This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab64f5ba-47e8-4f7a-9b0d-3a2936c81759.roa
File:                     ab64f5ba-47e8-4f7a-9b0d-3a2936c81759.roa (raw, json)
Hash identifier:          Oava0DWJbrqkmZxWjAElGNEUQ3AIByVPuD432d5NobE=
Subject key identifier:   24:58:6E:4B:C2:07:7F:1D:D0:DF:D8:00:11:68:03:78:08:C9:65:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EC20621A46C291508268AE5A5F92D7849823C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab64f5ba-47e8-4f7a-9b0d-3a2936c81759.roa
Signing time:             Tue 13 Jan 2026 19:53:10 +0000
ROA not before:           Tue 13 Jan 2026 19:53:10 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:3440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c2:06:21:a4:6c:29:15:08:26:8a:e5:a5:f9:2d:78:49:82:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 19:53:10 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=edfdf2847cbdb8fcc0bee3daf201bf4dd566524d48de24dcdb451a7a509ad086, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:66:90:c6:10:e4:92:88:68:fc:15:63:18:9d:
                    22:b5:f0:a5:0c:9e:40:b5:d9:28:49:62:02:1b:c0:
                    2f:42:5c:49:09:4a:e4:54:82:f2:7c:58:26:10:40:
                    9c:db:16:b4:38:dd:41:4a:b4:bb:07:69:85:41:09:
                    bc:81:a2:69:f5:f8:89:e2:ad:30:7b:9b:42:84:70:
                    99:2c:90:9a:85:91:a5:a3:4b:f6:2c:c3:03:8b:c6:
                    57:87:77:48:f0:02:e5:77:f4:0b:39:9d:e2:20:0d:
                    95:34:be:76:8c:d7:90:df:6b:28:54:49:ee:98:2c:
                    79:fb:1d:f7:15:de:5b:ea:12:bd:18:11:6d:d1:b5:
                    9f:f0:b5:ae:c8:b0:25:b4:1a:1b:1a:70:31:a8:40:
                    29:3c:b5:fc:5b:1d:5a:89:78:de:51:11:9b:af:dd:
                    b2:54:a4:d2:f6:9a:f9:6a:51:8d:10:62:fb:ca:bd:
                    46:24:30:75:01:dc:93:1b:10:0e:96:c9:48:5d:c1:
                    f4:9b:b6:bc:53:79:f8:6e:0b:09:26:1b:d0:d2:a1:
                    7b:bb:c8:86:97:32:e9:08:f0:25:a4:6a:3b:bf:0d:
                    07:09:d1:28:96:66:be:ee:e2:eb:1f:9b:d8:b2:ba:
                    72:a3:b7:12:39:6c:86:b3:a5:17:8f:c0:7a:e2:fc:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:58:6E:4B:C2:07:7F:1D:D0:DF:D8:00:11:68:03:78:08:C9:65:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab64f5ba-47e8-4f7a-9b0d-3a2936c81759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:3440::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:62:18:4e:a2:88:0f:9d:01:af:40:ba:f5:46:e2:cc:35:a5:
         d9:6b:23:52:37:f0:cf:de:94:93:8f:a6:f4:c5:d9:44:78:e3:
         d0:7f:cd:7d:06:fd:39:e3:b4:6c:e5:f0:41:87:db:66:0f:38:
         45:c6:c6:e3:ac:6d:ef:ba:3c:8a:91:18:11:99:e7:bd:df:dd:
         81:32:fa:3d:65:a4:ec:52:d9:07:d5:0f:79:f6:dd:0e:2b:ab:
         61:98:3f:53:83:b7:54:c8:a2:c5:ed:63:d0:53:00:a8:86:88:
         29:69:3a:2a:ef:61:8f:99:35:76:7d:5d:ab:c3:96:c3:fc:57:
         60:f0:30:26:c5:fa:19:36:3c:db:02:7d:33:aa:f6:25:3c:16:
         cd:c3:35:e2:6f:52:38:3f:4e:05:4a:0b:98:ad:ba:1c:5f:4e:
         ec:53:76:e0:0f:d0:72:69:fd:ff:d7:47:b7:3b:0c:d5:19:b4:
         e2:45:cb:0c:01:aa:61:0f:a9:d2:6f:ef:c9:f4:49:cf:2d:b1:
         de:99:f1:f5:fe:25:81:9d:46:6d:47:c8:48:81:fb:75:8e:10:
         b2:14:36:51:b8:c0:87:bc:f8:97:9c:b4:f7:cf:c0:1e:56:7e:
         3b:ee:07:2d:e1:32:e5:de:9d:06:15:38:54:cc:af:47:7f:2f:
         13:67:7b:b9
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITfsIGIaRsKRUIJorlpfkteEmCPDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAxMTMxOTUzMTBaFw0yNjA0MTMyMzU5NTla
MHoxSTBHBgNVBAUTQGVkZmRmMjg0N2NiZGI4ZmNjMGJlZTNkYWYyMDFiZjRkZDU2
NjUyNGQ0OGRlMjRkY2RiNDUxYTdhNTA5YWQwODYxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOxmkMYQ5JKIaPwVYxidIrXwpQyeQLXZKEliAhvAL0JcSQlK
5FSC8nxYJhBAnNsWtDjdQUq0uwdphUEJvIGiafX4ieKtMHubQoRwmSyQmoWRpaNL
9izDA4vGV4d3SPAC5Xf0Czmd4iANlTS+dozXkN9rKFRJ7pgsefsd9xXeW+oSvRgR
bdG1n/C1rsiwJbQaGxpwMahAKTy1/FsdWol43lERm6/dslSk0vaa+WpRjRBi+8q9
RiQwdQHckxsQDpbJSF3B9Ju2vFN5+G4LCSYb0NKhe7vIhpcy6QjwJaRqO78NBwnR
KJZmvu7i6x+b2LK6cqO3EjlshrOlF4/AeuL8vX8CAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBQkWG5Lwgd/HdDf2AARaAN4CMllMzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvYWI2NGY1YmEtNDdlOC00ZjdhLTliMGQtM2EyOTM2YzgxNzU5LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACYAH+s0QDANBgkqhkiG9w0BAQsFAAOCAQEAFGIYTqKID50Br0C69UbizDWl
2WsjUjfwz96Uk4+m9MXZRHjj0H/NfQb9OeO0bOXwQYfbZg84RcbG46xt77o8ipEY
EZnnvd/dgTL6PWWk7FLZB9UPefbdDiurYZg/U4O3VMiixe1j0FMAqIaIKWk6Ku9h
j5k1dn1dq8OWw/xXYPAwJsX6GTY82wJ9M6r2JTwWzcM14m9SOD9OBUoLmK26HF9O
7FN24A/Qcmn9/9dHtzsM1Rm04kXLDAGqYQ+p0m/vyfRJzy2x3pnx9f4lgZ1GbUfI
SIH7dY4QshQ2UbjAh7z4l5y098/AHlZ+O+4HLeEy5d6dBhU4VMyvR38vE2d7uQ==
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:45:49 2026 by rpki-client