This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e726274-2056-45c2-86c0-f9af5ed8e9f9.roa
File:                     5e726274-2056-45c2-86c0-f9af5ed8e9f9.roa (raw, json)
Hash identifier:          fgbjeq1mVncb2N9vkE8/xKknYUw7O+gn4hAyTwmY9b4=
Subject key identifier:   DE:D1:C2:7A:7C:65:77:53:B9:61:E1:C1:FE:8C:21:48:B7:70:1C:7C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1C31CBEACE250C34D3CBD31DABF4540CBE5C353F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e726274-2056-45c2-86c0-f9af5ed8e9f9.roa
Signing time:             Tue 02 Dec 2025 00:50:13 +0000
ROA not before:           Tue 02 Dec 2025 00:50:13 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:31:cb:ea:ce:25:0c:34:d3:cb:d3:1d:ab:f4:54:0c:be:5c:35:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec  2 00:50:13 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=c29b9029899180e0109f38b5756f95c09fd5b8dcd1f4e320874ea4266119a069, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:e7:11:f2:b7:e1:5e:84:53:ba:3f:79:32:
                    f0:d3:0e:39:df:a5:a4:dc:89:09:d5:f4:f0:21:2e:
                    31:c7:89:23:e3:9d:c3:a3:b7:10:4c:a0:7f:20:32:
                    b4:d4:e9:35:c1:05:a4:25:cf:ec:eb:8a:33:4b:f2:
                    c5:55:81:68:de:77:87:67:7f:29:2b:65:af:ec:a8:
                    1f:95:92:33:d1:94:5f:16:90:2d:54:ec:ba:15:24:
                    01:b2:51:ad:28:57:65:3d:26:70:74:3a:a5:d3:17:
                    66:73:91:04:a7:72:e6:11:29:ba:0d:8f:2b:17:ab:
                    43:a3:04:7a:c9:41:c8:be:9f:fb:44:47:61:4e:02:
                    e7:0d:5a:c1:1f:84:dc:15:e8:f4:0d:34:83:42:32:
                    42:ce:da:53:b3:65:ef:66:fe:06:89:3b:8a:0e:83:
                    6c:60:eb:31:be:c2:81:49:f4:17:58:db:5c:81:1c:
                    05:ed:32:ee:39:f2:a0:33:1e:7e:e7:58:b7:60:82:
                    36:18:84:1c:ca:7d:a6:6f:b2:cb:d5:dc:a7:8f:4a:
                    84:51:a5:1f:66:0a:b0:0a:95:dd:fb:97:4f:24:18:
                    21:49:24:cf:b6:50:2e:11:4c:52:cc:03:2f:1d:ad:
                    75:0e:23:1b:84:68:e2:8e:aa:eb:70:7b:93:04:fe:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D1:C2:7A:7C:65:77:53:B9:61:E1:C1:FE:8C:21:48:B7:70:1C:7C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e726274-2056-45c2-86c0-f9af5ed8e9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:88:8d:08:c1:28:d1:b8:5f:4c:7e:8d:f9:f9:bc:51:bd:
         5d:0d:56:6d:a6:9a:93:06:2d:fa:b3:55:04:20:6d:30:09:91:
         ff:df:7c:12:74:99:cf:cb:5c:d0:ec:c1:4a:68:70:02:25:bf:
         b6:ed:23:e3:73:0b:90:c3:f9:62:ee:38:e8:b8:02:27:3e:11:
         9c:95:aa:fe:32:d4:98:f2:5c:50:2d:49:0d:f4:75:1d:47:8b:
         64:84:41:96:13:53:34:9f:bf:b2:63:9b:01:24:32:70:16:42:
         f0:98:66:8e:9c:cb:2a:b6:e5:54:2c:96:33:5c:ef:42:02:1b:
         9d:b9:b1:78:c1:04:f8:fe:00:33:6a:c7:aa:f2:2c:0c:70:1c:
         54:64:5c:24:cb:ea:93:78:62:13:6f:a5:6c:d4:bb:9e:19:8d:
         57:2f:83:40:8d:86:89:ed:a4:25:6a:5d:f6:0f:a7:91:5e:8f:
         23:5d:2f:bd:eb:cc:3c:ce:86:19:af:b5:7b:63:8c:e2:8c:06:
         83:b2:53:4e:f2:3a:bd:a5:fe:1a:b1:42:dc:1f:7e:97:b5:c9:
         f5:da:ba:87:9c:b8:45:b8:65:62:dc:ad:2d:78:1b:ae:de:4e:
         f6:25:f1:59:b6:5c:0e:99:10:60:87:b1:70:3e:01:29:32:e3:
         10:ac:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:07:11 2025 by rpki-client