This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f267518c-434d-480d-a95a-b446cde02ac9.roa
File:                     f267518c-434d-480d-a95a-b446cde02ac9.roa (raw, json)
Hash identifier:          +5fWg6CYpiCU0ntJdHr9emwyVo4fMY9827UbINq6biI=
Subject key identifier:   C6:61:65:C9:70:1B:C3:ED:98:66:B7:9D:07:57:85:4F:69:6A:FF:18
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3887E90B587C060B2B3FED813175468D8B7B8B60
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f267518c-434d-480d-a95a-b446cde02ac9.roa
Signing time:             Wed 31 Dec 2025 22:06:55 +0000
ROA not before:           Wed 31 Dec 2025 22:06:55 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:114a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:87:e9:0b:58:7c:06:0b:2b:3f:ed:81:31:75:46:8d:8b:7b:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 22:06:55 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=98b8fb13ded5454be85b1bef680fecd258f7f07af842817c18d0f124a3db1ae9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:0e:96:db:b8:1f:ad:d3:cd:ca:4b:23:31:
                    78:3a:9d:ac:06:04:6e:fd:db:7b:5b:bc:d7:da:f3:
                    52:0e:15:70:91:98:bb:c3:85:76:e9:78:6c:ba:84:
                    00:d2:8f:c9:15:69:9d:4a:66:8b:09:15:e0:fa:b0:
                    ce:f3:da:a3:c2:23:7a:7a:98:d1:c3:6b:69:68:6c:
                    7b:a7:41:86:fd:43:a8:d3:1a:66:c1:ba:69:e2:54:
                    63:84:74:90:32:ae:bc:ae:05:46:e9:40:9d:dd:ca:
                    2b:cc:5a:b7:a0:0f:a4:ae:7f:1f:c3:b3:04:bf:72:
                    06:13:a7:0e:45:72:55:6a:a6:b1:a7:34:74:37:ce:
                    2f:68:ed:e9:c4:48:f3:28:01:49:f7:0b:0d:f9:8d:
                    b4:5f:8e:d3:a0:6a:d7:a0:a0:cd:84:b0:5d:a4:69:
                    5a:c9:37:2c:c3:5b:1b:3b:da:ea:16:a0:57:d8:0b:
                    b3:83:e5:87:4a:8c:fa:97:64:49:6b:cf:ac:09:69:
                    d6:0d:c0:4f:d2:e4:ae:b5:9d:fa:18:1f:89:9c:0e:
                    a4:6d:4c:67:6a:e7:3b:19:3e:6d:58:60:ea:c3:83:
                    53:83:60:a3:79:d2:4e:66:ca:b9:68:d1:eb:b0:3a:
                    f8:22:b3:56:32:ec:01:55:58:3b:5a:1d:da:19:8d:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:61:65:C9:70:1B:C3:ED:98:66:B7:9D:07:57:85:4F:69:6A:FF:18
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f267518c-434d-480d-a95a-b446cde02ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:114a::/47

    Signature Algorithm: sha256WithRSAEncryption
         8c:10:b1:c9:13:82:7a:0a:80:e6:e3:e7:ef:e0:45:e9:04:1d:
         bc:07:07:16:9c:0b:c1:26:dd:31:1f:53:8a:c0:da:c7:78:15:
         d7:c3:26:6c:4c:6f:0c:1e:13:75:ab:cf:60:73:e0:69:ac:2a:
         77:a9:f2:73:f7:9c:5a:f5:84:f2:8f:dd:8c:a5:7e:2a:98:90:
         22:ca:47:3b:fe:1c:50:1d:0f:43:83:08:7d:fc:ad:92:da:4e:
         7b:04:61:03:21:35:49:e2:22:e1:de:38:9c:1b:e9:bc:80:23:
         8c:a4:de:9d:d8:ed:bd:d0:48:a5:2d:d0:2e:83:b2:85:44:61:
         3d:24:4d:7b:50:f3:52:64:18:71:b0:b4:84:7b:7e:bf:e3:db:
         9f:81:fd:22:fd:f6:53:ed:e4:77:e3:be:6f:2a:03:bc:70:c5:
         f2:45:53:5f:d1:f8:69:d5:47:77:c7:55:07:01:7f:d5:9e:b1:
         e5:f0:69:64:1c:64:5a:0e:d4:80:92:3a:c4:fa:36:7a:68:f5:
         c0:5f:27:17:9a:2e:02:cf:65:bb:14:15:2d:51:8d:ef:bb:3d:
         70:34:45:4b:b5:a4:36:b8:b4:ae:01:98:08:68:76:0b:aa:eb:
         28:f9:ab:07:d1:9f:3e:a9:51:ba:c5:b6:3f:d9:ec:a7:04:63:
         24:00:da:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:30:02 2026 by rpki-client