This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fbfd52b-41b3-4bf4-9fe7-486c885285aa.roa
File:                     3fbfd52b-41b3-4bf4-9fe7-486c885285aa.roa (raw, json)
Hash identifier:          RWeEzo5x7TrLuIj69LdAZI8ZhA1jR1+yXt2572lESSw=
Subject key identifier:   55:A5:5D:87:20:4E:2C:AE:1E:21:91:B1:E4:DF:DB:1D:A1:D4:CC:EB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3A53FE288D75D2B1BEC94CEDFE8E6CC642F4C39A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fbfd52b-41b3-4bf4-9fe7-486c885285aa.roa
Signing time:             Tue 13 Jan 2026 17:07:07 +0000
ROA not before:           Tue 13 Jan 2026 17:07:07 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10ba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:53:fe:28:8d:75:d2:b1:be:c9:4c:ed:fe:8e:6c:c6:42:f4:c3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 17:07:07 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=f3764dd4d62bae5a292d8f50503dc9730278e495245ecc6c0523bcd6d8f63af4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:98:1a:80:99:5b:ec:a7:1c:b7:fd:1b:a6:
                    c6:41:04:50:c2:fe:a5:71:e0:70:ec:1f:74:6b:25:
                    e1:36:6c:63:7d:dd:af:d8:eb:5e:6e:96:b3:c0:0b:
                    3a:62:11:f2:1d:30:08:d3:78:e2:93:64:5c:f9:4a:
                    25:97:c0:f1:0a:66:64:f7:d1:13:ff:fe:68:eb:dc:
                    19:e5:57:b1:42:a8:ba:76:74:3d:c0:3e:03:07:df:
                    00:71:48:d5:68:1e:cf:43:5e:39:36:48:a9:fa:49:
                    79:c6:45:6e:c3:73:75:e0:7a:d4:32:fa:0c:6b:b4:
                    37:2f:9e:53:9c:2a:39:13:99:b9:e5:d9:60:7f:a0:
                    fb:36:1b:8e:65:9b:24:ea:dc:bc:f8:c4:da:ee:fd:
                    22:94:01:99:b3:6e:41:16:18:85:7f:c6:88:70:a7:
                    1f:cb:88:cb:17:82:84:7e:e7:01:17:1e:d8:34:ff:
                    61:12:67:e2:e3:52:a1:b1:3c:1c:70:83:49:74:7a:
                    4b:26:59:4b:7e:d3:5d:74:17:21:c0:36:9f:33:13:
                    a3:8e:82:c5:57:fa:22:d8:34:15:44:5b:b9:40:ac:
                    7f:b8:64:43:d3:ad:6c:df:27:8e:74:68:b1:bd:0d:
                    35:cc:36:36:e3:56:a7:f5:e8:5c:65:1d:f6:26:22:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A5:5D:87:20:4E:2C:AE:1E:21:91:B1:E4:DF:DB:1D:A1:D4:CC:EB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fbfd52b-41b3-4bf4-9fe7-486c885285aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:04:32:06:d3:c2:21:25:e6:fe:6d:4e:cb:22:dc:e0:af:aa:
         58:0e:03:25:7d:f8:6e:3a:03:b0:50:b9:d0:3a:67:38:e1:75:
         5f:12:83:38:b2:25:a2:54:7e:f4:e8:80:77:db:46:5e:c9:19:
         2f:94:63:eb:6b:79:7b:52:f2:19:ff:29:7a:13:81:bf:50:52:
         c2:1f:20:fc:b2:39:84:a1:cd:a7:37:8e:29:c3:71:7b:a9:4d:
         01:14:ce:75:99:f3:2a:85:dc:d0:06:c5:86:3d:c3:f8:2e:de:
         16:af:d3:7e:51:96:89:07:35:09:e4:27:cd:61:7a:ba:57:bc:
         de:db:81:97:cc:78:16:26:59:7e:50:f2:04:70:a9:ae:57:a3:
         9e:2c:ac:25:b2:9c:b0:34:9e:45:46:86:e3:38:d4:ed:a9:72:
         4a:95:0e:ae:34:82:48:95:9b:3b:7b:24:fa:38:4d:df:89:c4:
         29:39:96:12:91:2d:06:4b:ab:54:da:f6:ba:c1:45:f5:3f:7e:
         19:3d:f6:32:7f:c2:47:d9:1b:ca:1b:2d:b7:c5:e3:3c:c5:19:
         58:1f:df:01:af:ad:2f:2c:14:34:e2:e6:db:5f:3f:19:5f:74:
         84:8b:20:ed:c5:f3:6c:03:24:88:05:0b:80:cc:01:9b:f4:48:
         b5:12:57:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 08:21:34 2026 by rpki-client