This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa
File:                     9f647429-dee3-462f-9ab5-be55ce250b9b.roa (raw, json)
Hash identifier:          4ZMg1qPSuV7oo8u2fBWwxExa+D+OqkVncQTxXqToHOQ=
Subject key identifier:   9F:BE:52:8F:31:AB:35:DF:01:39:F5:AA:3A:97:FA:BB:F1:84:B9:A0
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       73B91BF2AFA9071CBB65FF338F9C83AF801C8CD3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa
Signing time:             Tue 13 Jan 2026 19:51:48 +0000
ROA not before:           Tue 13 Jan 2026 19:51:48 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b9:1b:f2:af:a9:07:1c:bb:65:ff:33:8f:9c:83:af:80:1c:8c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan 13 19:51:48 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=37642933d4c405e8842943f9727217b02bf2d8e9628e6ca4e3ef53682cba542e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:36:35:9a:ac:21:da:f8:9b:e2:6d:b8:56:
                    2d:09:be:c8:d2:51:27:ae:c2:a1:d7:f0:c5:1d:fe:
                    0d:46:1b:76:61:2c:e9:90:1c:a8:68:0c:c7:68:7a:
                    7c:36:eb:36:35:07:73:b8:b8:25:62:12:d8:59:8b:
                    a5:e0:df:4c:2c:79:9c:53:12:93:f0:17:31:88:2b:
                    a0:67:14:20:5d:3c:82:c0:8f:83:b5:2e:39:c7:a9:
                    d0:ed:ad:73:8d:cd:63:1c:ef:fb:94:78:42:1f:f9:
                    a3:13:28:f5:61:e1:cd:04:ea:9c:ed:3d:ba:52:53:
                    51:57:10:d6:bb:2e:1e:84:cf:58:b6:4f:e2:80:d3:
                    40:dc:02:29:d3:9d:e0:23:0e:e1:32:eb:84:1e:6d:
                    b8:8a:46:e9:a5:31:b7:25:7e:f9:3d:8d:84:a2:fe:
                    d6:30:c9:32:b5:c2:f0:5b:39:fe:d6:21:91:f5:d9:
                    0c:b3:5f:b6:9b:b5:4a:d0:be:bd:95:a1:e7:c3:dd:
                    0b:e1:46:46:f8:c4:58:48:1f:48:72:e2:2e:8f:c5:
                    71:28:6f:4f:24:f6:d2:89:78:2e:40:c7:ba:a1:e0:
                    dd:b7:f4:5e:07:87:f4:79:4d:76:8b:51:ad:55:c8:
                    60:85:e4:68:4e:a6:d4:e3:28:5d:d2:e6:b6:78:1d:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BE:52:8F:31:AB:35:DF:01:39:F5:AA:3A:97:FA:BB:F1:84:B9:A0
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:d1:12:51:ee:4b:e7:3a:d1:a5:b8:61:dc:27:4e:ea:13:d5:
         9a:20:c0:81:40:76:41:58:b1:49:08:05:43:0c:44:0b:eb:54:
         db:04:a9:56:37:18:47:c9:db:11:52:10:0e:7d:98:58:98:9b:
         75:63:73:70:fd:bb:92:30:ff:db:05:44:a1:09:a0:8a:12:29:
         d5:81:d8:4a:ef:d4:7d:ef:6f:fa:00:a7:71:ad:d8:53:28:46:
         4f:62:f9:49:af:81:29:05:43:2c:8d:e5:47:9d:89:c3:e9:5b:
         04:8a:82:01:14:ce:af:e5:f7:10:c9:2a:59:22:77:af:a2:c2:
         cb:c3:aa:89:15:8a:4f:34:15:c6:19:2f:2c:4d:80:fe:62:71:
         0c:e4:76:22:33:a4:68:23:4b:ac:6a:af:c6:a6:16:c1:44:8d:
         c2:6f:24:be:4a:ad:21:86:8e:55:e9:26:2d:0a:81:8d:2f:40:
         99:fb:1f:6d:c5:42:5d:3e:ca:f4:0c:54:04:34:e8:ab:7d:e9:
         f5:82:69:d0:19:e3:ba:49:9b:7c:7d:cb:17:b3:ba:fa:42:10:
         ed:58:ef:fd:86:24:24:c3:59:57:c3:a9:8f:c7:b6:91:04:5d:
         ed:d5:21:75:69:a8:d7:3c:87:60:e1:23:5f:58:87:e1:77:ed:
         b9:ae:b1:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:44:15 2026 by rpki-client