This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/94eba614-6b13-424d-b16f-f95139d0d101.roa
File:                     94eba614-6b13-424d-b16f-f95139d0d101.roa (raw, json)
Hash identifier:          cRUETh33AhQDj6OafXFLoIIw8yFQLppOViJvL+/nVYo=
Subject key identifier:   5E:1A:27:5A:F6:DB:9A:68:45:43:7B:9C:DF:7D:18:E7:D5:42:FC:C8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4260B6C5BF897CAF99E93C04C9433F8D5D131782
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/94eba614-6b13-424d-b16f-f95139d0d101.roa
Signing time:             Tue 13 Jan 2026 17:58:54 +0000
ROA not before:           Tue 13 Jan 2026 17:58:54 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1eb9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:60:b6:c5:bf:89:7c:af:99:e9:3c:04:c9:43:3f:8d:5d:13:17:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 17:58:54 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=09a63554698be7611244fe896d25bb41c890aabbaa09c7bb6e1107d3e246a488, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:3b:b6:d7:93:f8:25:6f:2c:ae:ea:98:c7:
                    9f:8c:09:bc:98:23:e5:a1:e0:4e:9e:72:be:f5:9f:
                    2c:62:99:31:56:66:fe:b7:11:9e:13:45:44:14:e0:
                    af:65:03:96:dc:ae:f9:ca:24:f6:39:71:59:a9:1f:
                    4a:fb:5b:66:c7:c8:e3:20:a8:5e:09:d6:7e:63:d1:
                    a5:2d:1e:fa:03:ab:2f:32:6e:41:d3:08:0b:56:60:
                    81:03:13:a5:c3:cc:12:a1:cd:47:6e:92:39:7b:15:
                    d6:d9:3b:d1:43:b2:4d:a4:3c:62:9e:22:57:1f:82:
                    e9:7a:65:10:fe:e9:29:3b:c2:d7:a4:68:1c:f6:ac:
                    b3:56:c3:ef:a1:c3:33:e8:2c:b0:1a:17:9f:d9:92:
                    33:99:62:48:cb:01:4f:7d:e1:87:cc:c5:64:f2:7a:
                    a7:e1:cd:2b:09:e2:55:1a:0d:5f:1e:93:88:35:cd:
                    1a:c4:c4:43:f2:e1:13:99:21:8d:2b:9e:43:7b:33:
                    8b:db:09:ce:8d:bd:0f:58:33:1d:b8:fa:d9:d9:8b:
                    0c:99:0f:0b:8b:59:06:21:84:da:1e:b9:2c:a5:47:
                    01:5f:07:16:26:08:7e:6f:40:44:64:b9:5d:97:12:
                    9d:e2:5c:31:14:7c:c0:15:69:8a:d4:93:cc:a5:5c:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1A:27:5A:F6:DB:9A:68:45:43:7B:9C:DF:7D:18:E7:D5:42:FC:C8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/94eba614-6b13-424d-b16f-f95139d0d101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1eb9::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:28:30:63:36:88:52:8d:c9:47:cc:8f:5d:9b:74:97:85:2e:
         5f:4b:ac:21:4f:0b:db:84:16:4e:e2:b6:d6:c2:f3:32:7e:c1:
         23:30:a8:ec:b1:be:e8:29:a2:6d:12:b3:77:91:b1:f4:f8:2a:
         fa:c0:aa:0b:14:9c:9e:1d:c7:7e:85:9a:61:a4:47:da:5b:d7:
         12:ca:20:5d:e0:5a:29:8f:90:a5:c0:a0:7b:6b:b3:ee:89:aa:
         77:0f:e9:a5:9a:f8:10:61:e9:39:6c:42:48:fb:8a:a9:dc:30:
         f7:a4:df:a6:6c:15:89:e9:e7:db:23:38:42:cd:73:14:b5:c2:
         80:e9:b8:3d:57:f9:18:6e:5c:b4:ae:95:0d:af:00:16:ad:9d:
         50:c7:54:36:c5:8c:ff:60:da:3a:b8:7c:00:8f:d8:a9:6f:9f:
         b0:4f:4c:c3:1f:42:d1:e3:bc:f9:ac:90:d6:52:d2:99:35:48:
         d5:4a:47:08:49:b9:15:6a:e3:a9:09:c5:62:26:bd:1f:4f:19:
         c7:25:86:d3:9d:a4:f7:d3:86:57:44:23:e6:d0:bb:3a:98:89:
         8d:fe:6f:05:3b:75:8f:0b:aa:7f:3f:aa:da:29:c9:56:7d:1e:
         88:20:17:eb:eb:f1:fe:18:28:18:da:eb:2c:53:65:ed:fd:02:
         3b:16:88:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 08:23:56 2026 by rpki-client