This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fef477a6-f07f-4c9a-93ec-f1282394f000.roa
File:                     fef477a6-f07f-4c9a-93ec-f1282394f000.roa (raw, json)
Hash identifier:          sBZeEGwsSKo2Bmfzbdb9ld3gxj4zDC4wTRqSdvvdNCQ=
Subject key identifier:   04:77:40:9E:31:F2:80:5A:89:43:AF:F0:78:0E:66:E1:2B:90:33:70
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       714EA47765BDEB1C233A012675B0118F7D1D5D0B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fef477a6-f07f-4c9a-93ec-f1282394f000.roa
Signing time:             Wed 31 Dec 2025 21:53:41 +0000
ROA not before:           Wed 31 Dec 2025 21:53:41 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:112a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4e:a4:77:65:bd:eb:1c:23:3a:01:26:75:b0:11:8f:7d:1d:5d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 21:53:41 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=8547a0750b91af0693dec0b682d91fced1f1fe7a740e744aef9544479b5e8dc2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:25:c5:d3:e7:de:79:4a:ae:66:77:28:88:
                    69:b6:e5:59:fb:13:04:8f:e4:37:9d:3b:d1:89:49:
                    22:74:8e:d7:4f:44:23:51:f2:16:7f:9a:39:4d:6b:
                    2d:53:c4:0d:39:bd:f2:da:19:04:9a:eb:b5:12:00:
                    b3:34:3f:6b:d3:2e:c9:bc:4e:6c:c7:8e:64:da:eb:
                    18:64:f1:45:1c:0b:86:8a:0f:43:d1:b7:06:10:86:
                    c4:6d:d0:1e:f1:18:36:f0:50:f3:df:fe:72:6b:bc:
                    5b:db:b5:8f:d6:d8:48:5b:e0:e9:0f:64:71:b3:b9:
                    a1:56:c5:2d:54:af:c4:30:51:02:2e:b7:73:fd:c9:
                    2a:5f:7f:d0:05:57:04:1d:3d:37:e9:83:3f:29:04:
                    1e:53:df:af:ba:c6:75:0a:00:6a:c5:44:7b:dd:88:
                    38:2a:da:20:8d:dc:8e:f3:ab:88:47:1c:5f:9a:12:
                    0b:39:2d:d4:5e:6b:4d:ad:a4:7e:05:45:ea:e4:29:
                    08:8c:91:51:89:cf:bb:fc:9f:15:f0:2a:70:71:7e:
                    b1:3e:e2:eb:14:bd:6f:c5:9b:20:5b:5c:99:2f:25:
                    5c:b2:54:20:34:6d:47:be:37:d9:d8:ad:ec:9a:43:
                    39:f9:46:1a:06:12:32:d5:fe:e1:6b:d2:07:d5:a0:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:40:9E:31:F2:80:5A:89:43:AF:F0:78:0E:66:E1:2B:90:33:70
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fef477a6-f07f-4c9a-93ec-f1282394f000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:112a::/47

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:b0:55:d2:15:fa:c4:08:50:0f:65:d0:e7:48:5d:e5:ea:
         a0:8c:5c:d5:b1:3d:3c:a8:c7:55:4c:f3:84:d4:b9:c2:01:00:
         46:3b:41:3a:01:60:65:49:98:9a:b0:04:ee:d6:73:27:b3:2a:
         df:78:f7:52:18:aa:a3:9e:c0:4a:98:be:93:60:97:8c:43:79:
         6f:23:9e:a5:92:de:dc:e0:c9:7c:f7:8a:dc:40:9d:93:25:c4:
         ca:97:b2:3f:6b:59:58:c9:2a:dd:38:68:86:ae:17:f2:83:a2:
         cb:25:10:74:3a:0b:ae:2c:a8:0c:28:dc:2e:94:fe:bd:0f:71:
         b9:58:4a:a3:9a:fd:31:39:f4:ce:8f:e4:0f:14:58:35:4d:8b:
         2a:30:dd:46:bf:2f:9c:a8:f4:4d:24:e0:ae:a5:1b:a0:69:fd:
         71:fc:bf:1a:98:0a:99:2f:cf:57:74:a9:52:6c:11:6a:45:98:
         a7:4e:95:9d:4d:cf:dd:f0:97:b7:b6:c0:50:ab:27:95:79:34:
         03:85:7c:3c:81:5b:bd:73:2a:a4:75:05:55:21:fd:5b:60:4b:
         a8:8b:fa:de:8a:21:24:a2:83:82:99:c7:59:dc:48:1d:59:be:
         f0:f6:74:d3:ec:6e:68:bd:cf:6f:f7:dc:de:79:0a:9a:c1:96:
         ea:10:88:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:15 2026 by rpki-client