This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/809673f9-657d-4c40-aee5-8085e61a8681.roa
File:                     809673f9-657d-4c40-aee5-8085e61a8681.roa (raw, json)
Hash identifier:          PQIX/bREDu9iCFElK3AmExUSjKIDd5HteycnJJGu7pk=
Subject key identifier:   79:FB:31:5E:B9:00:06:93:F7:1D:37:CA:22:06:CA:C7:C6:0C:19:7C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3ED3F6343FEB46320C110FF15C9D303AE0439D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/809673f9-657d-4c40-aee5-8085e61a8681.roa
Signing time:             Tue 13 Jan 2026 17:57:16 +0000
ROA not before:           Tue 13 Jan 2026 17:57:16 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e9e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d3:f6:34:3f:eb:46:32:0c:11:0f:f1:5c:9d:30:3a:e0:43:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 17:57:16 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=facb642a954c4b813e4c0e3234a8d51b8a6e37453c2aa1474ecfa5dc7ff3fd2f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:8c:b8:ea:66:4a:b6:16:c0:c8:51:37:67:
                    7a:76:b1:b9:91:9f:6a:6f:11:58:42:e7:27:ed:ae:
                    bb:be:f2:1e:fd:e8:97:a5:35:76:dd:00:27:d0:fe:
                    96:ae:e7:11:dc:99:b5:29:6f:d4:fc:52:70:b1:b8:
                    12:d6:dd:e8:5a:d3:9f:a6:db:e1:22:c5:ed:51:b8:
                    da:df:2b:a9:1b:ac:a3:99:04:a4:c9:8d:be:31:9f:
                    d4:16:6d:f4:4e:09:08:b7:46:81:4a:b4:f7:af:6e:
                    ae:57:af:f7:4e:7c:a9:76:e5:27:a6:c9:ab:df:c5:
                    0f:78:fe:f7:6a:4e:30:02:87:dd:7b:9f:93:db:a0:
                    43:d2:1d:85:98:94:f7:ae:a9:fe:b1:89:22:54:8a:
                    cc:57:a2:61:10:88:37:9c:84:3b:2b:8b:25:93:6d:
                    3c:fd:b3:d0:57:7b:b3:b2:fa:fe:c9:93:a1:77:46:
                    75:90:74:f5:e5:dd:f6:5d:71:f8:3b:00:3e:dd:77:
                    9e:04:a5:5a:9d:4a:78:34:8a:41:d4:84:21:ee:d3:
                    d0:78:13:04:18:9d:d4:10:63:ee:e5:e5:a4:a9:90:
                    5c:d5:1e:c7:6e:8a:24:8b:7f:ee:3b:2e:06:68:0a:
                    04:3c:57:42:f3:cd:b1:13:0d:97:92:6f:c7:a9:ef:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FB:31:5E:B9:00:06:93:F7:1D:37:CA:22:06:CA:C7:C6:0C:19:7C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/809673f9-657d-4c40-aee5-8085e61a8681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e9e::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:25:eb:97:7a:21:6a:06:44:f8:26:c0:f2:4b:4a:e3:f2:
         77:e7:ea:d0:8e:8c:50:ea:b0:f7:51:d1:69:cb:14:83:b9:0f:
         e7:1d:d0:70:7d:36:cb:98:98:6e:a4:db:55:1b:72:87:f0:6d:
         ee:dd:af:53:f8:46:71:b3:d4:20:a4:3f:fa:72:2e:8a:85:f0:
         01:54:8b:bf:43:ee:91:4a:b4:4c:76:2e:7a:56:72:e8:65:f0:
         8b:e4:92:63:0a:ff:c2:74:a4:a1:18:56:45:ec:f4:64:c5:e0:
         bb:8e:a8:89:f1:12:a9:ce:71:73:5d:ad:22:d4:69:0c:b5:d1:
         29:ef:c1:34:66:e7:e8:1e:b2:03:a4:1e:cb:5c:3d:a7:3c:2a:
         91:46:de:05:bb:a5:f0:54:f8:c6:72:d5:43:d6:83:c1:ac:6d:
         48:da:3a:5b:c1:5e:76:e3:62:72:95:a7:27:58:2c:9d:b9:84:
         30:98:29:d3:c7:98:a3:a1:e3:26:7f:d4:75:61:ce:b3:67:29:
         38:45:8c:59:fc:90:55:f4:06:cf:1a:4b:3a:69:ec:34:3a:14:
         c2:20:90:f5:d5:21:c6:38:7e:14:74:1f:45:2a:f9:17:84:73:
         06:90:18:f3:53:5f:d5:d5:aa:17:29:06:03:66:f5:24:da:52:
         1f:6f:da:30
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITPtP2ND/rRjIMEQ/xXJ0wOuBDnTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjAxMTMxNzU3MTZaFw0yNjA0MTMyMzU5NTla
MHoxSTBHBgNVBAUTQGZhY2I2NDJhOTU0YzRiODEzZTRjMGUzMjM0YThkNTFiOGE2
ZTM3NDUzYzJhYTE0NzRlY2ZhNWRjN2ZmM2ZkMmYxLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKu4jLjqZkq2FsDIUTdnenaxuZGfam8RWELnJ+2uu77yHv3o
l6U1dt0AJ9D+lq7nEdyZtSlv1PxScLG4Etbd6FrTn6bb4SLF7VG42t8rqRuso5kE
pMmNvjGf1BZt9E4JCLdGgUq0969urlev9058qXblJ6bJq9/FD3j+92pOMAKH3Xuf
k9ugQ9IdhZiU966p/rGJIlSKzFeiYRCIN5yEOyuLJZNtPP2z0Fd7s7L6/smToXdG
dZB09eXd9l1x+DsAPt13ngSlWp1KeDSKQdSEIe7T0HgTBBid1BBj7uXlpKmQXNUe
x26KJIt/7jsuBmgKBDxXQvPNsRMNl5Jvx6nvg58CAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBR5+zFeuQAGk/cdN8oiBsrHxgwZfDAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvODA5NjczZjktNjU3ZC00YzQwLWFlZTUtODA4NWU2MWE4NjgxLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACYAkAAenjANBgkqhkiG9w0BAQsFAAOCAQEAG5ol65d6IWoGRPgmwPJLSuPy
d+fq0I6MUOqw91HRacsUg7kP5x3QcH02y5iYbqTbVRtyh/Bt7t2vU/hGcbPUIKQ/
+nIuioXwAVSLv0PukUq0THYuelZy6GXwi+SSYwr/wnSkoRhWRez0ZMXgu46oifES
qc5xc12tItRpDLXRKe/BNGbn6B6yA6Qey1w9pzwqkUbeBbul8FT4xnLVQ9aDwaxt
SNo6W8FeduNicpWnJ1gsnbmEMJgp08eYo6HjJn/UdWHOs2cpOEWMWfyQVfQGzxpL
OmnsNDoUwiCQ9dUhxjh+FHQfRSr5F4RzBpAY81Nf1dWqFykGA2b1JNpSH2/aMA==
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:45:48 2026 by rpki-client