This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c2412694-bc88-4f52-8761-3c45a7295597.roa
File:                     c2412694-bc88-4f52-8761-3c45a7295597.roa (raw, json)
Hash identifier:          zu921tUyKV7XIOza+j84yJgAS/8Ishi609LRMklMWvc=
Subject key identifier:   93:9B:76:7D:32:9C:8A:68:AC:0A:71:FC:FD:0C:87:F0:99:E8:D2:2F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0745F67C8DEF4AD94DE6628265F6E4BD853C4E06
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c2412694-bc88-4f52-8761-3c45a7295597.roa
Signing time:             Tue 25 Nov 2025 02:21:31 +0000
ROA not before:           Tue 25 Nov 2025 02:21:31 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f7c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:45:f6:7c:8d:ef:4a:d9:4d:e6:62:82:65:f6:e4:bd:85:3c:4e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 02:21:31 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b4f2d232ee094db94cc6b2ef927da653360628e034dbd6c0659e22aea2d59472, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:06:a6:c9:99:ef:1f:e5:24:93:36:8b:27:
                    3d:fa:74:c3:1d:d4:a0:0d:5f:f9:1e:39:04:03:00:
                    12:4e:37:65:ed:dd:ee:03:e4:0c:3c:2e:00:87:87:
                    a7:30:ff:bc:c8:56:53:53:35:58:cc:91:e4:0b:58:
                    dc:99:9e:fd:a8:02:64:ac:9a:c0:43:cb:b8:60:18:
                    a0:3d:b2:56:d9:d7:d0:35:3b:e6:af:04:d4:34:4d:
                    7a:fd:f8:c1:ea:e2:80:e0:16:4c:f2:d1:bd:1b:d0:
                    d8:47:15:ef:8d:fb:d5:0c:62:05:35:51:d0:3a:01:
                    7c:07:b4:a4:8c:94:24:2d:b7:d5:ba:ae:59:a6:1a:
                    84:57:6e:64:fc:14:d0:43:f7:06:a1:c7:c5:0f:8c:
                    33:33:f5:b5:88:ab:c4:43:e4:72:88:a8:fb:38:61:
                    bd:c2:d1:d3:ce:34:48:5f:d1:e3:8f:07:1a:c4:e3:
                    1b:65:af:52:78:6b:1b:88:20:56:3b:40:b8:ec:01:
                    39:9a:b0:81:2f:cc:d9:38:6b:ae:96:a3:95:b3:e6:
                    10:b8:8b:1c:a3:a1:f7:94:54:f6:66:4a:34:a0:ea:
                    07:93:a6:fa:aa:d1:ca:e9:6e:e0:c4:ed:e3:02:2b:
                    dc:28:b3:60:61:54:6a:77:54:db:a7:59:c9:02:e8:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9B:76:7D:32:9C:8A:68:AC:0A:71:FC:FD:0C:87:F0:99:E8:D2:2F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c2412694-bc88-4f52-8761-3c45a7295597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f7c::/47

    Signature Algorithm: sha256WithRSAEncryption
         b2:79:49:c5:5e:99:80:49:33:67:f2:62:ee:62:a9:b7:a3:81:
         40:05:af:33:01:4c:27:e3:24:0e:be:86:9d:bd:67:9c:06:d2:
         84:a9:9e:31:62:48:0d:24:de:e0:c7:aa:74:3b:05:53:a5:05:
         f0:8e:ff:d0:31:e3:5e:ef:55:cc:a4:b3:30:b3:bf:72:f4:4d:
         d2:c9:14:ab:f9:de:03:e2:78:3c:ad:8e:c8:d2:8e:b5:ef:06:
         51:b1:51:1a:cd:2f:0a:89:07:e5:20:ac:35:92:68:2b:0e:fc:
         fb:a7:d1:e9:78:05:d3:06:df:f4:40:3d:9d:1a:c0:0c:a9:12:
         9f:26:76:31:aa:57:f7:ca:e6:eb:1c:9c:37:54:b3:47:bc:30:
         91:70:aa:78:b1:2b:71:25:dc:8b:10:49:77:b3:9c:47:dd:05:
         a0:91:22:c2:c6:36:44:67:ca:de:d3:72:a6:ff:b4:0e:5b:cd:
         5c:90:15:78:87:18:89:af:4e:da:e8:62:80:42:7c:0a:1d:f3:
         80:36:02:89:44:f6:54:4d:92:93:3b:7b:dd:dc:e9:72:c2:1f:
         f0:51:5f:51:45:f4:01:d8:92:d0:96:52:52:24:92:68:dc:7d:
         bb:1f:ae:c2:52:6c:1d:04:9e:af:b6:f5:3f:bd:ce:a7:0e:dd:
         dc:98:d0:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:57:46 2025 by rpki-client