This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38400738-5e7f-4392-b90a-515a9572e173.roa
File:                     38400738-5e7f-4392-b90a-515a9572e173.roa (raw, json)
Hash identifier:          Dxwh5yBCHP581pjBdT6vkK0H4YQoDa4e+jMZ4x4wzP4=
Subject key identifier:   F9:EB:27:6C:48:04:44:CE:CB:0E:C1:67:1A:9C:B2:0E:8D:8C:75:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       603DD839EBCD263F273E4BD01F4EA38785DC5BF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38400738-5e7f-4392-b90a-515a9572e173.roa
Signing time:             Tue 06 Jan 2026 21:21:51 +0000
ROA not before:           Tue 06 Jan 2026 21:21:51 +0000
ROA not after:            Mon 06 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.55.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3d:d8:39:eb:cd:26:3f:27:3e:4b:d0:1f:4e:a3:87:85:dc:5b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  6 21:21:51 2026 GMT
            Not After : Apr  6 23:59:59 2026 GMT
        Subject: serialNumber=a78c0cb3b22f16e0ec807806b71ded9ac4f109316f145189692369c7a1dcabe4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:a7:28:f6:4e:31:fe:e0:60:fe:64:87:a8:
                    04:ad:52:ac:1e:4a:7c:7d:41:5c:f7:f2:0e:46:1e:
                    04:12:c7:7b:20:bc:0b:a8:1c:a0:29:db:c8:ad:cf:
                    aa:a0:4d:92:9c:fc:56:60:91:1e:6f:c5:45:04:98:
                    cb:45:16:11:a5:11:7b:2a:33:2e:4d:a0:6a:15:98:
                    12:7f:f1:1f:50:76:a2:ab:09:48:10:f9:ee:6c:a7:
                    22:82:e4:55:c9:2c:3a:e5:01:34:41:3c:69:30:bb:
                    63:3d:fc:d1:ad:90:8e:3c:6f:c6:84:71:24:7d:a9:
                    5c:c4:73:3c:e5:a3:80:2f:e2:41:4d:89:79:60:75:
                    5e:85:ba:34:86:71:47:eb:ff:23:36:fe:a0:f0:4c:
                    0a:09:ec:54:95:bb:68:5f:87:65:ad:a8:fe:4d:9c:
                    c1:16:1d:35:ed:3d:ac:2e:8b:43:c1:b3:9e:ad:f6:
                    75:37:a6:f9:df:56:0a:9d:f4:73:87:26:49:6c:5a:
                    ce:78:8a:7e:3a:0e:4d:08:bb:ed:ec:cf:80:c1:e5:
                    18:1f:2f:e2:9e:ed:51:af:11:91:78:c3:8a:01:02:
                    5b:aa:f4:64:71:65:23:0f:03:d4:99:34:eb:2a:a2:
                    c6:49:d8:23:24:af:84:23:4e:8c:56:37:65:d8:45:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:27:6C:48:04:44:CE:CB:0E:C1:67:1A:9C:B2:0E:8D:8C:75:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38400738-5e7f-4392-b90a-515a9572e173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.55.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d3:3c:f8:9c:53:bb:5f:38:6c:72:ad:02:24:ec:7c:5a:29:98:
         98:84:8b:48:d0:e3:68:8f:01:08:b9:8c:17:73:1e:95:48:42:
         67:a2:84:2c:12:69:69:2f:39:67:22:41:34:f0:ab:01:21:11:
         1f:2b:6f:43:4d:50:50:97:1c:de:27:fd:cc:b5:74:15:0d:4a:
         41:46:2a:36:8f:94:97:b5:11:ac:6d:d2:27:c4:23:95:26:5d:
         f1:d2:75:31:ab:72:70:7b:83:e7:f2:b8:e6:45:af:1f:11:bd:
         46:d2:27:92:68:30:1c:0b:2b:25:d5:0c:72:9e:10:2f:2d:ab:
         b8:25:2c:bf:d4:da:77:3b:55:9e:e1:04:e7:62:ec:d1:86:ef:
         ee:08:b8:51:71:1d:0b:71:4b:c8:79:43:da:08:bc:4c:8d:42:
         c6:a9:b1:09:e7:56:9a:f7:a1:bf:94:63:bc:33:ac:5c:8a:89:
         77:5d:dd:d2:9b:83:9d:6f:9f:59:39:9d:61:b4:fb:5f:8a:75:
         06:66:c8:a7:b6:90:4e:ab:32:e1:1a:fc:88:8e:10:f1:76:99:
         a0:f3:ea:d4:7d:2d:8d:a9:4f:11:05:55:ec:4a:85:08:03:da:
         d8:3c:5a:ef:bb:a6:b3:e3:c1:95:3f:eb:61:5b:16:b7:aa:d7:
         27:a8:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 08:23:41 2026 by rpki-client