This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb3e8347-7428-4875-81d5-901b114d44d8.roa
File:                     bb3e8347-7428-4875-81d5-901b114d44d8.roa (raw, json)
Hash identifier:          g8fF9mSAvWwvaMkXqJfGV0PPXB/4p0YdOoBDu0A2TF4=
Subject key identifier:   9A:72:E9:96:6F:6C:40:BB:3D:A4:86:0E:87:17:65:13:65:84:10:5F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       135EDB4DDB2E716ED5A163AA003B14D7B9312ED5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb3e8347-7428-4875-81d5-901b114d44d8.roa
Signing time:             Fri 13 Feb 2026 21:08:24 +0000
ROA not before:           Fri 13 Feb 2026 21:08:24 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        174.144.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5e:db:4d:db:2e:71:6e:d5:a1:63:aa:00:3b:14:d7:b9:31:2e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 21:08:24 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=057e6f2c8dd9f657928994840f634aeb7a54d36a599bc969766a18fde6331a88, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:57:90:31:ed:3a:c1:07:98:8a:14:cd:99:
                    56:d5:33:91:73:f7:7b:dd:3c:d4:82:c1:51:7c:b3:
                    a5:13:e0:51:0a:ef:f1:af:10:b7:c2:fc:a8:77:9d:
                    88:61:69:86:a9:04:ea:d1:27:d7:2e:ea:81:c6:17:
                    3e:ab:2e:12:ac:9f:50:98:9f:eb:21:06:55:83:7e:
                    1c:73:48:6b:8e:ee:22:8c:d6:c8:dc:4e:85:9d:4d:
                    23:fa:c9:8f:9a:cb:2b:7b:35:67:68:c9:d9:e1:f0:
                    7e:ee:30:56:73:7a:ea:71:77:07:dd:3c:9c:a3:ab:
                    4f:66:10:bb:e5:64:22:c2:ef:d8:8f:a5:13:58:d3:
                    ec:05:18:0f:bb:89:2f:05:e4:34:50:22:0e:ba:fd:
                    80:84:7e:96:82:a9:7d:86:f1:28:8c:8a:60:57:d4:
                    a7:b4:38:81:60:60:9a:af:6c:f6:29:ad:8c:cd:f1:
                    7a:de:e4:f8:88:48:16:53:e3:66:83:e9:dd:d1:da:
                    01:78:d7:ac:d7:fb:10:01:c8:9c:d4:c4:61:fc:0f:
                    4c:ce:ad:f8:00:7e:92:b9:0d:ad:9d:e0:54:23:e4:
                    7c:19:c4:b5:24:b8:48:c3:e3:52:2c:74:2f:97:7a:
                    2c:ec:82:db:19:24:3d:72:b5:fd:9e:86:21:20:7d:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:72:E9:96:6F:6C:40:BB:3D:A4:86:0E:87:17:65:13:65:84:10:5F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb3e8347-7428-4875-81d5-901b114d44d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:0a:d5:97:e1:0f:96:f1:0a:9e:ac:0f:9f:c5:70:b9:5a:
         f6:e0:86:99:db:44:0e:6e:33:10:ec:b5:86:90:0e:24:4b:bf:
         da:b3:ac:64:71:1f:16:b8:fd:11:b3:60:82:a8:70:14:f7:7e:
         bb:18:5d:3c:ed:ee:75:78:a7:08:95:09:c0:f8:12:a3:78:e2:
         f0:d2:c7:fc:b4:2a:c4:15:ef:92:21:c2:be:51:a8:1c:3f:7a:
         c3:92:46:ee:52:1a:6a:49:53:78:5f:04:1c:bb:f6:97:5d:10:
         28:e0:6c:50:98:02:e7:25:ac:27:f6:41:e2:e0:5b:a0:93:c3:
         ae:72:cb:c3:22:d8:43:6d:a4:c9:b7:5a:2c:c7:a4:25:06:c7:
         aa:9d:ff:a9:e0:70:72:b8:e5:63:88:ed:6b:87:d5:17:de:6b:
         54:15:59:43:d4:16:20:bd:58:eb:41:45:bd:2d:f9:45:8d:da:
         1f:7e:31:c7:0b:3d:7f:0a:8c:a5:eb:37:a9:87:3b:89:9c:a0:
         27:11:b7:30:39:5a:1b:59:06:5a:d0:d1:39:08:1f:ca:25:71:
         4f:e8:0c:fa:f6:38:ec:77:72:2a:7e:b2:57:46:45:bf:47:78:
         e6:96:4a:07:91:e8:f0:2d:4c:70:c5:99:55:6b:8b:c0:38:2d:
         b5:80:43:48
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUE17bTdsucW7VoWOqADsU17kxLtUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMjEwODI0WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNTdlNmYyYzhkZDlmNjU3OTI4OTk0ODQwZjYzNGFlYjdh
NTRkMzZhNTk5YmM5Njk3NjZhMThmZGU2MzMxYTg4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPxVeQMe06wQeYihTNmVbVM5Fz93vdPNSCwVF8s6UT4FEK
7/GvELfC/Kh3nYhhaYapBOrRJ9cu6oHGFz6rLhKsn1CYn+shBlWDfhxzSGuO7iKM
1sjcToWdTSP6yY+ayyt7NWdoydnh8H7uMFZzeupxdwfdPJyjq09mELvlZCLC79iP
pRNY0+wFGA+7iS8F5DRQIg66/YCEfpaCqX2G8SiMimBX1Ke0OIFgYJqvbPYprYzN
8Xre5PiISBZT42aD6d3R2gF416zX+xAByJzUxGH8D0zOrfgAfpK5Da2d4FQj5HwZ
xLUkuEjD41IsdC+XeizsgtsZJD1ytf2ehiEgfVIpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUmnLplm9sQLs9pIYOhxdlE2WEEF8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JiM2U4MzQ3LTc0MjgtNDg3NS04MWQ1LTkwMWIxMTRkNDRkOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwSukDANBgkqhkiG9w0BAQsFAAOCAQEATX0K1ZfhD5bxCp6sD5/FcLla9uCG
mdtEDm4zEOy1hpAOJEu/2rOsZHEfFrj9EbNggqhwFPd+uxhdPO3udXinCJUJwPgS
o3ji8NLH/LQqxBXvkiHCvlGoHD96w5JG7lIaaklTeF8EHLv2l10QKOBsUJgC5yWs
J/ZB4uBboJPDrnLLwyLYQ22kybdaLMekJQbHqp3/qeBwcrjlY4jta4fVF95rVBVZ
Q9QWIL1Y60FFvS35RY3aH34xxws9fwqMpes3qYc7iZygJxG3MDlaG1kGWtDROQgf
yiVxT+gM+vY47HdyKn6yV0ZFv0d45pZKB5Ho8C1McMWZVWuLwDgttYBDSA==
-----END CERTIFICATE-----
Generated at Mon Feb 16 06:37:02 2026 by rpki-client