This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e911d52e-aeb0-4408-90a1-f1aa9b47aa38.roa
File:                     e911d52e-aeb0-4408-90a1-f1aa9b47aa38.roa (raw, json)
Hash identifier:          l/6PHnvcqjXWcryuCdYI0hdLcoMVMzmuu4zPX+g+Tc0=
Subject key identifier:   C7:81:6F:9C:AA:A4:1B:D4:63:09:DD:41:42:BB:83:18:47:2C:25:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21456C43D832F77364082535BF3AAD347466B421
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e911d52e-aeb0-4408-90a1-f1aa9b47aa38.roa
Signing time:             Tue 13 Jan 2026 19:53:17 +0000
ROA not before:           Tue 13 Jan 2026 19:53:17 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:50c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:45:6c:43:d8:32:f7:73:64:08:25:35:bf:3a:ad:34:74:66:b4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 19:53:17 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=47c7a1b385bc2429291a5176c34e2ab67eb414930678def2c951246ae810302e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:7b:bd:e4:bc:c9:fa:f4:7f:db:03:c8:70:
                    af:3e:85:dd:4e:cf:89:b0:75:fb:0c:c1:b8:62:e2:
                    32:16:a8:bd:43:ce:a0:99:1c:a7:d1:20:29:9a:23:
                    a4:09:25:27:12:68:88:a5:eb:41:a2:ee:28:11:bb:
                    6e:0b:bb:1f:93:b9:16:9a:2e:85:af:48:4d:a8:93:
                    ff:96:c0:11:e3:10:c9:1f:04:13:83:a9:4d:1b:72:
                    3b:a3:2f:29:96:ec:43:50:1b:38:71:98:98:f4:b1:
                    eb:90:d1:86:05:cd:1a:95:c7:13:0e:22:18:ae:b4:
                    15:33:59:85:20:52:7a:66:a3:30:77:7e:a5:aa:39:
                    87:4c:c5:51:f3:4c:33:8d:95:dc:a1:e7:b4:21:83:
                    3a:03:84:fc:f2:d5:39:30:dc:65:9c:59:e5:24:a3:
                    08:d2:17:e0:cb:05:27:b2:a9:dc:da:8c:13:e3:92:
                    e9:6c:3b:aa:5d:5b:96:91:bb:4c:2d:6b:af:76:1e:
                    ab:53:ad:ee:8a:2b:2e:bc:54:9a:8e:a1:f4:eb:07:
                    ec:dd:10:a4:29:f4:17:7f:06:e2:b8:51:75:30:20:
                    44:11:48:98:5b:0e:95:63:7b:57:ae:fb:67:55:8d:
                    80:3d:c1:0c:b4:bb:ac:09:3b:c8:7e:4a:05:6a:4b:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:81:6F:9C:AA:A4:1B:D4:63:09:DD:41:42:BB:83:18:47:2C:25:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e911d52e-aeb0-4408-90a1-f1aa9b47aa38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:df:8c:81:37:32:37:97:0b:eb:5f:65:e8:46:23:7c:d4:d3:
         10:92:24:4e:d9:55:b9:b0:53:24:c8:e1:e2:8a:f6:cb:e3:59:
         d7:54:b4:89:b2:87:59:c7:07:ef:7f:8c:32:f4:19:dc:b8:95:
         54:58:f9:e6:20:e0:3a:f0:46:27:bb:9e:d0:57:38:61:41:98:
         8a:84:33:96:b1:26:eb:46:fe:11:be:7a:e5:f8:96:7c:ec:7b:
         57:43:64:9f:84:6d:8c:0f:ca:16:10:78:85:ab:e8:9f:9c:2a:
         c9:8d:9e:87:bf:79:24:86:78:47:4f:d7:16:af:9d:7c:fe:db:
         f5:74:5d:4c:0e:b4:86:4e:7a:c9:92:23:85:38:6b:d8:6b:4d:
         da:e5:92:b7:02:d4:46:80:6c:07:c6:28:d3:2d:2a:1e:52:35:
         af:45:27:49:12:27:8a:23:b0:6c:f9:d4:1d:48:0e:12:01:19:
         50:eb:be:22:71:4e:d0:e3:19:54:58:b4:c7:08:06:cf:df:bb:
         fa:d0:2d:68:d0:01:18:86:27:15:dd:b6:55:0b:73:27:93:da:
         10:15:d5:8e:38:c6:0a:ec:f9:cc:49:93:53:70:ad:9c:7e:eb:
         55:f9:2f:ab:52:a1:c3:b4:fb:4b:db:55:51:b9:cc:da:ec:66:
         39:9e:47:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 08:23:44 2026 by rpki-client