This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ade5e34b-ec7d-4025-b1ef-552af0db044d.roa
File:                     ade5e34b-ec7d-4025-b1ef-552af0db044d.roa (raw, json)
Hash identifier:          uV9kr5WnDJgz5L5hhh1KdAKG5Mbd1Jc08mZ93Llclec=
Subject key identifier:   68:D8:E8:E3:99:54:58:BC:0F:60:CC:FE:D6:1F:E3:B7:F4:78:CB:FC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       493B0E566ED51393D48BB8F2CC78A6BEDA1F3995
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ade5e34b-ec7d-4025-b1ef-552af0db044d.roa
Signing time:             Tue 13 Jan 2026 16:23:51 +0000
ROA not before:           Tue 13 Jan 2026 16:23:51 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1045::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3b:0e:56:6e:d5:13:93:d4:8b:b8:f2:cc:78:a6:be:da:1f:39:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 16:23:51 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=f4fd9b0c6a26b568dd21af213cbdef3aca70a31a665a03abee494497ed42b7ec, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:b1:cf:20:9a:18:ec:1e:e2:7a:b3:86:60:
                    e2:d8:5d:b3:d0:5f:05:36:f7:68:44:46:2b:6a:d3:
                    8b:b3:b3:0d:8f:b4:51:fd:84:16:4d:9b:2b:5d:24:
                    61:db:ce:a0:30:31:61:f5:91:f0:82:04:8c:f9:d2:
                    7d:a1:3c:f6:68:2e:7d:61:47:d9:4e:db:c6:44:e7:
                    42:17:e6:d3:07:f4:6e:5c:d7:89:10:b7:da:55:5e:
                    e8:d4:55:53:28:5d:8f:8f:45:3b:8d:a5:3a:44:f1:
                    69:79:0a:32:99:8b:7b:b2:cf:a9:0a:9a:05:96:88:
                    6e:aa:80:cd:14:17:d6:99:97:cc:98:70:03:3f:af:
                    a9:a3:01:50:c1:35:64:81:d8:49:15:5e:e2:7e:93:
                    95:27:a7:1b:e2:ae:f1:71:f7:6f:5a:3d:25:f6:fc:
                    be:5f:c0:2b:f0:04:48:13:c8:37:71:46:62:2b:18:
                    b3:f9:b5:2a:c5:0c:bf:9b:92:e6:7d:97:4c:62:46:
                    ee:28:05:23:92:12:84:53:9a:66:72:6e:55:eb:61:
                    1d:78:36:e6:99:a0:34:37:b0:41:fa:91:43:df:03:
                    f3:21:5e:2b:e1:ed:36:06:bc:8c:cd:fd:cf:92:25:
                    1d:a3:b7:60:8e:99:f6:19:05:0e:8a:12:3e:c6:a4:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:E8:E3:99:54:58:BC:0F:60:CC:FE:D6:1F:E3:B7:F4:78:CB:FC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ade5e34b-ec7d-4025-b1ef-552af0db044d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1045::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:c7:fc:cd:02:34:ba:c9:1e:ea:87:47:83:36:8f:57:80:59:
         97:d1:c3:71:c9:76:e1:c0:2b:a9:f7:82:2a:f5:89:1d:b2:83:
         d5:50:6a:6b:6b:f0:ee:49:dc:e2:00:53:91:a0:3f:f7:6a:db:
         30:3c:16:0d:25:0c:8f:78:07:b7:48:71:f4:2f:62:b3:0f:eb:
         fb:55:08:3b:8e:33:c3:03:2e:94:40:78:7f:8c:87:23:d1:f5:
         9d:d7:28:8c:34:14:23:63:78:31:16:a8:84:52:47:80:30:80:
         22:ef:ee:2c:03:73:f4:1c:53:8e:fd:a3:9a:ac:49:1f:ac:b2:
         78:63:df:1e:ac:8c:28:b8:fb:ad:6a:dc:27:97:0f:d4:01:b5:
         38:46:a8:4c:67:03:c8:21:7a:d5:ce:cf:3e:61:5c:4d:73:33:
         d1:e4:d0:11:4e:e0:8e:7c:14:b1:23:c3:74:02:f7:19:28:af:
         3c:9b:9b:97:ac:8a:99:b1:f4:d2:bc:18:59:49:de:ae:2d:bf:
         47:16:83:6d:40:d6:88:f6:0f:10:1e:75:7c:6f:d2:13:ab:f2:
         9a:f2:37:79:e4:fa:ae:0a:88:a5:21:65:f9:4f:71:5f:7f:54:
         8b:b4:46:14:48:03:b4:7a:33:96:6b:9f:a3:64:b3:df:31:c0:
         ef:9e:fc:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:44:50 2026 by rpki-client