This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a208ef3a-b587-49ec-9028-9d7d15eef659.roa
File:                     a208ef3a-b587-49ec-9028-9d7d15eef659.roa (raw, json)
Hash identifier:          kLkKWHzPpeUpv0zyJbpTgihARhOKsSl+Km/A8Q1LFCo=
Subject key identifier:   69:50:2E:85:7E:4F:86:47:5B:38:12:A1:AA:3A:30:BA:7B:35:DF:D3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       22A8B49744874A73BD43342778AFF3D249B8182F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a208ef3a-b587-49ec-9028-9d7d15eef659.roa
Signing time:             Tue 13 Jan 2026 17:10:24 +0000
ROA not before:           Tue 13 Jan 2026 17:10:24 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10de::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a8:b4:97:44:87:4a:73:bd:43:34:27:78:af:f3:d2:49:b8:18:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 17:10:24 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=36644251cf384ce660452a8e58987a4cb7f2b633b7f87711c765074bdaeaac79, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:bf:d5:e7:f3:a8:2e:5e:7a:ed:64:0a:05:
                    40:63:2e:af:4f:7e:a6:2a:e9:bc:6d:90:4a:c2:13:
                    d9:a1:cc:01:61:39:d4:3e:b8:e8:9b:80:41:be:13:
                    9e:e7:65:7b:bb:59:0e:4c:e1:ae:9a:6e:33:3a:f1:
                    0c:6a:2b:b0:25:0f:66:e4:53:dc:a4:0b:52:53:60:
                    91:59:a5:03:6c:1c:5b:35:60:8f:8b:c2:3d:4e:b4:
                    59:d3:5e:fb:95:67:1d:bc:c8:2b:d8:c5:cc:a8:4e:
                    3c:7f:55:97:2a:3a:88:9c:4a:63:ef:8c:fa:a5:93:
                    79:4f:22:a0:33:d1:dc:58:b6:3e:5a:64:29:13:37:
                    a1:90:ef:8d:85:ef:aa:e5:eb:36:ed:79:53:fc:53:
                    ad:f9:09:eb:f1:95:b1:3e:1e:bd:a4:25:b7:da:29:
                    28:ac:32:79:48:10:39:7a:74:84:1c:02:79:8d:cd:
                    bf:34:3d:de:dd:b7:81:78:89:c9:32:77:6e:88:46:
                    2d:ac:55:ba:4f:c7:31:29:c0:5d:6e:fb:b9:4d:b2:
                    d5:ce:19:a8:7c:b6:87:e4:0c:2a:66:a2:d0:14:98:
                    10:23:da:ff:35:34:87:ea:be:de:13:26:ee:14:10:
                    55:d4:6e:4f:25:cc:fd:73:c2:fb:7f:f1:46:60:35:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:50:2E:85:7E:4F:86:47:5B:38:12:A1:AA:3A:30:BA:7B:35:DF:D3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a208ef3a-b587-49ec-9028-9d7d15eef659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10de::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:05:68:97:87:d6:ae:ed:3a:37:8f:a5:02:68:dc:a2:78:
         03:65:de:db:e7:0a:88:7a:4e:58:7e:a8:ce:dc:07:05:c2:09:
         e2:f3:ec:3d:74:ed:9d:75:8f:e7:91:ad:61:2d:1e:62:01:29:
         8f:17:e7:b2:6f:37:4e:2c:41:a6:50:65:cb:44:ec:0d:ad:d5:
         ef:27:c7:a3:3e:91:a3:ba:d1:4d:da:ee:f4:0c:06:b6:cc:ed:
         2d:f5:fa:54:76:26:3e:49:11:cb:85:62:86:5a:6a:32:8c:ea:
         c2:90:df:f1:b8:8a:6c:86:28:54:4f:9a:0a:f0:ef:7d:4d:a5:
         25:18:cd:10:79:26:11:b9:bb:e0:c2:4a:c7:78:4d:20:3b:74:
         2e:23:a5:52:fb:7e:49:10:42:49:cf:44:74:de:e4:42:30:93:
         eb:58:c9:46:29:8b:47:70:bc:a0:dd:85:08:bf:08:1a:9d:66:
         07:0c:a7:5a:a1:70:c8:de:00:e1:b1:7c:b2:5f:10:cf:c8:a0:
         d8:5d:09:2f:26:34:8f:d6:59:ed:55:61:08:d0:99:9c:99:9e:
         08:f1:fe:43:18:82:2c:2f:7e:10:10:08:a1:de:77:56:65:93:
         ac:bd:28:dc:22:9a:8b:da:25:5c:70:03:aa:87:ff:7d:02:0f:
         30:8b:78:1d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIqi0l0SHSnO9QzQneK/z0km4GC8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMTEzMTcxMDI0WhcNMjYwNDEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNjY0NDI1MWNmMzg0Y2U2NjA0NTJhOGU1ODk4N2E0Y2I3
ZjJiNjMzYjdmODc3MTFjNzY1MDc0YmRhZWFhYzc5MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmQb/V5/OoLl567WQKBUBjLq9PfqYq6bxtkErCE9mhzAFh
OdQ+uOibgEG+E57nZXu7WQ5M4a6abjM68QxqK7AlD2bkU9ykC1JTYJFZpQNsHFs1
YI+Lwj1OtFnTXvuVZx28yCvYxcyoTjx/VZcqOoicSmPvjPqlk3lPIqAz0dxYtj5a
ZCkTN6GQ742F76rl6zbteVP8U635CevxlbE+Hr2kJbfaKSisMnlIEDl6dIQcAnmN
zb80Pd7dt4F4ickyd26IRi2sVbpPxzEpwF1u+7lNstXOGah8tofkDCpmotAUmBAj
2v81NIfqvt4TJu4UEFXUbk8lzP1zwvt/8UZgNU8NAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUaVAuhX5PhkdbOBKhqjowuns139MwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2EyMDhlZjNhLWI1ODctNDllYy05MDI4LTlkN2QxNWVlZjY1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEN4wDQYJKoZIhvcNAQELBQADggEBAGbkBWiXh9au7To3j6UCaNyi
eANl3tvnCoh6Tlh+qM7cBwXCCeLz7D107Z11j+eRrWEtHmIBKY8X57JvN04sQaZQ
ZctE7A2t1e8nx6M+kaO60U3a7vQMBrbM7S31+lR2Jj5JEcuFYoZaajKM6sKQ3/G4
imyGKFRPmgrw731NpSUYzRB5JhG5u+DCSsd4TSA7dC4jpVL7fkkQQknPRHTe5EIw
k+tYyUYpi0dwvKDdhQi/CBqdZgcMp1qhcMjeAOGxfLJfEM/IoNhdCS8mNI/WWe1V
YQjQmZyZngjx/kMYgiwvfhAQCKHed1Zlk6y9KNwimovaJVxwA6qH/30CDzCLeB0=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:44:39 2026 by rpki-client