This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2dc54db-e64d-4bae-af31-fbe3bd310831.roa
File:                     e2dc54db-e64d-4bae-af31-fbe3bd310831.roa (raw, json)
Hash identifier:          6RSr/ocl+2v+gL7nxEYyxpppgfQy6gKkEqDntlEJwNM=
Subject key identifier:   9F:6C:59:8E:41:64:99:6A:74:D5:AE:D0:46:33:D3:42:99:44:D9:2C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       05EBF262E9922DFB8FD163E2E1504FF6D5540EF3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2dc54db-e64d-4bae-af31-fbe3bd310831.roa
Signing time:             Wed 31 Dec 2025 21:36:51 +0000
ROA not before:           Wed 31 Dec 2025 21:36:51 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10a2::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:eb:f2:62:e9:92:2d:fb:8f:d1:63:e2:e1:50:4f:f6:d5:54:0e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 21:36:51 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=b7ec16ac7a7930936b432d3e7eec229bb5f61fb46dc11a2a8a673435010c7c5b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:18:80:aa:16:66:18:da:d4:93:81:1e:8f:
                    a7:55:ee:11:73:71:c4:46:8d:81:9e:38:87:12:1f:
                    52:9c:61:b2:b0:a7:17:20:29:5a:97:58:28:d8:ef:
                    e7:37:78:55:6a:4b:6d:3c:08:15:f3:4e:92:7f:02:
                    3d:29:49:92:99:62:bc:1e:cb:aa:56:d4:a9:1f:6e:
                    f7:cb:aa:fc:83:7f:a5:7a:2b:00:03:d8:b1:9b:e5:
                    df:9b:fb:d6:1f:62:da:98:c5:28:13:0b:d6:4f:6e:
                    e3:f4:16:16:2f:ab:7a:20:b8:a4:90:ff:2f:7f:45:
                    3a:2d:c8:ae:5e:35:be:b1:89:98:78:76:7b:23:86:
                    3c:93:54:42:cf:db:52:29:8f:b4:2c:57:23:e5:73:
                    bb:73:89:1e:0b:78:02:f0:67:bf:93:ca:01:b8:0b:
                    c3:d5:f7:39:c3:49:8a:b2:97:e0:d5:d3:c9:ce:0f:
                    02:9b:c1:2e:77:7c:c9:eb:07:19:24:b8:34:c5:da:
                    2a:92:01:65:90:57:56:f8:6e:57:d0:97:bb:c3:aa:
                    4a:49:cd:56:e5:dd:75:d0:e2:c7:0b:3b:01:9e:ad:
                    9c:04:77:13:c6:62:8b:2e:44:c5:4b:2b:15:cb:b1:
                    11:73:ce:04:a8:f1:40:b7:6f:21:a3:bb:8c:0c:58:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6C:59:8E:41:64:99:6A:74:D5:AE:D0:46:33:D3:42:99:44:D9:2C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2dc54db-e64d-4bae-af31-fbe3bd310831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10a2::/47

    Signature Algorithm: sha256WithRSAEncryption
         64:e0:83:40:41:f5:59:d5:27:f1:e8:b2:52:83:e9:b7:68:ce:
         1f:b5:b8:1a:a0:72:16:5e:c6:46:cf:6f:07:b5:ec:8c:ba:f9:
         91:48:e1:ef:1e:77:ea:ad:cd:6e:1e:aa:82:59:c5:6d:e1:05:
         2c:52:f8:48:d0:95:8d:55:2c:01:34:ae:f0:4b:cd:57:7f:ba:
         d5:0e:de:68:dc:fb:45:3b:03:6d:bd:2f:c6:e6:c9:95:04:2c:
         66:ae:ed:a7:1f:77:1e:0c:4d:fa:f2:8e:29:f8:f4:a6:25:b9:
         8d:35:17:13:e2:29:f9:a1:14:8a:45:be:5e:60:30:74:0e:cd:
         61:50:f8:94:d0:9e:c6:0e:aa:09:95:2f:4f:79:1e:c9:b5:3c:
         64:57:e3:8e:62:f4:69:5c:9c:cc:dc:d9:b4:4e:75:2a:8f:f9:
         3a:41:5c:c0:33:84:ff:0f:04:a9:72:d1:89:9a:69:e7:35:d5:
         4d:af:89:46:6d:10:8e:31:0c:8f:ec:de:eb:3d:c1:63:58:6c:
         30:aa:49:5b:05:ba:83:3e:88:d2:0a:ea:3d:03:af:a7:47:26:
         41:13:ef:37:f2:d2:8b:91:bf:b3:37:d7:54:53:14:c5:e4:5e:
         a1:dc:d3:37:b0:25:0b:8e:be:aa:eb:10:40:d4:cc:2d:41:0b:
         ea:cf:31:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:29:58 2026 by rpki-client