This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eae51c84-5696-475a-8d7d-f66b11dabdda.roa
File:                     eae51c84-5696-475a-8d7d-f66b11dabdda.roa (raw, json)
Hash identifier:          BSGKnPdtlFwPD36EriLFR7v1iMfARjSZAd/n+WQoi6g=
Subject key identifier:   54:F8:5F:D6:8E:A6:A1:0D:A2:5C:E6:F5:6A:53:F4:3D:26:16:62:83
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3F842DC220AEF129C59AEFF56178B34FD7C77CFB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eae51c84-5696-475a-8d7d-f66b11dabdda.roa
Signing time:             Tue 13 Jan 2026 16:06:57 +0000
ROA not before:           Tue 13 Jan 2026 16:06:57 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:84:2d:c2:20:ae:f1:29:c5:9a:ef:f5:61:78:b3:4f:d7:c7:7c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 13 16:06:57 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=54e3e5789761603d10c1034aadfc153b8eb786386322986997755c5ca62f00d1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:3e:0f:90:30:5c:36:ac:70:c3:40:2f:9d:
                    7f:12:0a:5c:e3:8b:69:cb:e2:e4:50:d7:8d:54:67:
                    ff:d8:5c:c8:b3:88:b9:ba:f2:0a:fd:73:10:5c:07:
                    d2:aa:bc:f5:d0:7d:88:6c:fc:e3:ed:e9:5a:ea:6b:
                    17:3a:83:bb:70:31:cf:65:74:96:8e:fa:c7:ce:6a:
                    eb:5b:76:ad:7b:f6:d7:e0:70:46:9e:5e:c3:b8:a5:
                    ad:6d:22:f4:96:7a:18:dc:4e:03:ec:5a:82:cf:64:
                    ed:81:83:4b:eb:0a:5f:30:ed:19:bd:85:50:c7:2a:
                    06:03:e4:c2:d3:e6:cb:9c:15:04:0e:c8:b2:91:2b:
                    e4:68:7d:82:5a:b8:95:3f:fe:88:13:9f:2d:7c:f1:
                    15:f4:20:10:86:34:34:02:16:e2:44:7b:67:81:7d:
                    3c:6e:3a:b1:3c:26:06:07:8a:e2:1b:5c:4d:85:9c:
                    cd:d3:a0:f3:aa:69:0c:af:fc:37:c5:a2:3f:69:43:
                    3b:95:2c:da:ad:e8:b8:85:eb:83:bd:30:70:0c:cf:
                    7f:2f:dc:16:9e:fd:2a:08:93:e3:0e:02:3c:15:7b:
                    42:bd:0e:ac:c6:43:b1:61:69:70:35:bf:8f:c6:ab:
                    e5:3e:d2:bb:71:0e:89:d4:40:9d:f7:ca:b4:22:db:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F8:5F:D6:8E:A6:A1:0D:A2:5C:E6:F5:6A:53:F4:3D:26:16:62:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eae51c84-5696-475a-8d7d-f66b11dabdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:0f:bd:4d:0e:59:e8:32:7f:8e:93:46:15:61:39:b9:d7:6a:
         ff:6e:86:7e:1c:3d:bb:51:6c:9d:de:d8:62:c7:91:c9:44:b6:
         2f:0f:e2:4f:da:50:75:bf:c9:d8:1d:67:62:08:c5:e4:70:84:
         97:79:06:4c:c5:22:b7:70:bf:df:dc:35:54:cf:21:7b:71:2e:
         ec:56:a1:a7:ca:95:55:b4:c7:bf:31:e4:f8:1e:04:09:2f:94:
         b3:22:c1:3b:b8:e6:78:c6:0d:b7:95:34:6f:ea:69:7e:e9:36:
         0e:0f:9a:96:b5:78:7f:d7:06:5d:63:37:e0:c3:fa:61:2f:f4:
         b3:24:d4:9d:a1:a2:7e:81:74:c4:99:b8:84:72:1e:6c:07:c3:
         27:42:f8:22:a8:f7:f6:02:bb:96:d8:77:ae:09:ab:51:8d:4d:
         0e:fa:20:15:af:30:ca:fc:d1:ae:bb:6c:20:e6:25:e5:41:89:
         6d:ee:68:46:78:54:7a:a2:bb:ab:ac:b4:3a:6a:c4:9b:df:2a:
         5a:4d:29:9e:55:da:46:0c:e0:a4:99:8d:65:0d:52:cd:d8:82:
         12:d0:43:b2:ff:8e:23:87:70:d2:a4:e1:5a:46:87:42:25:95:
         1b:71:d0:dc:68:81:b1:d1:f7:9a:85:29:b1:3f:2f:4f:03:53:
         d6:c1:4d:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:06 2026 by rpki-client