This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d929f1f9-9fb2-4281-83f8-32f66c89ec60.roa
File:                     d929f1f9-9fb2-4281-83f8-32f66c89ec60.roa (raw, json)
Hash identifier:          j29CPD0c2H4YOtUj7NqF8yA6aHLAxxDEJKPzrmI22ok=
Subject key identifier:   EA:A3:CF:A9:C9:67:3D:99:78:79:C6:FC:95:C9:FD:91:27:D4:8B:70
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3C49C142C0A366232CFBC2E54CB64C2F8BBD7E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d929f1f9-9fb2-4281-83f8-32f66c89ec60.roa
Signing time:             Tue 13 Jan 2026 17:38:44 +0000
ROA not before:           Tue 13 Jan 2026 17:38:44 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:49:c1:42:c0:a3:66:23:2c:fb:c2:e5:4c:b6:4c:2f:8b:bd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 17:38:44 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=1f921a7bede7115a647b3fc0c5cc1b6540861740eff2603c8a5758eacdd38e05, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:7a:ec:05:db:a4:5e:c3:d9:89:a6:80:67:
                    45:2a:94:4c:ab:f0:d0:b1:a1:2e:bf:c6:91:2d:cb:
                    37:67:7a:f6:51:1c:97:23:7e:68:96:1b:9b:30:1c:
                    95:2c:62:85:73:21:76:41:e5:0d:51:38:b1:6b:ed:
                    74:06:8d:42:7f:25:f6:f7:dc:55:7c:8d:0c:e0:22:
                    53:67:8c:f9:67:9f:bf:61:ef:34:6d:b4:bd:ef:57:
                    8f:40:7a:de:53:59:a5:1d:b0:f7:d1:0f:30:1c:2c:
                    7f:78:ef:1e:1e:4f:34:96:f1:c8:12:bf:41:cc:d7:
                    39:dc:66:e5:a9:6c:3a:cf:38:da:06:ad:88:c1:6f:
                    68:42:ce:da:f7:cc:df:b5:bd:88:98:68:ea:be:81:
                    76:84:f0:c4:a1:04:84:0d:5d:3b:05:6d:16:5e:7d:
                    bb:0d:cd:fe:9a:25:a8:ab:50:9e:14:8d:84:22:a2:
                    9f:39:31:da:69:54:0d:9a:03:15:d2:19:34:9a:e2:
                    35:35:ce:b8:a9:a4:9f:d0:c8:0f:2e:7a:24:d7:02:
                    af:94:d7:3e:8f:5f:45:9b:34:a7:ca:0b:1c:7c:94:
                    78:23:7b:b6:fb:b7:0f:9e:43:07:64:50:f9:29:12:
                    f0:0a:1e:6b:e7:5d:da:f3:92:8b:ac:be:1d:52:f0:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A3:CF:A9:C9:67:3D:99:78:79:C6:FC:95:C9:FD:91:27:D4:8B:70
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d929f1f9-9fb2-4281-83f8-32f66c89ec60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:65:27:83:c3:9e:0d:fd:36:bd:1d:46:d9:0e:c3:ea:07:98:
         b8:7d:97:a0:91:f1:1c:03:c8:e7:1f:fd:85:88:39:35:75:bc:
         b6:bf:1f:c3:58:ca:da:a6:9e:17:7f:07:12:58:46:16:b6:24:
         0c:94:0a:08:70:31:50:34:af:25:b3:27:d2:fc:81:11:95:fa:
         53:31:94:5f:bc:fd:8c:ff:b2:c5:55:57:a5:0d:38:f2:73:ce:
         e0:3c:d6:99:11:2d:a4:af:7c:fc:b7:68:ca:15:ce:63:0a:76:
         8c:86:b1:04:8f:b5:d9:e2:4f:4a:b2:62:34:07:c8:12:52:ce:
         ef:1e:1a:c1:16:45:6b:6a:a6:6b:ff:8a:5e:8d:bb:bd:24:89:
         94:22:13:3b:30:4f:c0:4d:83:df:3b:cb:0d:d2:c8:4e:a2:98:
         eb:87:c8:b7:a4:97:f2:1b:55:aa:5a:08:df:ec:9e:19:7f:b3:
         ba:e5:43:bf:b2:ac:16:c0:1a:ff:c6:48:77:55:3e:67:3f:5d:
         0d:18:07:fc:11:c1:24:e1:ea:5b:bb:2b:d7:66:04:1f:27:3a:
         1f:b4:38:09:86:1c:04:44:76:13:3c:7d:b6:96:5f:dd:ca:09:
         36:29:6a:3b:e6:66:68:a4:3d:e6:13:3f:89:8e:06:c6:fa:9c:
         08:0d:a4:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:45:39 2026 by rpki-client