This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa
File:                     3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa (raw, json)
Hash identifier:          Zf/9IfGsVms9K5mhF+JHUkMOMlMnxy+smtYI4IY0Bh4=
Subject key identifier:   A2:A7:88:04:C1:89:A3:3C:46:F8:97:50:34:33:A4:64:77:4D:00:36
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       06E64989E5AEB30B3AD24695B9FA661E6F34CFE1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa
Signing time:             Tue 13 Jan 2026 17:36:54 +0000
ROA not before:           Tue 13 Jan 2026 17:36:54 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11dc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e6:49:89:e5:ae:b3:0b:3a:d2:46:95:b9:fa:66:1e:6f:34:cf:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 17:36:54 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=e5b89794615abc48e6fb9f48deab45f5466254ed9bc4578acb87fb4ea1497486, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:4f:cd:83:21:3b:0b:e8:ea:54:66:22:66:
                    27:2e:d9:a3:f4:39:1b:09:41:26:bc:3c:01:39:69:
                    78:2b:e5:93:13:13:7e:d5:32:97:b2:b5:6f:47:af:
                    ec:09:7f:0b:a1:da:5e:e8:66:86:90:58:96:61:72:
                    29:d4:b9:26:12:30:ef:8b:8d:2c:e8:0e:da:9e:28:
                    98:d6:4c:7d:f0:03:11:df:c6:da:66:a8:e1:ba:0d:
                    d6:d7:ef:d7:4d:80:66:7d:a9:bc:83:d5:51:2b:c0:
                    c8:bc:10:16:36:10:48:db:97:69:d1:54:10:15:45:
                    58:58:15:41:2e:86:ad:68:91:9c:8d:ec:e4:e1:51:
                    be:a9:9a:7b:9a:37:91:08:89:c0:1f:91:d2:2a:5c:
                    1d:9f:9b:05:5f:cd:14:03:77:24:92:d9:69:75:31:
                    81:2e:22:96:bb:5c:e8:b7:40:2a:3b:22:ec:25:48:
                    e9:16:4e:99:d3:e4:61:d4:22:88:98:e7:30:18:77:
                    3c:d1:23:4f:f9:73:01:76:60:b9:db:f1:1a:b7:7e:
                    b0:ed:64:d4:25:e9:6d:80:7d:64:04:88:ce:17:da:
                    d5:36:a0:f9:7a:02:93:d8:9f:fc:57:8f:8a:10:8e:
                    c9:46:0b:0e:ac:76:69:d9:bc:20:5f:c6:1f:e6:24:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A7:88:04:C1:89:A3:3C:46:F8:97:50:34:33:A4:64:77:4D:00:36
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11dc::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:14:19:e4:de:41:3a:ca:98:cd:eb:37:e7:13:67:38:7c:ba:
         5f:00:b5:da:d4:b8:e6:69:cd:90:dd:a6:34:52:e5:f6:a7:4b:
         cd:83:56:68:a6:5d:48:42:fc:3a:90:e6:00:94:c2:0b:9b:77:
         ea:f7:c9:74:a2:c9:13:5d:fa:d1:32:ea:38:7f:4c:f5:bd:6d:
         66:d0:e6:26:a4:d6:ec:c8:d7:9e:62:d6:30:fe:07:1a:de:e0:
         e0:dd:63:bd:f0:d5:e3:90:a4:4b:c4:fc:94:26:66:3a:7f:c9:
         65:e7:ae:70:f8:57:4c:5c:82:73:49:71:01:36:ab:42:db:21:
         9e:67:6f:2f:53:96:fb:3f:f0:4e:9b:29:7f:09:33:51:29:72:
         17:de:92:70:24:3c:0d:84:b6:60:ff:b0:69:eb:1a:7f:5b:b7:
         4f:b2:56:f3:73:a1:5e:6c:36:ed:27:48:d6:4a:1d:d7:8c:e4:
         54:b0:16:75:7a:3c:73:42:e4:86:1c:70:ed:c8:8d:bd:6e:7f:
         f4:c5:88:ce:fd:7a:37:70:13:7b:df:35:11:0a:5f:28:cf:97:
         11:ce:a0:66:10:86:ab:95:62:12:84:82:5b:c3:bd:3d:0b:e5:
         17:d7:e9:a0:8f:d0:73:36:28:9c:18:ac:db:0c:8e:67:61:03:
         9c:12:d4:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:45:36 2026 by rpki-client