This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f41f6ff2-fff2-4265-939f-9949f3ae3e3d.roa
File:                     f41f6ff2-fff2-4265-939f-9949f3ae3e3d.roa (raw, json)
Hash identifier:          9fOlG1G/IB/bObE/U2/v/0mg0j+4sx31GYyelqk+vmQ=
Subject key identifier:   4E:6B:48:83:A0:2B:ED:B8:0C:80:4C:A6:44:D3:DE:F8:5A:E9:C5:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       261C8275159151C41E3305165668049FB2028712
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f41f6ff2-fff2-4265-939f-9949f3ae3e3d.roa
Signing time:             Sat 10 Jan 2026 09:23:13 +0000
ROA not before:           Sat 10 Jan 2026 09:23:13 +0000
ROA not after:            Fri 10 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.164.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1c:82:75:15:91:51:c4:1e:33:05:16:56:68:04:9f:b2:02:87:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 10 09:23:13 2026 GMT
            Not After : Apr 10 23:59:59 2026 GMT
        Subject: serialNumber=b484b36f65da8c78a3fd59b79d6777d2c9597c57ccb8d6bd59640ffc9e5697bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:a8:53:0f:4b:3e:1a:73:08:30:d0:fc:ba:
                    77:b2:aa:d4:5b:06:c5:d6:24:a3:13:95:90:86:00:
                    6b:77:ca:50:61:57:3c:e2:68:63:31:74:e6:26:b3:
                    35:57:6b:b2:1e:df:71:2c:ab:28:b6:28:00:43:e1:
                    e8:49:98:f8:94:06:15:e9:36:cb:3d:d3:c3:fe:f8:
                    4a:64:1a:8e:50:de:ab:31:28:41:0c:76:e7:30:12:
                    d7:5c:fe:bd:dd:47:e6:c8:68:e2:4b:eb:1a:17:15:
                    f1:e5:b6:cd:a0:50:79:99:80:ad:90:4f:ae:61:2e:
                    8c:bc:58:c6:8a:8c:45:89:e8:c6:73:99:8d:ae:af:
                    f6:ef:61:b9:c5:a1:fc:02:11:ca:a6:58:aa:94:70:
                    d1:6b:52:f7:b1:d6:c4:19:7f:c3:91:49:90:bf:44:
                    62:7d:67:ac:54:dc:77:1e:dc:80:0a:b9:8a:a4:65:
                    51:a2:44:1c:60:c1:19:6f:7d:b6:81:8e:13:af:fe:
                    db:83:24:4f:61:00:cf:5e:73:46:2e:9f:30:07:25:
                    84:b0:96:6e:eb:2a:54:28:5b:ea:31:68:47:27:8f:
                    b6:0b:ad:2e:fc:f4:17:9e:3f:63:49:84:dc:34:58:
                    20:d4:e4:a1:35:eb:53:dd:18:b9:b9:32:c3:8f:e2:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6B:48:83:A0:2B:ED:B8:0C:80:4C:A6:44:D3:DE:F8:5A:E9:C5:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f41f6ff2-fff2-4265-939f-9949f3ae3e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.164.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         96:4b:3e:01:b1:b3:58:85:35:94:82:79:64:46:96:a3:c7:89:
         13:c2:cd:c5:6b:fe:13:48:69:bd:24:b9:4c:a7:b6:de:66:79:
         89:1c:ab:29:a5:93:a7:30:cf:8b:d6:96:21:d7:b2:98:ae:e9:
         40:69:53:f5:0d:36:42:b2:db:61:56:80:4f:d3:28:35:32:29:
         59:ea:e4:01:98:9e:35:60:1b:b8:80:3a:0d:36:20:63:1c:c0:
         c2:09:d7:e8:ac:b5:a2:19:5a:fb:1e:1b:30:82:13:b2:fc:5e:
         b9:ca:0f:a5:17:cb:ba:41:69:b2:ae:e5:77:11:c4:8d:f3:bb:
         da:32:0d:2f:57:18:55:07:84:f5:e9:9b:a4:39:48:47:3a:28:
         50:43:0d:55:47:62:e3:bb:50:e1:4e:39:60:81:76:64:9a:c0:
         31:e1:ab:8a:ec:d1:cc:f6:d5:40:a7:51:1d:4a:70:65:0c:f7:
         0a:59:59:90:4f:00:57:79:61:08:67:8a:4a:40:31:a7:33:24:
         3b:34:2f:6a:f9:8f:ab:70:fc:f8:8a:38:de:50:37:8b:03:e0:
         bd:a1:ef:e5:cd:45:15:52:8d:94:32:9d:5e:ee:d6:00:c4:9d:
         31:4b:57:58:0e:f2:e1:e0:49:28:7a:7b:a8:5a:7e:06:21:be:
         78:e9:c5:91
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJhyCdRWRUcQeMwUWVmgEn7IChxIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMTEwMDkyMzEzWhcNMjYwNDEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNDg0YjM2ZjY1ZGE4Yzc4YTNmZDU5Yjc5ZDY3NzdkMmM5
NTk3YzU3Y2NiOGQ2YmQ1OTY0MGZmYzllNTY5N2JiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCstKhTD0s+GnMIMND8uneyqtRbBsXWJKMTlZCGAGt3ylBh
VzziaGMxdOYmszVXa7Ie33Esqyi2KABD4ehJmPiUBhXpNss908P++EpkGo5Q3qsx
KEEMducwEtdc/r3dR+bIaOJL6xoXFfHlts2gUHmZgK2QT65hLoy8WMaKjEWJ6MZz
mY2ur/bvYbnFofwCEcqmWKqUcNFrUvex1sQZf8ORSZC/RGJ9Z6xU3Hce3IAKuYqk
ZVGiRBxgwRlvfbaBjhOv/tuDJE9hAM9ec0YunzAHJYSwlm7rKlQoW+oxaEcnj7YL
rS789BeeP2NJhNw0WCDU5KE161PdGLm5MsOP4poRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTmtIg6Ar7bgMgEymRNPe+FrpxXMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y0MWY2ZmYyLWZmZjItNDI2NS05MzlmLTk5NDlmM2FlM2UzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcQpAAwDQYJKoZIhvcNAQELBQADggEBAJZLPgGxs1iFNZSCeWRGlqPHiRPC
zcVr/hNIab0kuUyntt5meYkcqymlk6cwz4vWliHXspiu6UBpU/UNNkKy22FWgE/T
KDUyKVnq5AGYnjVgG7iAOg02IGMcwMIJ1+istaIZWvseGzCCE7L8XrnKD6UXy7pB
abKu5XcRxI3zu9oyDS9XGFUHhPXpm6Q5SEc6KFBDDVVHYuO7UOFOOWCBdmSawDHh
q4rs0cz21UCnUR1KcGUM9wpZWZBPAFd5YQhnikpAMaczJDs0L2r5j6tw/PiKON5Q
N4sD4L2h7+XNRRVSjZQynV7u1gDEnTFLV1gO8uHgSSh6e6hafgYhvnjpxZE=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:45:37 2026 by rpki-client