This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f930991f-5aac-428e-ac51-d5d2cb9d9929.roa
File:                     f930991f-5aac-428e-ac51-d5d2cb9d9929.roa (raw, json)
Hash identifier:          PcPK/SUrtVqBktO29+nJVSDsavgsNzoELp5pirOstgU=
Subject key identifier:   36:59:D7:37:E5:2E:56:AA:88:A8:F4:51:0F:4C:5E:06:A0:E9:C7:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       716E41AB58C890F8DE9DF385C4D628A84BF3BCDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f930991f-5aac-428e-ac51-d5d2cb9d9929.roa
Signing time:             Tue 13 Jan 2026 19:56:39 +0000
ROA not before:           Tue 13 Jan 2026 19:56:39 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6e:41:ab:58:c8:90:f8:de:9d:f3:85:c4:d6:28:a8:4b:f3:bc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 19:56:39 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=7dde68d0c1ee9f5aca164e0b4669016be4e0f105272d2bcca48b3dd15583511a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:7b:02:d2:d9:73:64:50:f0:91:2b:c7:2d:
                    9c:78:d6:ef:92:81:5d:e2:f9:e4:36:eb:f5:9a:50:
                    0c:65:ba:3f:4b:64:f6:42:6d:78:ec:02:0f:55:2e:
                    80:aa:f3:8c:af:01:99:15:a9:f3:c0:f5:12:74:2e:
                    46:f8:7a:7c:b2:da:78:47:c6:bb:dc:c2:28:87:81:
                    30:6d:07:40:58:84:10:ee:8c:fa:b1:21:56:72:9b:
                    5c:33:ba:aa:d2:e7:97:1e:84:c6:70:3a:bf:5e:cb:
                    b3:97:32:4f:df:03:fa:eb:03:e4:c7:33:28:a2:d9:
                    03:fa:0e:56:62:3e:ed:e5:3a:e7:53:29:52:29:42:
                    8e:a1:3d:32:9e:7f:51:bd:37:a4:db:2d:6c:a9:93:
                    c6:7d:29:d9:8b:68:1f:d4:34:70:ef:3e:17:02:8c:
                    8a:b3:68:05:c9:42:c3:1d:bc:d2:02:af:17:d6:ac:
                    58:ae:aa:83:24:bd:84:ea:73:10:7d:8f:68:b7:df:
                    3f:c0:5f:3f:39:29:26:72:f7:d3:a0:80:43:b4:57:
                    24:e9:f1:02:91:44:89:f5:ce:8d:84:0d:10:c5:0d:
                    bb:84:de:31:3b:83:37:d2:8b:9f:9b:ce:6f:10:9d:
                    23:d7:ec:de:93:a9:64:92:18:aa:3c:c5:a7:3c:3a:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:59:D7:37:E5:2E:56:AA:88:A8:F4:51:0F:4C:5E:06:A0:E9:C7:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f930991f-5aac-428e-ac51-d5d2cb9d9929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:0f:09:29:54:ea:01:c5:f4:8b:df:93:79:a5:47:d1:d4:41:
         e0:4f:37:5a:58:11:40:ff:42:4c:1f:16:1f:70:b5:5e:5e:27:
         72:0d:a8:28:89:e6:b9:c5:05:e5:a6:26:96:c4:85:c8:03:04:
         81:9f:f2:09:8e:c0:f9:17:57:ab:96:28:fa:5c:43:e4:ee:3f:
         a4:e2:ca:07:f4:23:b0:2b:51:6c:08:e2:48:68:20:84:8a:91:
         c6:36:a1:2f:96:01:45:46:33:0f:cc:14:4c:53:bc:e3:78:69:
         bf:84:d8:9b:e8:77:b3:82:5b:15:1f:3e:e7:98:bc:ba:52:55:
         5f:40:3b:e3:0d:b2:0d:7f:57:2d:0a:2b:08:c0:2e:40:d9:c6:
         49:36:4c:8a:24:b2:ce:01:a4:4e:fd:8c:0e:d7:9b:88:8a:7a:
         a8:25:55:df:0e:99:5a:80:12:36:35:94:01:0d:c9:b6:7f:4b:
         15:36:2f:b4:81:b5:dd:55:81:56:6c:47:aa:b9:4b:a7:38:54:
         fc:8c:d4:89:28:95:34:ba:04:2d:64:9d:67:de:e8:02:99:cd:
         bc:44:f1:0b:9c:38:7f:da:b4:48:ca:ed:49:ad:66:c2:49:fe:
         f8:7f:f7:21:56:e2:20:9b:0f:50:6a:ec:f7:76:74:29:b9:de:
         94:6c:b5:41
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUcW5Bq1jIkPjenfOFxNYoqEvzvN8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMTEzMTk1NjM5WhcNMjYwNDEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZGRlNjhkMGMxZWU5ZjVhY2ExNjRlMGI0NjY5MDE2YmU0
ZTBmMTA1MjcyZDJiY2NhNDhiM2RkMTU1ODM1MTFhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDU9HsC0tlzZFDwkSvHLZx41u+SgV3i+eQ26/WaUAxluj9L
ZPZCbXjsAg9VLoCq84yvAZkVqfPA9RJ0Lkb4enyy2nhHxrvcwiiHgTBtB0BYhBDu
jPqxIVZym1wzuqrS55cehMZwOr9ey7OXMk/fA/rrA+THMyii2QP6DlZiPu3lOudT
KVIpQo6hPTKef1G9N6TbLWypk8Z9KdmLaB/UNHDvPhcCjIqzaAXJQsMdvNICrxfW
rFiuqoMkvYTqcxB9j2i33z/AXz85KSZy99OggEO0VyTp8QKRRIn1zo2EDRDFDbuE
3jE7gzfSi5+bzm8QnSPX7N6TqWSSGKo8xac8OsMNAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUNlnXN+UuVqqIqPRRD0xeBqDpxw8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y5MzA5OTFmLTVhYWMtNDI4ZS1hYzUxLWQ1ZDJjYjlkOTkyOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/rwDANBgkqhkiG9w0BAQsFAAOCAQEAsg8JKVTqAcX0i9+TeaVH0dRB
4E83WlgRQP9CTB8WH3C1Xl4ncg2oKInmucUF5aYmlsSFyAMEgZ/yCY7A+RdXq5Yo
+lxD5O4/pOLKB/QjsCtRbAjiSGgghIqRxjahL5YBRUYzD8wUTFO843hpv4TYm+h3
s4JbFR8+55i8ulJVX0A74w2yDX9XLQorCMAuQNnGSTZMiiSyzgGkTv2MDtebiIp6
qCVV3w6ZWoASNjWUAQ3Jtn9LFTYvtIG13VWBVmxHqrlLpzhU/IzUiSiVNLoELWSd
Z97oApnNvETxC5w4f9q0SMrtSa1mwkn++H/3IVbiIJsPUGrs93Z0KbnelGy1QQ==
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:16 2026 by rpki-client