This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60d9003a-c486-450d-9ee3-5ded7c8fbbee.roa
File:                     60d9003a-c486-450d-9ee3-5ded7c8fbbee.roa (raw, json)
Hash identifier:          QwGaogR/yow8YKvtpVzT4jK3DRQwdPKhVNp9lEFTAO8=
Subject key identifier:   47:FC:88:9D:97:03:26:04:20:B9:CE:DE:BB:FE:5D:17:39:75:A9:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F6FE0D0FFC5549386981EBB8CA4CFCF7FAB7575
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60d9003a-c486-450d-9ee3-5ded7c8fbbee.roa
Signing time:             Fri 16 Jan 2026 03:51:39 +0000
ROA not before:           Fri 16 Jan 2026 03:51:39 +0000
ROA not after:            Thu 16 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        45.33.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6f:e0:d0:ff:c5:54:93:86:98:1e:bb:8c:a4:cf:cf:7f:ab:75:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 16 03:51:39 2026 GMT
            Not After : Apr 16 23:59:59 2026 GMT
        Subject: serialNumber=31095613a43d772385dff3d866b12bde919722521c7f9d9d0549cb67969289ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:70:d5:02:53:1c:ef:3d:a7:0a:af:2e:7b:
                    98:99:1f:04:c1:f6:64:4c:47:5b:c2:96:9c:bd:19:
                    fe:f0:2c:89:22:45:ae:d4:12:83:2b:eb:ab:42:ff:
                    f1:f9:4e:e4:b2:42:1b:c4:e2:7e:62:58:b1:7d:e2:
                    ed:ac:4f:7d:cd:3c:28:83:a6:65:d8:e2:e0:21:90:
                    f1:31:25:f3:3e:b9:4e:f9:06:ba:95:b9:c9:4f:11:
                    2f:30:88:a1:bc:f4:3a:b4:97:1b:d7:75:3f:cd:80:
                    ba:91:04:08:ee:17:ea:49:0f:62:4d:87:b6:65:00:
                    8c:c5:35:92:35:e0:48:ef:3e:5b:4a:42:99:00:7a:
                    47:1b:9e:d2:32:47:b5:e6:ea:ef:69:60:02:8a:88:
                    be:e9:11:09:5e:e6:2e:35:18:92:7b:e4:0b:48:b1:
                    5d:12:37:45:c2:a4:6c:37:60:9a:03:ec:bf:06:d3:
                    57:68:c7:5e:4e:76:0d:74:92:9b:55:03:da:cd:f9:
                    7a:8e:20:b8:5a:4b:8d:b9:9c:a8:c6:d1:96:f1:d0:
                    20:b8:1b:27:61:53:fe:5f:bc:cc:d6:79:ad:09:17:
                    23:96:4c:2f:2a:2c:d5:5e:5a:fa:f5:f5:1a:5a:d2:
                    cc:50:7d:90:8d:48:a1:9b:b7:2b:68:77:d2:7e:2f:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FC:88:9D:97:03:26:04:20:B9:CE:DE:BB:FE:5D:17:39:75:A9:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60d9003a-c486-450d-9ee3-5ded7c8fbbee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:e2:f5:cd:ee:15:f9:8f:d1:65:27:a0:08:53:2b:be:bb:
         04:05:20:71:03:94:97:8b:7e:0f:da:d4:14:5b:ae:0e:6e:8c:
         73:63:24:28:ff:e4:3f:44:02:16:6a:99:c4:55:4d:a5:3f:bc:
         4d:c7:b4:7c:3a:21:48:b4:fb:95:2e:5a:1b:6f:b8:df:6c:fa:
         8c:80:63:6e:34:39:9b:81:48:f0:10:df:67:19:3e:d4:88:de:
         83:dd:f1:d0:6c:70:65:d6:3f:c5:15:13:47:bd:2d:d7:ff:37:
         82:d2:3e:6f:93:f8:b9:28:e5:ae:9d:f2:cf:0a:d3:54:04:02:
         a6:ef:c6:8c:11:c7:80:b2:b8:1a:b7:a0:99:f8:4c:43:ff:9e:
         b4:b4:9e:52:66:6c:57:05:78:dd:8a:2c:b5:56:3f:92:2c:64:
         4d:76:29:75:d2:fa:52:75:3c:fd:7b:93:75:4b:3e:a5:b9:a3:
         0b:c5:98:a1:3f:cf:25:47:95:d1:6b:4d:88:f9:4a:0f:5a:95:
         3b:2a:3f:6e:73:86:91:4c:16:69:c8:a3:45:64:65:a3:21:0f:
         d9:52:e7:4c:23:74:63:05:c1:a1:bd:9e:91:c9:b2:90:ed:d9:
         d1:99:87:b1:e6:e5:dc:a1:b8:d1:18:1a:15:b0:78:f3:c6:b6:
         ae:e0:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:44:50 2026 by rpki-client