:8f:aa:18:66:ae:37:f4:5f:f5:59:34:35:8e:
                    00:6e:49:f0:63:af:2d:a1:69:56:a2:3e:4e:52:96:
                    f2:ba:eb:86:c1:d2:bd:78:e3:e5:39:e5:c2:b8:ee:
                    3e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:79:A1:DF:CC:32:88:B2:A7:37:9C:22:C9:CF:C7:C3:6A:1C:8D:70
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15d6a17c-4f3a-414d-b4b7-d64530607b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:105a::/47

    Signature Algorithm: sha256WithRSAEncryption
         2c:df:cd:a5:8e:d9:71:19:d0:de:04:13:38:a6:50:a7:77:75:
         33:08:84:69:9b:74:85:5e:a6:39:dc:51:51:4c:8a:b5:52:1a:
         d0:54:0f:30:8a:04:1f:9c:50:4f:2f:c1:1b:06:ac:34:7b:67:
         77:c1:f2:65:c0:74:de:3a:ac:3b:4c:4e:9e:82:66:6c:41:b7:
         b4:d4:0c:af:35:af:63:98:95:22:1d:40:96:a7:20:0b:75:04:
         f0:4d:08:55:b2:3d:15:64:dc:55:3a:07:63:4d:5d:63:5d:dd:
         e0:07:04:64:02:bf:49:33:01:af:41:80:07:e2:36:34:72:98:
         75:5a:b1:4c:92:03:7c:83:b7:3e:ec:a1:13:9b:f7:9b:e7:86:
         e8:08:35:94:ca:39:1b:0c:d0:a9:c3:80:79:83:82:67:fa:49:
         c4:13:86:d3:0d:76:df:ff:b4:c4:ba:4f:30:e8:62:77:25:05:
         6c:d8:ef:1f:97:0c:83:49:e9:9c:11:cc:dd:79:73:56:07:63:
         97:98:40:79:83:53:76:55:7d:3f:6c:44:d5:47:5e:f5:b1:0c:
         c2:be:40:ba:41:91:1c:68:21:ee:68:d6:e6:ba:c2:43:17:29:
         0a:31:66:05:4d:88:5b:0f:7c:ed:23:4f:0a:36:73:05:5b:11:
         63:63:cd:f5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSfjzV9l4X8VoCBYBXwd1T4J/MuYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMjMxMjEyMTUyWhcNMjYwMzMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0OGFjZDE1NjU1YWQ0ZTcxOGIzOTIxOWZkZGQzYzRiYzMx
NzkxNDYwZThmNzU4YTdmNTBlY2JhNGYyY2QwMjE2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDtrD9F1aYBv3xBc375FFeVBseu7K4/PTnYwFbM8elVy3y8
E58YlWYJK0h04nPP5dqkt2JsbJ08y12hB91TlP6g6ZDmi+T5rJ9yy20XyyRp0z7I
K/Txs34lO9yHR+JGSIGddkGDsfOKGk50ssb1IEziXw32QOoei1vntCogc4VAePRa
Qz7mEad+uFR7uLj1qExTmQF8HPAh49gvMGDaiho3G/D8C5XqOpZ78vYm7l0EsFN5
FnOvaBGK/WWORLKncWRQHSYWE0RAQYGihyzuO2JQep22j6oYZq439F/1WTQ1jgBu
SfBjry2haVaiPk5SlvK664bB0r144+U55cK47j5dAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU6Xmh38wyiLKnN5wiyc/Hw2ocjXAwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzE1ZDZhMTdjLTRmM2EtNDE0ZC1iNGI3LWQ2NDUzMDYwN2I4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAEFowDQYJKoZIhvcNAQELBQADggEBACzfzaWO2XEZ0N4EEzimUKd3
dTMIhGmbdIVepjncUVFMirVSGtBUDzCKBB+cUE8vwRsGrDR7Z3fB8mXAdN46rDtM
Tp6CZmxBt7TUDK81r2OYlSIdQJanIAt1BPBNCFWyPRVk3FU6B2NNXWNd3eAHBGQC
v0kzAa9BgAfiNjRymHVasUySA3yDtz7soROb95vnhugINZTKORsM0KnDgHmDgmf6
ScQThtMNdt//tMS6TzDoYnclBWzY7x+XDINJ6ZwRzN15c1YHY5eYQHmDU3ZVfT9s
RNVHXvWxDMK+QLpBkRxoIe5o1ua6wkMXKQoxZgVNiFsPfO0jTwo2cwVbEWNjzfU=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:29:59 2026 by rpki-client