This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9789a39-9d4c-444e-b4f6-d11ee70d4f5f.roa
File:                     b9789a39-9d4c-444e-b4f6-d11ee70d4f5f.roa (raw, json)
Hash identifier:          hxuFUpNIYlaHfhff+ZGX6oPNyh/K/Ywfn6hyKE5HnkI=
Subject key identifier:   73:05:AC:85:F0:F9:50:E9:B4:76:9E:42:F7:CF:80:5C:4F:31:40:4C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3B3F9EB19CA9F52C82C27A00AFB293F3799844F0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9789a39-9d4c-444e-b4f6-d11ee70d4f5f.roa
Signing time:             Wed 31 Dec 2025 21:51:53 +0000
ROA not before:           Wed 31 Dec 2025 21:51:53 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10f6::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3f:9e:b1:9c:a9:f5:2c:82:c2:7a:00:af:b2:93:f3:79:98:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 21:51:53 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=64938ad620c4d13cf87c42a0e99bfbb4ac3ebb8fd4255d2d70bd86a72c601515, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:93:2f:35:a2:5e:b2:53:4f:82:a4:0f:31:5c:
                    ee:42:2d:4b:62:75:21:46:88:c6:f1:c8:1d:92:dd:
                    36:68:2e:0d:c4:1b:f0:ad:1f:d2:1f:08:13:b9:5a:
                    5f:cf:52:af:f6:0c:80:63:e7:14:39:43:9e:c4:37:
                    8d:73:d7:d5:82:be:85:1d:03:4c:3b:f6:77:8f:d9:
                    dc:b5:27:6d:ab:63:0b:24:da:1f:4c:92:af:d9:78:
                    6c:8c:b7:5b:40:bf:9b:62:8c:f9:8d:3a:a1:bd:fc:
                    54:5e:a3:bc:07:d9:6b:c3:6d:07:af:c2:6b:f8:a7:
                    30:53:db:eb:03:8b:55:5b:94:a2:90:aa:e5:44:c1:
                    28:82:e9:f5:58:2c:b2:27:63:44:e1:bc:f6:da:a9:
                    6d:c4:38:75:04:95:20:ba:cd:65:dd:dc:41:43:85:
                    59:ea:b2:fd:c4:93:42:a8:b4:53:66:67:88:e0:1b:
                    a2:0e:0c:64:af:51:18:3b:08:78:a5:d1:ae:26:69:
                    16:50:ff:7e:5c:38:96:d8:f2:88:45:56:9c:81:16:
                    c1:98:cf:88:44:8f:66:49:e3:ac:f0:0f:ca:4e:e2:
                    1e:13:c1:3e:e1:e7:37:6e:25:23:95:ff:0c:f8:a9:
                    0e:d9:5d:a1:8f:ac:9a:e9:b7:8c:4f:7e:58:2a:d8:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:05:AC:85:F0:F9:50:E9:B4:76:9E:42:F7:CF:80:5C:4F:31:40:4C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9789a39-9d4c-444e-b4f6-d11ee70d4f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10f6::/47

    Signature Algorithm: sha256WithRSAEncryption
         b9:a2:ca:ab:39:2f:aa:99:09:3d:ec:e4:47:c0:c7:a9:f3:f4:
         11:d8:8d:56:8c:8c:42:ed:8c:1f:53:36:1d:89:cf:84:cf:3f:
         f9:6d:a0:42:d8:04:9e:11:5f:45:fb:60:ae:86:a5:e9:86:c9:
         1d:51:95:bb:15:0e:c9:14:db:1a:16:7b:ea:29:b8:f9:f8:8b:
         89:41:91:3d:08:82:e6:8b:c5:87:34:26:f5:63:83:49:b2:21:
         32:1d:54:fb:6b:cf:cc:4d:ba:9f:96:12:3c:c0:8f:16:36:15:
         db:09:84:0d:37:37:de:18:e5:0c:ac:25:09:04:00:03:ef:db:
         d8:1e:a6:51:5e:0a:99:74:ae:3b:9e:89:78:e7:74:de:3b:ee:
         78:f2:e9:47:01:2a:15:97:e2:3a:69:33:fd:fc:ad:fc:2c:92:
         3d:c3:a5:20:ff:26:bf:62:38:ac:32:6e:99:bf:1f:84:07:84:
         ae:ce:c0:fa:dc:85:89:aa:0b:ca:94:18:61:1d:0a:6e:e8:54:
         d0:6e:c9:ed:97:eb:a6:6d:f8:26:d4:5e:e6:23:f5:1c:d1:85:
         62:e2:9d:e9:b4:a1:25:3c:c1:c1:9d:1e:a8:f2:a4:a9:2c:24:
         8a:76:ba:b7:fd:0c:b2:96:49:7e:1b:40:60:75:da:83:79:9a:
         ad:12:0f:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:30:07 2026 by rpki-client