This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b12e400c-ef93-4fac-a9f9-a20f8d0a73f1.roa
File:                     b12e400c-ef93-4fac-a9f9-a20f8d0a73f1.roa (raw, json)
Hash identifier:          GK0yu7GICD7OkR5lstHPmDUHhqt6eqe0G2EWkpxIytA=
Subject key identifier:   6A:ED:4A:33:DF:86:38:0D:C5:86:90:4D:38:28:70:3C:CB:CD:ED:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       75EA3258270AD694F8D88693A1BFA02CEB472700
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b12e400c-ef93-4fac-a9f9-a20f8d0a73f1.roa
Signing time:             Wed 31 Dec 2025 22:38:12 +0000
ROA not before:           Wed 31 Dec 2025 22:38:12 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:122e::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ea:32:58:27:0a:d6:94:f8:d8:86:93:a1:bf:a0:2c:eb:47:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 22:38:12 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=586f6e6d0ad140dfffbed249a14292eee387cea5c810ba0ed3e5b00992c284ea, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:34:fe:20:c8:ab:90:a5:36:a7:e0:71:a2:
                    68:b8:1a:42:4b:a1:44:cc:9d:e1:68:39:62:03:57:
                    69:2a:39:81:6c:8f:52:1e:98:ed:b6:5a:ce:aa:2e:
                    91:77:58:ad:82:39:1f:5d:69:4e:fa:98:fd:3d:3d:
                    8b:90:90:38:70:f5:61:32:eb:0a:8b:63:c7:92:03:
                    9c:fd:be:ae:60:29:0f:81:57:f8:1d:8f:26:75:f6:
                    4e:3a:d9:4c:7e:dd:d0:6c:0b:d3:60:6a:ab:3d:70:
                    d4:fd:8a:8b:eb:55:1d:a9:40:85:fe:54:65:20:92:
                    a3:13:de:b1:30:81:60:57:72:d5:08:8b:8d:bc:42:
                    90:1b:1d:42:0e:51:f4:ff:c5:90:5c:af:26:cc:41:
                    13:b9:c8:49:86:bf:db:b5:c0:d0:6b:62:a9:00:95:
                    c0:a3:f2:67:f6:d4:29:c0:dc:ee:7a:c3:5b:46:7e:
                    d0:f7:f0:47:db:86:d2:29:ae:c5:46:6b:16:c7:82:
                    36:97:bb:ff:c5:ad:29:b0:fa:5e:20:5b:7f:70:c5:
                    2d:ac:5b:36:a3:0b:bf:21:b6:20:35:41:e6:2a:9b:
                    dd:ea:fc:3c:90:dd:30:36:d2:12:5f:da:3d:6d:0c:
                    cc:8e:db:33:51:b5:ce:40:a0:21:5f:b4:a6:5e:38:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:ED:4A:33:DF:86:38:0D:C5:86:90:4D:38:28:70:3C:CB:CD:ED:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b12e400c-ef93-4fac-a9f9-a20f8d0a73f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:122e::/47

    Signature Algorithm: sha256WithRSAEncryption
         c2:a2:68:c8:90:f2:3e:07:7f:f6:db:d8:71:66:3c:0e:a4:d1:
         9f:36:df:00:2b:a5:5f:86:81:80:0a:72:ce:ef:76:18:56:02:
         2c:63:9b:4f:77:bb:ad:a7:c4:0e:80:76:92:8a:c0:a5:57:e7:
         b5:f9:c1:fb:ec:1e:1a:e3:bc:c4:74:c6:5f:16:e7:e8:59:ce:
         17:e1:23:c2:67:2a:cd:f1:f5:f2:dc:26:b9:a5:6d:52:11:9c:
         88:3a:40:e2:ff:4d:2a:21:2f:f5:05:c9:ac:0f:5c:e5:5b:7d:
         9a:93:b7:3a:68:35:3c:71:b6:39:46:e1:7c:5b:42:21:f3:33:
         ce:03:2f:31:0b:d2:52:02:ea:0d:3a:d2:4c:fa:9c:08:93:1e:
         f3:fa:8d:ae:ae:b2:c6:13:0c:63:8d:44:48:3d:ba:76:aa:b1:
         72:f9:1e:14:f2:58:03:c2:ee:ff:7c:0d:3f:26:84:dd:07:e5:
         08:69:7f:db:ab:bf:7b:32:b2:c9:62:44:48:9b:2e:ae:65:70:
         7c:42:75:db:d6:d3:ac:9c:47:66:8e:da:c5:bf:4f:ec:e1:61:
         f4:ba:45:3f:36:02:0b:16:e7:8f:b1:12:ea:81:65:a3:6a:19:
         5f:72:bd:c7:20:8f:83:62:03:53:15:9d:9f:b1:c9:8f:aa:73:
         1d:ac:9a:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:30:12 2026 by rpki-client