This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1dc7bf4-6ab8-4976-91d7-d66e530e8716.roa
File:                     e1dc7bf4-6ab8-4976-91d7-d66e530e8716.roa (raw, json)
Hash identifier:          BKesYsMgduumGOuTfQvAW5zZ8VNsYKT0HBr/TOGfQ6A=
Subject key identifier:   2F:55:03:D0:1B:DD:B4:AA:67:0D:75:F4:49:52:58:95:EE:E4:97:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3964591D8561AB457F2312D0B079B7DD73C8F2D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1dc7bf4-6ab8-4976-91d7-d66e530e8716.roa
Signing time:             Tue 13 Jan 2026 19:55:06 +0000
ROA not before:           Tue 13 Jan 2026 19:55:06 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:e040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:64:59:1d:85:61:ab:45:7f:23:12:d0:b0:79:b7:dd:73:c8:f2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 19:55:06 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=3ae3405ad0a4eca58b472a5c58fbff012e1e70477b85fa9efb84702ee09d3b38, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:cf:a4:86:47:dd:83:8d:15:d5:b0:f3:e2:
                    c5:d8:04:c9:c3:cc:74:37:ec:8c:20:dc:73:69:ee:
                    5e:5e:86:04:cb:33:0f:6b:92:00:19:ba:44:74:cf:
                    ce:c1:7a:71:a3:82:33:b5:7c:a3:d4:a1:55:6c:27:
                    94:6a:59:7b:e3:3e:7a:15:9d:6c:01:b2:e5:71:82:
                    cb:40:be:47:45:59:3f:21:f2:b2:8e:6c:ea:1c:5e:
                    07:4e:b7:9b:18:b3:7b:2a:dd:e3:30:82:95:a0:bf:
                    0a:1e:93:3f:15:d3:7b:e5:33:f6:13:60:2c:ef:85:
                    31:ef:28:dc:68:e8:0a:fa:a7:77:98:c7:e2:bf:43:
                    68:74:86:cf:c7:0c:d9:9e:5b:08:59:53:92:d5:80:
                    90:9d:f5:bb:36:fe:38:97:d0:fc:48:0e:3d:7a:cb:
                    dd:45:ac:c1:03:81:b4:9b:bc:fa:a1:f0:83:34:66:
                    27:eb:e0:8d:dc:05:7c:13:7a:cb:a3:2d:6e:fe:02:
                    bd:22:15:7a:bf:45:b9:f0:8f:cd:b0:0c:15:f9:5c:
                    25:b8:a0:66:b1:cd:1d:44:d9:29:9b:18:98:65:18:
                    08:85:81:25:9c:74:cf:a5:01:f4:83:37:4c:59:12:
                    57:f6:c3:99:d6:00:a2:a6:df:bf:17:b1:25:ff:57:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:03:D0:1B:DD:B4:AA:67:0D:75:F4:49:52:58:95:EE:E4:97:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1dc7bf4-6ab8-4976-91d7-d66e530e8716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:e040::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:d1:a3:69:81:47:fb:73:97:bf:95:ef:00:86:cd:c1:4c:84:
         d8:88:f3:f2:4f:88:84:41:76:b4:f8:0d:e9:4d:d3:c8:b7:46:
         93:a2:f8:6f:0a:7e:2f:13:c1:c9:46:a1:ff:55:c1:1e:9f:95:
         8a:6b:f6:40:67:4c:f6:f0:6d:cf:b3:a9:bf:52:e5:22:39:6d:
         ce:c2:00:7e:d5:33:eb:78:f1:f0:47:c9:d4:49:ef:6d:5a:f2:
         02:4b:12:64:14:78:80:7b:42:33:04:49:5c:a0:65:67:77:b8:
         af:de:00:0a:b5:0e:36:0b:85:aa:b2:26:1b:bb:5b:65:c6:dc:
         07:08:43:c0:95:ed:7c:9b:38:90:d4:1e:1b:20:d3:5c:31:23:
         d2:a3:18:60:be:30:29:5d:b4:67:f3:9c:6c:c1:07:65:42:e7:
         2e:40:b5:a0:33:cb:5f:6a:f5:75:cd:86:79:f0:c3:86:ef:7c:
         08:90:ef:96:32:3d:d4:23:51:1b:64:17:10:da:f8:57:d4:c6:
         88:93:34:4b:f8:ab:16:56:93:00:d3:a6:df:3a:3e:66:bd:34:
         74:c1:10:0e:18:bb:34:ce:01:07:cb:06:25:5b:4b:2b:06:e6:
         8a:76:57:53:2f:40:40:0e:5f:8d:c9:ea:92:cd:ef:f1:ea:44:
         4c:06:f5:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:06 2026 by rpki-client