This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfe57d38-25db-4f02-9edf-d21b3292ff73.roa
File:                     bfe57d38-25db-4f02-9edf-d21b3292ff73.roa (raw, json)
Hash identifier:          lvKlC1Rh5hw2cSRVZ0yD7sz8YgV/MNJ09sZmmfEMQJA=
Subject key identifier:   D5:2C:77:35:19:15:60:B2:CF:8C:F7:C4:C2:6B:7F:15:D2:C9:8F:74
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4BF41A5B844DA4BF91A9635D5D4D5FCEEF312E06
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfe57d38-25db-4f02-9edf-d21b3292ff73.roa
Signing time:             Wed 31 Dec 2025 22:36:38 +0000
ROA not before:           Wed 31 Dec 2025 22:36:38 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11fc::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f4:1a:5b:84:4d:a4:bf:91:a9:63:5d:5d:4d:5f:ce:ef:31:2e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 22:36:38 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=6a97c1e44c2b105b6d94941ffcd859e887bf282c7d3f15783baa3f8e0ec79c01, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:b8:b5:3c:a2:85:92:ed:ef:f4:a5:ac:8d:
                    eb:1f:db:2b:90:f9:43:c2:ec:15:db:26:09:f0:63:
                    5a:4a:85:26:e6:ff:48:00:5e:93:9e:66:09:2d:9b:
                    4f:a6:cb:6d:d9:f1:6a:62:9c:25:3d:07:be:d9:fa:
                    28:f0:b7:1c:38:09:c1:7f:22:1e:31:12:f7:e6:bb:
                    d1:5a:af:5b:f1:e7:f1:19:ab:c3:6a:df:f7:ec:77:
                    35:ae:42:54:2b:91:1a:20:65:82:99:e2:f2:a6:7b:
                    0f:df:8c:11:e1:fb:e1:f3:4f:d6:9f:17:58:73:8b:
                    ca:de:5c:c2:67:31:7c:68:02:13:84:b9:a3:ee:9b:
                    9c:00:34:38:38:9b:e3:eb:42:b4:d9:f8:87:17:a7:
                    84:d8:3f:4a:32:47:fe:23:b8:f3:58:0b:90:67:07:
                    49:fb:a6:02:b1:06:fc:7b:a8:42:18:6b:b9:37:1e:
                    1e:4e:60:8b:d8:33:1a:ba:c4:08:e8:3e:9d:ee:72:
                    e7:99:c0:65:8b:23:aa:1c:fb:e8:48:91:db:9e:bd:
                    de:45:64:e3:e8:d3:f8:0d:73:be:63:5a:7d:9b:05:
                    38:99:07:78:61:75:db:b5:79:16:4f:4a:4d:15:7e:
                    32:33:6a:07:cc:4e:43:e6:2b:14:ce:3c:03:7e:a8:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2C:77:35:19:15:60:B2:CF:8C:F7:C4:C2:6B:7F:15:D2:C9:8F:74
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfe57d38-25db-4f02-9edf-d21b3292ff73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11fc::/47

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:54:ee:43:f2:3f:e8:43:5c:a4:c8:7b:b7:f2:4e:8f:82:
         a4:6c:82:05:88:85:6b:df:cc:46:d8:bd:29:3c:ad:14:83:61:
         fa:47:fa:d1:50:1b:07:20:9f:5e:99:72:6f:52:8b:be:7b:e6:
         74:4a:65:b5:ad:24:f1:7c:ea:bf:f9:53:cc:2f:50:bd:df:d9:
         76:ef:ca:81:9b:95:e7:83:01:27:5b:67:63:fb:52:b8:20:2d:
         b8:f1:22:eb:6c:50:36:5f:82:98:bb:2f:99:29:40:3c:43:c7:
         6c:e9:59:33:d8:51:6e:8d:3a:3d:bb:e0:17:53:90:9f:da:3a:
         96:f3:00:a1:31:63:df:52:51:be:30:4d:89:50:7e:33:24:da:
         0d:e4:74:31:4a:c1:ec:ea:7b:a2:e2:b8:20:0e:97:c4:db:31:
         b8:a6:2e:5e:ed:24:9f:98:9e:da:2b:3c:82:41:1f:90:91:e0:
         9a:93:63:05:b7:8a:20:0d:37:a6:b6:b9:a4:36:07:93:73:90:
         cb:c8:51:8d:f7:54:63:d8:09:66:6e:e6:51:b5:28:4b:dd:00:
         eb:ad:28:a2:56:28:d2:1e:f5:84:b0:fb:89:fc:10:33:fc:35:
         57:1a:4b:ae:20:5d:22:f8:93:d0:57:fc:15:90:ad:2a:a1:61:
         9d:8b:a4:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:30:08 2026 by rpki-client