This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa
File:                     1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa (raw, json)
Hash identifier:          g+6hDY6fERIu4ZJfoad/2lZPGs5U3Bocamc6wsvb+XQ=
Subject key identifier:   7D:B4:98:01:C2:EC:88:92:C7:72:1D:05:12:DD:8F:35:37:5F:4C:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B538E35B9443C55A3B36E0986C4862F120959C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa
Signing time:             Mon 12 Jan 2026 18:38:48 +0000
ROA not before:           Mon 12 Jan 2026 18:38:48 +0000
ROA not after:            Sun 12 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.15.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:53:8e:35:b9:44:3c:55:a3:b3:6e:09:86:c4:86:2f:12:09:59:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 12 18:38:48 2026 GMT
            Not After : Apr 12 23:59:59 2026 GMT
        Subject: serialNumber=47cce90cf1961c9595537542eda1d5029cad5a23747d199f80b8b890f7754f1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:97:94:b4:00:cd:89:b5:2f:04:53:08:1f:9b:
                    f1:fd:47:a1:b8:bd:10:cf:b6:06:2d:37:02:5b:40:
                    35:e8:f5:16:b8:39:10:48:8b:e3:aa:9a:f7:00:ee:
                    72:00:2d:79:60:d6:d1:49:63:73:26:7c:dd:9e:cf:
                    9e:59:bf:56:f7:15:63:eb:b0:d2:81:e1:38:c7:50:
                    4f:71:0c:da:5a:c2:a9:e1:83:38:a3:be:1d:b4:ad:
                    f0:b1:5b:4d:55:dc:2a:a0:36:17:0b:50:93:65:74:
                    ad:53:14:cb:50:a4:5c:6a:15:00:12:0b:ff:c2:d3:
                    13:fc:65:41:4e:3d:61:84:82:b4:91:21:fc:17:ae:
                    4e:02:3f:f8:5d:bc:02:ce:73:11:f5:9d:1e:75:09:
                    75:a5:cb:da:f0:43:f5:bf:9e:d9:bf:0b:79:be:c7:
                    37:dd:11:6e:36:8c:a7:dc:23:34:21:3b:a9:fa:04:
                    34:17:68:fc:43:99:83:db:c7:8e:22:68:c4:cb:e7:
                    5c:80:6a:cb:66:78:24:26:94:aa:ed:c9:67:58:b5:
                    49:c7:41:66:84:75:64:12:d0:82:8c:d4:45:c2:7c:
                    e6:6e:95:4a:e3:8c:4a:a2:0d:89:4f:8e:6b:64:61:
                    d7:86:f6:d7:9b:c0:c5:ed:66:98:06:af:7b:6b:ab:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B4:98:01:C2:EC:88:92:C7:72:1D:05:12:DD:8F:35:37:5F:4C:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:aa:85:d0:d7:98:30:07:3b:db:b8:ba:f5:e0:7f:13:2a:
         0a:99:ad:ec:76:8f:95:34:29:7a:83:d0:00:42:62:07:38:3b:
         9b:98:bd:56:8a:7e:6e:26:7c:5f:2f:d4:b0:fb:06:d0:d8:cf:
         ba:6e:a2:d1:79:e9:a2:df:a5:2e:9a:3c:c2:ff:3a:c3:a0:ba:
         ce:61:d1:73:39:d3:22:b3:66:73:d3:8a:65:ac:e0:36:b8:04:
         3d:e4:ad:9c:38:6b:36:f3:50:77:08:87:77:a0:2e:78:4e:e3:
         78:8d:28:b6:4f:08:ed:fe:85:5b:c2:a3:94:e3:8e:c3:90:0f:
         b6:53:e8:1b:cd:af:4c:6b:78:30:4c:62:94:0a:c6:f6:29:b3:
         1e:1b:d8:cb:3a:fd:a1:c3:9f:81:e1:8a:14:e4:38:45:49:96:
         ce:fb:b7:01:38:d7:65:1d:5e:a2:70:63:3b:e0:63:79:82:ef:
         20:11:c1:26:99:1d:bd:eb:20:62:fa:c2:5c:20:07:95:30:1d:
         25:ba:ce:2c:f0:a4:01:af:81:05:f6:be:6c:34:dc:6e:80:36:
         86:0e:8c:7a:22:ab:eb:60:e2:63:4a:71:ec:dc:04:eb:4d:be:
         48:9e:3c:e1:68:38:9c:8c:99:0b:a5:ce:f2:fb:c0:2c:58:44:
         bd:df:45:7b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC1OONblEPFWjs24JhsSGLxIJWcMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMTEyMTgzODQ4WhcNMjYwNDEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0N2NjZTkwY2YxOTYxYzk1OTU1Mzc1NDJlZGExZDUwMjlj
YWQ1YTIzNzQ3ZDE5OWY4MGI4Yjg5MGY3NzU0ZjFjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAl5S0AM2JtS8EUwgfm/H9R6G4vRDPtgYtNwJbQDXo9Ra4
ORBIi+OqmvcA7nIALXlg1tFJY3MmfN2ez55Zv1b3FWPrsNKB4TjHUE9xDNpawqnh
gzijvh20rfCxW01V3CqgNhcLUJNldK1TFMtQpFxqFQASC//C0xP8ZUFOPWGEgrSR
IfwXrk4CP/hdvALOcxH1nR51CXWly9rwQ/W/ntm/C3m+xzfdEW42jKfcIzQhO6n6
BDQXaPxDmYPbx44iaMTL51yAastmeCQmlKrtyWdYtUnHQWaEdWQS0IKM1EXCfOZu
lUrjjEqiDYlPjmtkYdeG9tebwMXtZpgGr3trq5dHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfbSYAcLsiJLHch0FEt2PNTdfTGowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFiYzZlNTJlLTQwNWQtNDBkZS04ZTY3LTljMTlkYTllMzJhYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIQDywwDQYJKoZIhvcNAQELBQADggEBABaNqoXQ15gwBzvbuLr14H8TKgqZ
rex2j5U0KXqD0ABCYgc4O5uYvVaKfm4mfF8v1LD7BtDYz7puotF56aLfpS6aPML/
OsOgus5h0XM50yKzZnPTimWs4Da4BD3krZw4azbzUHcIh3egLnhO43iNKLZPCO3+
hVvCo5TjjsOQD7ZT6BvNr0xreDBMYpQKxvYpsx4b2Ms6/aHDn4HhihTkOEVJls77
twE412UdXqJwYzvgY3mC7yARwSaZHb3rIGL6wlwgB5UwHSW6zizwpAGvgQX2vmw0
3G6ANoYOjHoiq+tg4mNKcezcBOtNvkiePOFoOJyMmQulzvL7wCxYRL3fRXs=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:44:11 2026 by rpki-client