This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb3fc68-5ac4-4a64-8d8b-6b516a2ff578.roa
File:                     2cb3fc68-5ac4-4a64-8d8b-6b516a2ff578.roa (raw, json)
Hash identifier:          IBenBlwRNZyyk96uCgFkDQVvjW/Oa/cugo2lSd2bx1Q=
Subject key identifier:   34:89:8D:9A:36:01:42:84:75:4D:24:73:67:04:E9:44:49:B8:1C:0C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       16220B3B461864FF4E2A4BABAB1E99F70548A462
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb3fc68-5ac4-4a64-8d8b-6b516a2ff578.roa
Signing time:             Wed 31 Dec 2025 21:53:37 +0000
ROA not before:           Wed 31 Dec 2025 21:53:37 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1118::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:22:0b:3b:46:18:64:ff:4e:2a:4b:ab:ab:1e:99:f7:05:48:a4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 21:53:37 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=b2e3970a985fb86ace5c3c40d575a63663bfb603e113f4c146252f310cb308d2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:dd:b4:8c:22:5f:c1:c2:74:37:04:eb:64:
                    42:2e:99:c1:66:24:21:84:ff:2a:56:66:f1:21:d5:
                    9c:f7:4e:1e:02:1b:43:06:d1:5b:f4:ea:41:94:6c:
                    b2:05:7b:30:01:0d:ac:3d:06:fe:47:42:89:dd:cb:
                    73:d7:bf:32:53:76:73:dc:8b:51:b9:bc:50:c7:65:
                    bf:97:06:69:c9:a2:3e:ae:8b:44:3e:34:b6:2d:87:
                    65:63:4e:1f:fb:e3:f1:3e:e6:04:da:0d:37:df:b8:
                    32:c5:f0:2f:8b:f9:39:e0:59:b9:aa:3d:10:f6:23:
                    e5:fb:15:c4:d1:9d:92:65:99:eb:8d:ff:5f:2b:8e:
                    c7:7a:69:cd:5b:56:41:34:93:c2:c6:34:7c:ea:e1:
                    b7:9c:1a:f6:7e:c1:60:a5:ad:c6:ac:52:9e:7b:b0:
                    c9:30:cb:6a:5e:c6:b0:02:6b:5b:46:ad:c0:a2:8c:
                    44:9a:63:cb:a2:b2:d9:3b:7a:06:53:10:c3:50:9f:
                    ec:7f:e6:08:93:18:b9:d1:fc:e8:7c:ad:fc:b3:1d:
                    1c:d7:23:08:6d:e6:88:b7:f0:e4:bf:4a:5e:be:94:
                    9e:58:2d:af:75:80:69:3b:82:32:23:03:bf:c2:d6:
                    bf:48:54:91:0b:df:55:88:43:2f:90:f2:b9:1d:f5:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:89:8D:9A:36:01:42:84:75:4D:24:73:67:04:E9:44:49:B8:1C:0C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb3fc68-5ac4-4a64-8d8b-6b516a2ff578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1118::/47

    Signature Algorithm: sha256WithRSAEncryption
         0f:7a:7d:73:36:a9:60:e7:ad:a0:24:e6:06:ee:98:23:43:f4:
         21:4b:95:04:e9:96:55:51:44:6f:24:c2:1c:ba:87:39:35:fe:
         30:b0:1b:b8:26:44:eb:44:fa:29:8d:22:17:a1:60:f8:72:f1:
         25:35:e1:3b:ef:43:de:e8:53:49:01:09:74:44:ba:f4:56:f9:
         50:9b:a2:36:2c:85:9e:21:32:7c:41:7e:25:cc:1c:b2:17:be:
         b1:39:18:7e:b9:36:46:a6:b8:3d:40:36:60:0a:cd:8c:ae:eb:
         fb:02:1e:c0:78:11:71:f0:c8:da:ab:f5:36:a1:2b:bd:b5:7b:
         de:3c:6c:ea:8b:66:68:4a:62:77:d9:b2:7f:cf:c7:6d:f9:9a:
         e4:78:dd:0a:7c:a8:8c:d7:03:d0:e8:02:c3:89:af:5f:4d:e5:
         79:09:e7:18:5b:a6:ac:58:62:64:07:9f:b8:b3:3d:e5:59:69:
         b1:bf:53:f5:0c:70:ac:43:04:52:6d:1f:9d:80:ca:17:7b:2c:
         a8:5a:33:2c:0c:c0:7c:78:b9:26:cb:3f:51:ad:37:06:d7:0b:
         f1:28:c3:7d:dd:30:4c:80:98:ca:36:f4:cb:e0:db:50:2e:02:
         5e:82:01:45:67:85:2f:0c:65:07:57:95:3d:a9:5c:f8:97:29:
         4f:f4:67:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:30:16 2026 by rpki-client