This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03b922f5-2f66-41b9-ba90-13e3ed975f71.roa
File:                     03b922f5-2f66-41b9-ba90-13e3ed975f71.roa (raw, json)
Hash identifier:          ER2t1nsqIVSdAJYeXnyW4u+BXVlsF0t6oSaKV/2ms+4=
Subject key identifier:   50:E4:D5:9C:B0:4D:31:AD:40:7F:83:10:B9:DD:AD:44:80:FC:70:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       095B35EDA1E24049A5FF00F82E9EC10FF0C3C7B1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03b922f5-2f66-41b9-ba90-13e3ed975f71.roa
Signing time:             Tue 13 Jan 2026 17:40:53 +0000
ROA not before:           Tue 13 Jan 2026 17:40:53 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1218::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5b:35:ed:a1:e2:40:49:a5:ff:00:f8:2e:9e:c1:0f:f0:c3:c7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 17:40:53 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=715ad741746f9973f711029593cb5be5473e898d5aa9579dfb0a3ce505827cf9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:19:ae:1d:f8:1a:8c:54:52:d7:a4:cc:e0:
                    ba:e2:30:fb:07:2f:d1:a9:14:c1:f9:45:67:a2:dc:
                    c3:49:72:9b:e2:a4:7d:d8:ad:6a:7d:4b:03:20:59:
                    91:f6:fc:19:0c:c5:08:ce:50:45:d5:32:c2:23:ff:
                    29:ab:ca:37:8e:1e:d0:a1:01:94:a0:fe:62:e7:0a:
                    d0:75:22:d0:0a:dc:2a:aa:e0:9d:46:c8:b0:62:b2:
                    2d:49:54:1e:9d:23:6b:d9:e7:28:16:c4:42:c2:ef:
                    81:cf:71:eb:aa:b2:b6:68:93:16:dc:c7:99:89:79:
                    51:5b:2a:fb:6a:c9:cc:64:a7:e2:c1:18:28:d2:48:
                    4c:28:4a:b8:cf:d8:05:6e:6d:9e:0c:d2:48:ab:53:
                    ec:db:38:82:b8:c7:94:6e:04:98:61:56:38:f7:9c:
                    a6:7a:de:6c:a5:2e:f9:5c:1c:9c:3a:52:4f:be:54:
                    c7:6b:b4:9f:3c:49:d6:26:e0:02:f1:71:1f:ef:41:
                    63:3d:62:83:12:82:b9:fb:44:e0:27:f7:1d:db:3b:
                    46:1b:46:e6:5d:f7:50:fc:73:0f:a8:94:6f:8a:a2:
                    f6:b5:3d:f3:c8:ee:d5:f1:64:32:04:c5:f3:23:65:
                    48:d0:98:b9:a0:b7:42:b6:c1:6b:15:e0:7c:db:46:
                    66:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:D5:9C:B0:4D:31:AD:40:7F:83:10:B9:DD:AD:44:80:FC:70:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03b922f5-2f66-41b9-ba90-13e3ed975f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1218::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:f6:ed:bd:10:05:ba:f4:63:45:49:ec:6a:e7:33:d6:f3:96:
         9c:24:6b:2a:37:6d:83:d0:d7:45:b2:fc:7f:1c:64:b8:fc:09:
         74:89:8b:9b:c1:75:fa:a8:43:16:e9:4c:cf:6c:54:fc:8d:3c:
         17:1e:8c:43:9d:6a:d5:f5:8e:3d:bf:b5:fe:02:47:89:e9:11:
         2a:23:f4:02:c9:83:5c:53:54:65:29:8c:c4:71:fc:67:d2:43:
         a2:12:9b:a6:ec:e5:2c:fb:05:cc:79:59:18:e2:6a:9d:a0:1f:
         f4:3b:59:e5:40:e3:4e:b7:0f:21:c9:cb:09:38:54:f0:52:bb:
         d1:8f:05:bf:ec:72:3b:74:88:d9:59:8d:e6:f7:6e:05:ec:b5:
         c7:ae:37:0a:00:f4:bb:74:e0:5b:29:58:f0:a6:87:0d:46:45:
         56:c2:67:4a:ea:1c:24:c6:bf:2d:b5:2c:9b:45:fe:db:8d:22:
         ac:c2:7f:4c:77:da:78:2d:07:15:d2:81:96:6e:97:e1:da:7a:
         27:b5:b1:5b:b6:2b:44:5e:6c:70:5e:a5:f4:59:0c:49:4c:da:
         f3:f0:13:c0:48:a3:0f:e3:be:07:ac:73:10:ab:fd:c6:c9:3e:
         05:94:0c:fe:5d:e5:a7:f6:21:40:21:d7:4a:2a:fc:95:7c:f7:
         de:15:3a:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:45:37 2026 by rpki-client