This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2062309-a07e-4752-8307-f95c61c019c8.roa
File:                     a2062309-a07e-4752-8307-f95c61c019c8.roa (raw, json)
Hash identifier:          ioKIQAwh9ULtgPMLWYTURb4VMUBKEiZzHcHUNVcx0/A=
Subject key identifier:   DF:96:A5:4D:73:28:35:08:43:77:64:A4:42:3C:97:40:96:DD:D6:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0EE1D1E84AC9F4D0618C77E0C93485FA318627B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2062309-a07e-4752-8307-f95c61c019c8.roa
Signing time:             Tue 13 Jan 2026 19:54:56 +0000
ROA not before:           Tue 13 Jan 2026 19:54:56 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:8050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e1:d1:e8:4a:c9:f4:d0:61:8c:77:e0:c9:34:85:fa:31:86:27:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 19:54:56 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=90e2ffcbfa1a27a99645ee1ffacf7d0e959b50ae4146ab91b0a585b99d28fcd7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:62:d2:54:62:77:62:08:ee:90:6b:03:aa:
                    34:cb:93:4a:db:75:80:6d:52:30:4d:7b:43:f0:0b:
                    af:77:cc:3b:f8:9c:87:37:8d:34:79:eb:a3:81:d2:
                    14:a9:4d:b2:d5:38:52:14:7e:b0:79:10:5a:c3:a0:
                    c7:3e:91:38:4c:7c:b5:35:be:0c:8d:02:22:e5:cd:
                    83:84:c1:2e:94:76:6e:ad:05:a4:c3:83:db:f1:a6:
                    06:82:5e:40:04:60:af:50:f3:36:63:7e:23:7a:9d:
                    92:53:3f:53:05:e9:58:0d:42:70:9a:f2:d3:6f:21:
                    32:9e:da:61:4d:6a:38:5f:c0:bd:7a:54:3b:a1:c3:
                    08:df:29:3d:47:d2:cc:e3:29:e0:b9:43:98:c6:35:
                    c8:8a:d5:70:c8:f9:83:63:ec:d8:e5:23:62:06:89:
                    d9:63:dc:6c:ec:f4:18:23:27:8c:f3:87:ea:d4:85:
                    5c:84:3d:9f:fd:04:68:d0:3a:ce:8e:7e:da:db:36:
                    a7:de:f0:57:5c:a4:6e:c3:75:35:18:f3:2d:b2:c4:
                    8a:ba:2b:cc:40:4b:3d:dd:3c:c7:ac:4f:73:bd:48:
                    e3:8d:7a:71:02:16:e4:d9:71:20:6e:50:df:fd:eb:
                    c3:53:e2:aa:e2:b4:a1:47:54:50:95:da:b1:f5:8f:
                    ce:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:96:A5:4D:73:28:35:08:43:77:64:A4:42:3C:97:40:96:DD:D6:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2062309-a07e-4752-8307-f95c61c019c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:8050::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:ed:71:b6:98:6d:42:a7:a7:61:3e:8f:ae:e6:61:5a:a5:b7:
         84:b4:9d:2e:1c:f1:40:9f:10:3a:fd:a5:d2:43:69:74:8a:f7:
         16:7c:9a:d9:86:70:54:08:27:42:6c:f7:ae:e1:ad:33:06:94:
         7d:66:d3:d6:d4:6e:64:17:e4:a2:73:5c:a7:28:aa:c3:bd:26:
         21:d5:04:30:90:01:4c:97:80:44:78:48:9b:6d:65:dd:b3:f0:
         f0:23:e3:88:fb:03:93:45:a9:97:ee:36:3e:25:8f:c1:bc:f2:
         80:af:d7:af:cc:ef:5c:94:8e:57:a6:35:65:d6:c1:d4:d5:31:
         fe:7d:ac:c6:9a:81:18:04:e9:b9:eb:bd:e8:86:1f:55:7d:aa:
         00:97:f4:e2:c0:aa:02:8b:da:6e:dc:67:4e:43:07:5a:62:fa:
         22:cc:33:49:a4:ba:4a:91:ad:e8:4b:55:24:79:48:c6:c9:7b:
         65:5a:02:78:26:fb:7b:c3:b6:c7:ac:4d:16:72:4c:e3:47:45:
         11:27:fa:ae:d4:2b:97:22:01:8d:f8:0d:c0:36:ee:70:65:82:
         3f:53:48:f3:c2:52:6e:af:6a:70:8f:55:0d:40:af:23:9b:c6:
         97:50:c8:45:7c:70:ef:21:6e:e1:b9:27:16:9f:21:30:5b:fc:
         72:47:63:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:28 2026 by rpki-client