This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98500626-397e-4699-aff1-135d91157630.roa
File:                     98500626-397e-4699-aff1-135d91157630.roa (raw, json)
Hash identifier:          +H7vcjIY28qz2RFliwIWx6enxODb2wHWb4ANtBeh/4E=
Subject key identifier:   A9:2B:A8:BC:F4:07:67:2D:89:0C:4D:B0:59:8C:1B:56:CF:32:E2:CE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       335FD67E3FBD774F5EFA0F8C3628F4812597340E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98500626-397e-4699-aff1-135d91157630.roa
Signing time:             Tue 25 Nov 2025 05:51:01 +0000
ROA not before:           Tue 25 Nov 2025 05:51:01 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5f:d6:7e:3f:bd:77:4f:5e:fa:0f:8c:36:28:f4:81:25:97:34:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 05:51:01 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=10757458f5acb3251be7af9804af1d9bc85c0992fa415120fd06c8a5f2957e7e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:f4:9f:f4:b9:36:59:ce:9d:48:6f:cf:7a:
                    be:f5:5b:df:3e:07:4c:8a:71:e3:60:1e:d1:c6:13:
                    35:d5:f8:86:ea:74:46:6e:66:38:2c:51:4f:1f:03:
                    d7:ef:bd:f0:43:cd:35:84:b3:ba:73:19:a4:74:13:
                    7c:39:d2:14:53:a3:56:7c:76:c2:2e:31:86:7d:75:
                    8b:1f:a9:a7:81:3a:ff:0b:73:04:46:bc:c4:33:a6:
                    35:e8:be:c5:75:bf:4c:f1:3d:82:b1:72:b3:e2:53:
                    d3:79:eb:e6:7c:7f:70:86:d0:3b:62:55:e0:05:3a:
                    ec:fa:44:39:87:8a:4f:de:01:18:c8:8c:11:b1:5e:
                    88:4b:54:f3:ed:71:ed:c2:fb:40:b8:7c:f0:47:45:
                    e5:de:7c:8c:8f:f9:ef:31:63:f2:84:fc:11:92:75:
                    11:27:6a:d4:b9:2a:86:ca:6c:b1:54:25:c4:57:2d:
                    ce:72:a7:79:64:d2:32:59:4a:2a:42:cc:5c:1a:fe:
                    82:03:27:ba:d0:86:1a:8c:86:8f:d9:82:7d:72:9e:
                    d2:b2:e2:0b:c8:f8:2d:34:73:a3:3c:3d:88:2d:4d:
                    95:b5:38:6b:76:f7:e4:c9:df:73:bc:c8:07:01:4b:
                    08:6a:d3:33:ab:bf:4c:4a:59:b9:96:35:e2:2f:27:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2B:A8:BC:F4:07:67:2D:89:0C:4D:B0:59:8C:1B:56:CF:32:E2:CE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98500626-397e-4699-aff1-135d91157630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f40::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:81:11:06:34:cc:c8:70:23:f5:ed:9a:b3:d0:7f:91:29:9d:
         74:54:fe:2d:00:d3:be:68:44:6b:85:42:39:62:07:bf:de:76:
         72:94:16:41:58:91:c6:aa:e0:81:24:86:37:19:40:73:0a:47:
         85:9a:4f:ff:ec:d2:39:15:18:e3:7b:c1:15:e2:6d:50:01:d3:
         2b:29:98:60:c8:c5:40:70:20:7c:ea:27:d4:a3:a5:35:95:54:
         f9:07:ec:37:ba:0c:39:04:6a:13:74:75:e8:db:4c:c6:ef:10:
         13:da:09:0c:4c:ea:6c:b8:65:94:fa:e7:60:13:04:0e:e6:a3:
         a3:f9:a9:57:69:d8:42:89:10:a8:27:ad:2a:a6:51:eb:c6:98:
         27:b4:5e:ea:f5:85:83:3c:49:e0:f9:89:e9:bb:33:cd:65:53:
         3d:60:d5:79:53:a0:16:cf:72:f9:a5:76:56:87:a0:16:38:db:
         78:b8:a5:db:43:fb:41:a9:0f:c8:d8:ae:c8:a1:14:c1:de:7b:
         9f:ca:d8:01:87:b7:60:37:26:9f:dc:f0:b2:ca:4e:02:1b:16:
         9a:27:c6:97:59:38:32:4f:08:a9:82:d8:4b:b8:db:99:a9:3b:
         0b:15:a8:c3:c4:1f:ff:62:6c:b5:b3:9f:16:91:d7:e5:07:d7:
         db:e3:0a:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:57:46 2025 by rpki-client