This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46495edd-c431-4491-89f7-1c5c080c736e.roa
File:                     46495edd-c431-4491-89f7-1c5c080c736e.roa (raw, json)
Hash identifier:          y6MNy8plUzyKPfZFYfodq3xak446Q0e/ZgbXE6WYp8Y=
Subject key identifier:   94:76:96:77:AC:A2:F9:00:3E:E0:C6:1F:3C:33:4A:B7:5F:1B:51:77
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2F762D62063845E6A37724237CF4FC6BDE13E665
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46495edd-c431-4491-89f7-1c5c080c736e.roa
Signing time:             Wed 31 Dec 2025 22:21:56 +0000
ROA not before:           Wed 31 Dec 2025 22:21:56 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11aa::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:76:2d:62:06:38:45:e6:a3:77:24:23:7c:f4:fc:6b:de:13:e6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 22:21:56 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=71072f0ab7309993cb13ae1dc1326b1381ce20e59cf945bea08f7ecfb7ae006c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:79:3d:39:14:4d:16:4a:ec:5e:34:ac:79:
                    9f:3e:d5:41:d1:1a:d9:8d:01:56:eb:89:4b:6e:e9:
                    03:8f:8d:22:24:c2:d4:7b:22:0b:f4:7f:4c:54:04:
                    59:5d:02:f0:17:c8:33:ea:48:a5:6b:7c:7e:e4:2a:
                    21:e0:38:51:c6:29:85:b4:e6:5d:c2:8a:14:eb:05:
                    a0:f9:2e:0b:0b:45:4b:2a:80:26:f9:8f:57:85:b4:
                    f4:23:69:cb:42:60:30:aa:b0:2e:3f:22:54:79:99:
                    8e:0c:c2:df:61:ea:ad:56:dd:c5:28:d1:31:3a:99:
                    8f:c9:93:a7:7a:d3:1e:14:3a:45:94:74:62:55:83:
                    f4:ee:9d:35:03:1e:9d:9c:98:52:34:e0:cc:23:0b:
                    64:81:e3:a0:b3:34:bb:5c:0e:1c:c1:eb:4d:ed:4b:
                    a5:56:5b:39:45:1b:96:dc:8e:5e:7b:db:71:0d:0d:
                    39:eb:46:a6:72:b6:7a:c9:60:1f:8c:d0:4d:a0:fe:
                    a6:77:ec:a6:e0:fd:2c:9e:70:a4:45:83:81:d0:08:
                    b0:c5:f0:9f:3d:05:0a:4c:e0:44:05:67:73:21:5c:
                    72:5d:2e:f3:39:45:a3:44:86:c6:ac:a3:01:1b:a9:
                    40:f7:ff:34:f5:b2:60:5e:25:b0:a1:28:9b:34:d9:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:76:96:77:AC:A2:F9:00:3E:E0:C6:1F:3C:33:4A:B7:5F:1B:51:77
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46495edd-c431-4491-89f7-1c5c080c736e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11aa::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:26:72:60:d3:ae:c0:57:0b:2e:9f:66:43:3d:9a:25:ef:51:
         29:08:3e:02:4a:61:56:c4:df:02:f9:38:78:87:a1:2d:25:34:
         b6:b2:7e:da:67:bb:4f:e8:55:11:1d:cb:76:87:18:fb:88:5e:
         c6:1b:cb:aa:ea:03:df:9a:88:e4:6d:d6:a0:48:0a:ac:27:2c:
         26:96:2d:c4:4e:2a:f5:5a:1e:a8:af:7a:45:d8:e4:2d:62:cd:
         64:31:0b:fd:19:c5:cd:70:ce:9e:e0:9d:43:fe:71:c2:6f:12:
         7e:fa:f5:58:bf:57:22:f4:31:2b:ff:72:ce:18:9c:b4:61:c9:
         8f:c5:2a:da:f3:e9:7b:6f:6b:6b:0a:78:4e:3a:ee:6d:78:0c:
         d1:12:08:94:03:d4:fa:7b:4b:3e:11:c0:55:12:ca:dc:19:6e:
         3d:ad:2a:3e:f5:af:23:d8:ac:b8:0d:fb:5a:e8:74:b2:eb:b1:
         24:d4:ae:be:70:74:6b:ed:d7:25:71:ea:45:99:42:94:60:db:
         51:47:68:95:ca:b8:f1:2e:b3:dc:7b:e2:c1:13:0e:f2:3a:84:
         17:9c:97:ca:73:54:2d:99:35:60:4f:a8:54:4c:4b:98:46:27:
         b0:21:bf:4c:1c:64:50:26:2d:07:d8:a7:ba:db:bd:2d:cf:a9:
         fd:5d:ae:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:29:52 2026 by rpki-client