This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/add3149c-b747-4a89-87bf-5b379ded087d.roa
File:                     add3149c-b747-4a89-87bf-5b379ded087d.roa (raw, json)
Hash identifier:          gHsf8CAd4Bs9LmpWMPO7QcUU2fSrdCD1tgU1VJaoBYk=
Subject key identifier:   20:0F:38:67:3A:F8:C2:16:CF:9A:F2:79:85:60:E0:9C:C2:AE:CD:53
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3163A31287C0B8BE43BA2A087808E6941548A566
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/add3149c-b747-4a89-87bf-5b379ded087d.roa
Signing time:             Wed 31 Dec 2025 22:23:46 +0000
ROA not before:           Wed 31 Dec 2025 22:23:46 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11e2::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:63:a3:12:87:c0:b8:be:43:ba:2a:08:78:08:e6:94:15:48:a5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 22:23:46 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=6d474154cd5c5684afc496cd79df52a2583998aaea45152c3ded645ce412b768, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:97:e3:04:9f:2e:86:36:0a:67:a9:e2:0d:
                    c9:5c:3e:be:36:57:d7:b2:05:e6:3a:43:82:2f:05:
                    db:2a:f9:fa:c3:72:a1:43:e2:f6:b7:d3:cd:71:bf:
                    f6:8b:7b:e8:4d:ab:5d:cb:b3:5f:5f:ce:c1:d1:ff:
                    b3:9e:c4:f4:d3:8d:63:7f:bc:14:b3:07:68:38:08:
                    0b:ee:1a:44:70:27:29:86:d6:93:d0:48:f9:c9:e7:
                    f2:9e:ca:d4:46:17:e9:43:c7:f7:c2:3d:7f:2c:89:
                    e0:2a:d9:e6:69:f2:5e:ed:aa:32:2a:a2:f2:aa:fc:
                    e6:24:cc:8c:13:c7:25:32:0d:0c:7f:ff:86:95:18:
                    47:d5:44:c6:9a:3b:58:d8:67:0b:e0:78:66:7d:12:
                    d3:95:52:0f:e6:9e:73:7a:11:13:2f:06:d4:f2:37:
                    23:3c:78:b5:50:5f:c7:01:17:66:95:c0:b1:fb:0f:
                    c9:44:ac:14:8f:6a:25:77:2a:01:ba:99:f1:87:a7:
                    e1:ec:96:3e:bb:47:7a:2b:e4:bf:79:da:d2:37:cc:
                    db:a5:4e:50:95:c5:d0:bd:d3:ae:d9:23:1a:97:2b:
                    c2:e5:57:0b:49:96:56:c2:be:0a:2e:b7:53:17:ef:
                    b0:6a:e8:12:4a:6e:f9:ee:87:d8:40:5c:f0:b4:be:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0F:38:67:3A:F8:C2:16:CF:9A:F2:79:85:60:E0:9C:C2:AE:CD:53
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/add3149c-b747-4a89-87bf-5b379ded087d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11e2::/47

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:41:5e:e1:50:62:40:15:58:da:64:8b:63:ee:68:94:58:
         fa:37:f9:1d:1f:78:c3:2f:ed:be:5e:0c:05:f9:44:2a:11:81:
         9b:ee:6c:4d:37:c5:7b:83:b6:f5:f0:f2:19:1f:d6:d2:89:54:
         21:09:98:9b:c8:72:bf:bb:2c:4f:c2:bb:74:74:36:0a:6f:e5:
         8b:da:f9:25:72:44:0b:d9:77:e1:84:35:a9:7e:b5:71:a0:69:
         00:7a:ac:a2:04:8b:88:bf:54:e5:2c:2c:33:01:27:6c:73:b0:
         90:72:3a:30:ee:bd:8d:c2:20:a7:1b:b9:25:99:55:6c:96:92:
         af:38:82:03:0f:77:bd:24:87:a7:4f:1e:c6:a2:5e:26:24:12:
         09:4e:24:3d:58:61:7f:fa:3e:87:0c:8a:95:1c:45:a4:80:37:
         49:46:4b:6e:c2:cf:37:81:a1:6c:28:b0:3f:f9:15:f5:41:b4:
         80:13:9c:e3:07:af:0d:79:1b:50:fd:89:9e:26:f7:36:1e:e8:
         c5:2b:0d:a0:ec:89:0d:3c:55:d6:46:8d:5d:65:d8:b3:69:fb:
         8c:ff:5d:da:46:c3:b1:82:cb:28:5f:44:ce:f0:f0:30:31:0f:
         73:f1:8c:b1:a0:18:ad:73:16:52:d4:98:77:94:a6:6a:e8:56:
         f5:fe:91:4d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMWOjEofAuL5DuioIeAjmlBVIpWYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMjMxMjIyMzQ2WhcNMjYwMzMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDQ3NDE1NGNkNWM1Njg0YWZjNDk2Y2Q3OWRmNTJhMjU4
Mzk5OGFhZWE0NTE1MmMzZGVkNjQ1Y2U0MTJiNzY4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuCpfjBJ8uhjYKZ6niDclcPr42V9eyBeY6Q4IvBdsq+frD
cqFD4va3081xv/aLe+hNq13Ls19fzsHR/7OexPTTjWN/vBSzB2g4CAvuGkRwJymG
1pPQSPnJ5/KeytRGF+lDx/fCPX8sieAq2eZp8l7tqjIqovKq/OYkzIwTxyUyDQx/
/4aVGEfVRMaaO1jYZwvgeGZ9EtOVUg/mnnN6ERMvBtTyNyM8eLVQX8cBF2aVwLH7
D8lErBSPaiV3KgG6mfGHp+Hslj67R3or5L952tI3zNulTlCVxdC9067ZIxqXK8Ll
VwtJllbCvgout1MX77Bq6BJKbvnuh9hAXPC0vkapAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUIA84Zzr4whbPmvJ5hWDgnMKuzVMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2FkZDMxNDljLWI3NDctNGE4OS04N2JmLTViMzc5ZGVkMDg3ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAEeIwDQYJKoZIhvcNAQELBQADggEBAI6AQV7hUGJAFVjaZItj7miU
WPo3+R0feMMv7b5eDAX5RCoRgZvubE03xXuDtvXw8hkf1tKJVCEJmJvIcr+7LE/C
u3R0Ngpv5Yva+SVyRAvZd+GENal+tXGgaQB6rKIEi4i/VOUsLDMBJ2xzsJByOjDu
vY3CIKcbuSWZVWyWkq84ggMPd70kh6dPHsaiXiYkEglOJD1YYX/6PocMipUcRaSA
N0lGS27CzzeBoWwosD/5FfVBtIATnOMHrw15G1D9iZ4m9zYe6MUrDaDsiQ08VdZG
jV1l2LNp+4z/XdpGw7GCyyhfRM7w8DAxD3PxjLGgGK1zFlLUmHeUpmroVvX+kU0=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:30:03 2026 by rpki-client