This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4aa76c2f-0ff0-40b0-b3b5-7edef1caa660.roa
File:                     4aa76c2f-0ff0-40b0-b3b5-7edef1caa660.roa (raw, json)
Hash identifier:          /olq+E/4FuguKSyiYVApMq4PvAW8V7tv3xebQMAV4jg=
Subject key identifier:   48:48:52:2F:16:40:BF:E0:6A:0A:58:41:1F:2E:E9:5C:F6:92:05:3B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7277057483E27EA20221364A58E3A615D7769E91
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4aa76c2f-0ff0-40b0-b3b5-7edef1caa660.roa
Signing time:             Tue 13 Jan 2026 17:55:23 +0000
ROA not before:           Tue 13 Jan 2026 17:55:23 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e75::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:77:05:74:83:e2:7e:a2:02:21:36:4a:58:e3:a6:15:d7:76:9e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 17:55:23 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=3384f20ceeed7e5934640044edc3fdad5281a47492cfb1c454c17792f4da56e4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:98:d2:1e:91:b5:23:c2:1a:7f:ce:77:f9:d4:
                    31:b6:c3:3f:09:02:98:f0:67:c9:85:ed:5d:f8:0c:
                    10:b0:28:99:d5:c6:30:39:84:b2:33:ae:0e:0c:d9:
                    fc:f2:27:f6:9d:67:d9:31:10:00:72:62:a9:cb:fc:
                    e5:5e:6b:05:1e:42:43:1b:04:7b:01:32:b7:c6:ae:
                    3f:5b:4d:1b:de:7c:5d:42:39:c7:b4:20:d0:f2:6a:
                    80:79:50:34:ec:c7:df:57:a2:8b:f1:69:0d:76:26:
                    8b:e8:60:7b:7b:1b:56:c9:ef:27:ea:c4:da:79:25:
                    05:11:8d:ff:5b:7f:df:af:e3:71:2a:13:3d:3b:e3:
                    55:00:a6:00:30:da:1c:d8:59:a6:40:2f:f1:53:f7:
                    99:15:de:92:3c:25:d5:93:74:91:11:af:2d:ad:9d:
                    d0:8a:71:eb:29:4a:3e:de:ab:9e:c5:ff:cc:a1:22:
                    12:ae:2b:68:ad:3c:f3:32:2e:bc:53:29:33:84:ea:
                    29:6c:0c:da:b7:fd:e6:40:5e:44:af:d6:6e:d1:d5:
                    d9:f4:0f:55:71:77:3b:1e:69:83:8e:97:b5:69:c7:
                    af:17:1a:42:2c:cc:8a:27:cb:ce:4f:e6:de:3d:bc:
                    e8:95:26:d9:f8:ae:4e:d9:1d:9a:3f:5c:ad:33:64:
                    18:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:48:52:2F:16:40:BF:E0:6A:0A:58:41:1F:2E:E9:5C:F6:92:05:3B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4aa76c2f-0ff0-40b0-b3b5-7edef1caa660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e75::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:5c:69:9c:31:67:e6:59:16:62:ff:e6:14:e4:27:43:9d:8f:
         63:01:e0:85:9b:92:fa:50:a2:bb:08:51:12:86:15:b5:e5:23:
         5e:58:a9:c4:47:c0:f2:98:6b:cb:f9:63:e3:2c:a6:34:9d:41:
         b3:d5:0f:02:6a:9d:a8:8a:cf:02:2f:b6:88:98:1f:9d:1f:e3:
         9a:3b:d9:8b:5b:2c:e6:c5:37:dd:17:fc:6f:05:c4:42:d3:d3:
         af:83:e5:3d:bb:4a:83:93:a8:35:b7:eb:ce:18:74:28:74:d7:
         65:66:98:a3:f6:9c:62:73:94:f9:40:d9:e0:ca:b2:de:f9:40:
         a2:59:68:91:09:45:0e:13:4d:89:f3:ce:99:68:2e:be:77:63:
         7e:08:ed:67:7e:c5:a2:72:c0:a9:3e:61:11:fb:17:3a:81:60:
         81:e7:62:91:f4:28:a3:8a:82:fe:75:f0:ef:ff:1b:68:a7:76:
         9e:bd:b1:8d:68:e3:fc:ec:92:be:42:cb:46:d9:68:7a:85:6a:
         85:7e:ff:ed:df:02:4e:2c:4f:c9:ea:8b:0c:1a:19:51:99:db:
         52:45:c7:ad:d0:2c:fe:52:6f:63:28:67:a2:a9:56:85:5e:e3:
         38:f5:92:f9:da:2f:1e:5f:eb:24:6c:fd:13:af:ab:e5:d5:01:
         53:6c:e2:78
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUcncFdIPifqICITZKWOOmFdd2npEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMTEzMTc1NTIzWhcNMjYwNDEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMzg0ZjIwY2VlZWQ3ZTU5MzQ2NDAwNDRlZGMzZmRhZDUy
ODFhNDc0OTJjZmIxYzQ1NGMxNzc5MmY0ZGE1NmU0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDumNIekbUjwhp/znf51DG2wz8JApjwZ8mF7V34DBCwKJnV
xjA5hLIzrg4M2fzyJ/adZ9kxEAByYqnL/OVeawUeQkMbBHsBMrfGrj9bTRvefF1C
Oce0INDyaoB5UDTsx99XoovxaQ12JovoYHt7G1bJ7yfqxNp5JQURjf9bf9+v43Eq
Ez0741UApgAw2hzYWaZAL/FT95kV3pI8JdWTdJERry2tndCKcespSj7eq57F/8yh
IhKuK2itPPMyLrxTKTOE6ilsDNq3/eZAXkSv1m7R1dn0D1VxdzseaYOOl7Vpx68X
GkIszIony85P5t49vOiVJtn4rk7ZHZo/XK0zZBi1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUSEhSLxZAv+BqClhBHy7pXPaSBTswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzRhYTc2YzJmLTBmZjAtNDBiMC1iM2I1LTdlZGVmMWNhYTY2MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAHnUwDQYJKoZIhvcNAQELBQADggEBAK5caZwxZ+ZZFmL/5hTkJ0Od
j2MB4IWbkvpQorsIURKGFbXlI15YqcRHwPKYa8v5Y+MspjSdQbPVDwJqnaiKzwIv
toiYH50f45o72YtbLObFN90X/G8FxELT06+D5T27SoOTqDW3684YdCh012VmmKP2
nGJzlPlA2eDKst75QKJZaJEJRQ4TTYnzzploLr53Y34I7Wd+xaJywKk+YRH7FzqB
YIHnYpH0KKOKgv518O//G2indp69sY1o4/zskr5Cy0bZaHqFaoV+/+3fAk4sT8nq
iwwaGVGZ21JFx63QLP5Sb2MoZ6KpVoVe4zj1kvnaLx5f6yRs/ROvq+XVAVNs4ng=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:44:17 2026 by rpki-client