This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d879824-3897-400b-8e35-4c203f107559.roa
File:                     7d879824-3897-400b-8e35-4c203f107559.roa (raw, json)
Hash identifier:          6IKaR6dRft39JtUT92BK4zP6u/Ds282Sez4a91Jv+a4=
Subject key identifier:   A1:72:B0:67:26:62:EA:AE:A1:15:84:A0:49:FB:D0:F5:EB:58:3F:44
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       572E4262050799CBA68BE6C97B62A99CE5F62920
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d879824-3897-400b-8e35-4c203f107559.roa
Signing time:             Mon 24 Nov 2025 05:32:23 +0000
ROA not before:           Mon 24 Nov 2025 05:32:23 +0000
ROA not after:            Sun 22 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1876::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2e:42:62:05:07:99:cb:a6:8b:e6:c9:7b:62:a9:9c:e5:f6:29:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 24 05:32:23 2025 GMT
            Not After : Feb 22 23:59:59 2026 GMT
        Subject: serialNumber=bdc44e52eafbf301cd07283d8b9ced46b83bfb5b84298f2401b8da1590c3f6a4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:20:68:2a:83:3d:7e:97:fa:59:37:fe:e1:
                    d0:d7:32:75:e8:46:1c:e8:70:35:78:4d:c2:7e:59:
                    ab:3d:ca:6b:29:78:5b:68:2f:1c:40:0b:c6:b3:44:
                    9a:f9:d8:2a:01:de:aa:ca:95:b8:84:6a:02:e7:a1:
                    82:e3:cf:33:80:c6:69:84:9b:cf:80:3f:8f:a4:0c:
                    21:13:f2:ac:1f:d1:05:99:88:c0:03:ba:3a:d1:0f:
                    18:17:6a:ea:47:63:47:50:89:8a:e8:48:2a:26:89:
                    55:bc:6c:ea:d2:3b:08:e3:21:d6:09:98:ad:0a:1d:
                    c2:06:c7:56:b3:d7:19:12:56:96:a4:08:73:c0:85:
                    67:c9:06:64:98:e9:6c:ef:cb:8d:d1:b4:04:1d:71:
                    3e:1e:32:83:af:87:00:69:ef:90:c8:4e:9d:72:8d:
                    8a:58:b7:2d:d8:35:85:df:1e:50:11:a6:58:f2:4f:
                    f6:6e:56:1e:2e:5f:fc:fd:e7:f5:83:eb:ec:1c:88:
                    63:ad:03:96:dc:b5:ac:e7:9a:88:13:d8:79:f3:2e:
                    4b:4c:e1:f8:c9:7e:84:30:87:a2:ce:6a:cf:99:e2:
                    1c:0c:b9:a0:a8:1a:eb:cf:90:92:80:7e:4c:a1:ca:
                    c3:c6:79:6a:49:1d:3a:2e:bb:26:b9:21:26:f9:1b:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:72:B0:67:26:62:EA:AE:A1:15:84:A0:49:FB:D0:F5:EB:58:3F:44
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d879824-3897-400b-8e35-4c203f107559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1876::/47

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:4c:4c:fc:aa:29:b2:b2:65:e9:f3:39:62:cf:af:8e:37:
         4a:32:22:32:7c:0e:b5:65:6c:06:1d:26:fa:81:27:e9:13:8c:
         c3:22:de:38:16:b6:62:a2:fe:0a:a8:86:a6:89:92:40:e4:a8:
         94:13:00:07:6c:f8:c9:f0:20:60:13:37:6c:f8:ec:e2:ae:1e:
         f2:b8:ae:ad:71:16:bf:f6:0c:3b:0a:e3:6e:00:18:b4:e7:e5:
         8e:0a:a6:3f:9f:78:49:70:72:4e:b7:b8:46:08:14:63:dc:df:
         07:e7:f8:32:a1:f2:ab:87:0b:ff:51:e4:e9:3a:64:59:37:64:
         3c:ff:b9:ef:23:16:45:c7:b8:94:7d:fb:7e:d4:cf:90:10:13:
         b4:68:77:03:bf:41:dc:9c:8c:eb:63:8e:30:45:7f:e3:23:9a:
         6b:8a:a7:f9:b5:82:c0:10:52:8c:51:52:c7:32:c5:db:01:e2:
         25:9f:e5:ef:98:99:5f:9b:a1:68:2b:f2:51:d9:91:11:34:8e:
         45:c5:9d:b4:89:52:c4:b9:87:33:ce:af:e3:3f:48:8c:d9:3f:
         ed:87:3f:20:ec:08:f0:c8:67:57:98:1d:09:c7:1a:48:82:e8:
         b6:1d:45:2c:e4:60:ef:20:4c:7d:35:f7:19:a7:61:26:77:2b:
         64:51:79:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:57:46 2025 by rpki-client