This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28d88af4-8823-48bc-bee1-2712af3015be.roa
File:                     28d88af4-8823-48bc-bee1-2712af3015be.roa (raw, json)
Hash identifier:          L5gjRD7gggLmJK80Zg5orKFyJ7z3AthBEUTC86Kpo0w=
Subject key identifier:   31:D0:29:0B:60:1E:E2:33:4B:80:A4:EC:45:FA:50:5D:AC:41:72:D4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       07752F0AD1AB4C740D4E7A58A4370A114AED4E8E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28d88af4-8823-48bc-bee1-2712af3015be.roa
Signing time:             Mon 24 Nov 2025 04:00:05 +0000
ROA not before:           Mon 24 Nov 2025 04:00:05 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1b28::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:75:2f:0a:d1:ab:4c:74:0d:4e:7a:58:a4:37:0a:11:4a:ed:4e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 04:00:05 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=3060bfdef492426a869262bdd3a9ea0c46d62a5391353a1b79fdd3a50f6549f4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:3e:e5:eb:55:1b:27:bc:b3:ec:cc:a7:57:
                    8f:c9:e7:0a:2a:ec:d6:69:d9:c2:dd:9b:f1:d3:50:
                    0c:81:d2:18:d2:a2:05:ce:be:50:7e:38:4f:e1:5a:
                    62:5f:42:5d:09:9a:24:a7:58:37:4e:10:02:c4:de:
                    2f:e7:ba:0f:a2:af:2a:36:1b:93:64:ac:16:da:a7:
                    c9:83:47:f0:10:ca:52:a4:87:17:94:8c:1e:0d:9d:
                    d3:a5:f9:3c:a0:a8:d9:46:fd:3f:41:06:66:2e:e4:
                    e8:cc:b9:27:25:5f:e0:e6:9b:80:73:35:ab:0c:4c:
                    16:2b:84:73:de:d0:71:a2:d9:36:ba:66:06:2c:0d:
                    b3:4c:08:6c:37:e1:7b:67:41:d1:70:6e:1f:bd:bc:
                    b2:a0:c9:15:f6:c0:af:d5:d1:e3:a8:5b:55:79:e0:
                    79:2a:4c:ed:5d:6f:74:de:81:e6:44:64:29:f8:4b:
                    8a:ba:bb:53:99:06:82:5f:cc:4a:3c:30:00:26:7d:
                    b1:51:51:c9:89:e2:fb:bf:ce:f1:cf:a1:bc:9a:c5:
                    32:ef:00:e8:ea:62:36:de:cb:cd:e5:3e:ed:a3:e6:
                    c2:13:c8:67:51:ac:f6:60:3e:22:35:16:bc:f0:d2:
                    db:8f:52:37:51:8a:6b:0e:6b:bb:c7:ad:40:15:c6:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D0:29:0B:60:1E:E2:33:4B:80:A4:EC:45:FA:50:5D:AC:41:72:D4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28d88af4-8823-48bc-bee1-2712af3015be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1b28::/47

    Signature Algorithm: sha256WithRSAEncryption
         4f:e2:85:47:48:a6:a7:a7:dc:41:ee:72:d6:63:b9:4d:1d:55:
         ae:ee:b1:48:9c:3f:c4:6b:23:00:10:10:1b:60:87:00:ca:30:
         5f:9e:9a:c0:ac:ad:26:b2:6c:7b:71:96:5d:df:0f:54:52:50:
         61:ef:12:97:52:9e:13:d5:2c:2f:1c:db:1b:a3:4d:81:0a:2a:
         f0:64:78:b5:74:30:d2:c6:32:92:73:95:a5:88:76:5d:f6:8d:
         75:4e:da:d1:3d:a6:b1:b5:bb:13:bc:ff:4e:96:c2:22:72:5c:
         07:93:93:bb:32:45:99:eb:fb:dc:64:43:5f:a2:d5:95:5d:1e:
         6d:4c:4b:84:5a:3d:b6:97:f0:8a:7f:07:29:43:6f:79:7b:d5:
         77:bd:1e:87:b0:45:30:69:28:cc:5b:ea:2a:14:d6:5c:a3:db:
         5d:33:2e:f7:58:b4:e4:32:e2:87:6c:17:30:56:26:9d:77:68:
         bc:bc:bf:02:ea:83:3b:84:9e:15:14:75:dc:57:4e:40:79:4e:
         9f:2d:ee:66:f3:db:57:cc:2f:64:8e:e7:4a:de:c7:71:2c:b5:
         78:79:e4:32:34:72:fe:de:44:6c:ce:0b:f2:fd:c7:b6:56:74:
         19:84:37:9d:c5:72:1f:87:bd:71:d2:c7:e8:07:be:c0:44:d2:
         a9:d4:01:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:06:09 2025 by rpki-client