This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d5eb873-faf4-4f3f-abdc-064c66c419f4.roa
File:                     9d5eb873-faf4-4f3f-abdc-064c66c419f4.roa (raw, json)
Hash identifier:          ukVhpCJh8eOkgH8BiTTCZXwWnDm1dS2ZerOdwmdEOTU=
Subject key identifier:   DE:8D:86:19:D9:8A:77:2B:09:20:2F:F4:D2:81:E9:C1:EF:89:F8:4F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2EC7A7A4BF4EF9101C5524AC39DE0103FEF67455
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d5eb873-faf4-4f3f-abdc-064c66c419f4.roa
Signing time:             Wed 31 Dec 2025 21:08:37 +0000
ROA not before:           Wed 31 Dec 2025 21:08:37 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1034::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c7:a7:a4:bf:4e:f9:10:1c:55:24:ac:39:de:01:03:fe:f6:74:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 21:08:37 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=fff142279083758906d7d7e09d44c0472c4a8f9dc4af5e8d77e752178c7cd206, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:2d:e0:97:f3:f5:39:95:66:6f:a6:35:77:
                    22:ab:d0:7b:59:9b:67:ce:15:b2:2d:e3:6e:9c:fe:
                    59:1c:d5:19:13:0e:6b:1b:78:38:80:52:f9:47:60:
                    0a:d7:c1:4f:20:c3:f7:d2:ac:f3:00:48:f7:91:f8:
                    9e:a1:b6:8d:51:6d:fe:c0:83:b7:b5:16:31:84:84:
                    5b:29:d3:f1:b9:bf:36:d9:e5:a0:e8:f1:bd:78:49:
                    43:a2:ba:4c:e8:f9:8b:20:b9:68:72:67:7a:2b:e3:
                    38:87:8f:17:cc:34:b6:99:61:31:f6:cd:a6:9b:de:
                    a4:99:75:a0:60:a8:a2:e1:d5:a4:6d:32:dc:84:c8:
                    e3:3b:44:a8:9e:e8:79:28:9b:c2:f3:60:14:01:ad:
                    0d:d9:f5:38:e9:ac:b8:48:ff:96:f1:89:92:51:f2:
                    e0:7d:cc:0e:29:c0:34:bd:24:12:23:6a:cf:40:df:
                    98:b3:07:91:1d:a0:89:63:ba:7b:a5:22:65:1f:24:
                    19:5e:3b:ef:93:dd:fa:c2:27:6b:0c:a4:e9:e5:a2:
                    63:e6:f5:6c:14:d5:5f:30:4e:96:d3:eb:0a:5f:9e:
                    d9:5b:5f:28:43:66:f1:cf:8d:39:21:5e:67:7e:ce:
                    a3:fd:3e:30:ff:34:33:a2:68:df:26:09:76:c5:11:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:86:19:D9:8A:77:2B:09:20:2F:F4:D2:81:E9:C1:EF:89:F8:4F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d5eb873-faf4-4f3f-abdc-064c66c419f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1034::/47

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:eb:49:20:50:d8:73:d9:a6:59:99:82:7a:3f:19:47:8e:
         32:23:83:96:22:8e:88:76:fe:26:59:86:aa:5a:7b:f3:c6:b5:
         9c:17:71:68:18:bc:9b:f8:7d:29:16:6d:ec:3f:b9:16:86:38:
         65:8b:fa:82:4e:11:67:48:06:6c:53:27:90:1e:43:88:07:b2:
         af:03:40:ed:8f:5c:7d:2c:c3:d2:4f:7f:b9:c5:c6:98:bb:8b:
         05:5a:56:54:4a:3f:c0:70:b3:f4:22:2a:e2:79:7e:b4:b7:17:
         92:8b:78:eb:ff:8b:7a:e3:92:13:54:5d:5c:9a:03:24:39:7d:
         fa:28:1f:68:14:5b:f7:83:df:8b:f6:f6:54:87:3d:bc:f0:d4:
         5d:f5:ca:4b:8b:eb:8e:d6:1c:47:c4:8c:7c:99:1d:97:f3:2b:
         41:c5:35:e4:c6:2a:09:ee:ad:ec:fc:99:24:63:f9:bc:8a:23:
         9f:99:fa:70:33:1c:25:86:8b:bd:fe:ee:df:d7:92:35:e5:a8:
         ff:a0:63:c5:7b:b7:9c:53:22:79:80:b8:dd:98:de:44:6a:70:
         e0:df:82:e7:b4:5b:50:49:1b:02:f7:59:53:09:48:63:15:19:
         da:48:ae:9f:39:0b:ca:70:91:a4:4d:11:be:2b:d2:de:45:84:
         ec:16:a2:d0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULsenpL9O+RAcVSSsOd4BA/72dFUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMjMxMjEwODM3WhcNMjYwMzMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZmYxNDIyNzkwODM3NTg5MDZkN2Q3ZTA5ZDQ0YzA0NzJj
NGE4ZjlkYzRhZjVlOGQ3N2U3NTIxNzhjN2NkMjA2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9ZS3gl/P1OZVmb6Y1dyKr0HtZm2fOFbIt426c/lkc1RkT
DmsbeDiAUvlHYArXwU8gw/fSrPMASPeR+J6hto1Rbf7Ag7e1FjGEhFsp0/G5vzbZ
5aDo8b14SUOiukzo+YsguWhyZ3or4ziHjxfMNLaZYTH2zaab3qSZdaBgqKLh1aRt
MtyEyOM7RKie6Hkom8LzYBQBrQ3Z9TjprLhI/5bxiZJR8uB9zA4pwDS9JBIjas9A
35izB5EdoIljunulImUfJBleO++T3frCJ2sMpOnlomPm9WwU1V8wTpbT6wpfntlb
XyhDZvHPjTkhXmd+zqP9PjD/NDOiaN8mCXbFEY1nAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU3o2GGdmKdysJIC/00oHpwe+J+E8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzlkNWViODczLWZhZjQtNGYzZi1hYmRjLTA2NGM2NmM0MTlmNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAEDQwDQYJKoZIhvcNAQELBQADggEBAKgD60kgUNhz2aZZmYJ6PxlH
jjIjg5Yijoh2/iZZhqpae/PGtZwXcWgYvJv4fSkWbew/uRaGOGWL+oJOEWdIBmxT
J5AeQ4gHsq8DQO2PXH0sw9JPf7nFxpi7iwVaVlRKP8Bws/QiKuJ5frS3F5KLeOv/
i3rjkhNUXVyaAyQ5ffooH2gUW/eD34v29lSHPbzw1F31ykuL647WHEfEjHyZHZfz
K0HFNeTGKgnurez8mSRj+byKI5+Z+nAzHCWGi73+7t/XkjXlqP+gY8V7t5xTInmA
uN2Y3kRqcODfgue0W1BJGwL3WVMJSGMVGdpIrp85C8pwkaRNEb4r0t5FhOwWotA=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:29:43 2026 by rpki-client