This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c9b7ce8-6f31-4670-aba0-f3a5556d6083.roa
File:                     5c9b7ce8-6f31-4670-aba0-f3a5556d6083.roa (raw, json)
Hash identifier:          uSnmc5RRP1K9SVA00jRwtMXYo2j4E4Z1f8nAu+klbpk=
Subject key identifier:   E3:48:A9:4C:5D:C1:BF:D9:87:C8:09:09:EB:C9:84:CE:97:3C:2E:7F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D3C937FD73C704BDB5D845F33C99E682A2C7AF3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c9b7ce8-6f31-4670-aba0-f3a5556d6083.roa
Signing time:             Fri 06 Feb 2026 00:20:58 +0000
ROA not before:           Fri 06 Feb 2026 00:20:58 +0000
ROA not after:            Thu 07 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.84.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3c:93:7f:d7:3c:70:4b:db:5d:84:5f:33:c9:9e:68:2a:2c:7a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb  6 00:20:58 2026 GMT
            Not After : May  7 23:59:59 2026 GMT
        Subject: serialNumber=c32d911a2c9d05b2c2a02df21568c8e6bac3c03712f7591fb5fcde796f5ed63d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6b:d1:06:6a:28:b1:e0:a8:61:be:11:63:67:
                    41:e2:7e:61:b5:8b:2c:7a:89:ff:ff:e7:fc:f9:a1:
                    ca:07:44:63:72:39:70:c5:2b:b5:be:8c:93:c7:8a:
                    21:e2:b5:da:16:77:e4:05:0b:6c:96:84:ae:ff:51:
                    a8:3d:09:6a:28:e4:48:67:e8:d5:13:7d:78:f4:5f:
                    d3:a6:29:7f:30:a2:3a:a2:cb:9c:b9:07:15:9a:f1:
                    93:8d:a9:08:fa:aa:a8:ad:f7:05:56:16:c5:39:03:
                    e2:aa:cd:50:40:72:b6:bb:94:91:69:9b:d9:5a:ce:
                    ee:af:98:8e:6e:ba:ae:92:75:57:05:f6:42:87:00:
                    98:48:30:9b:fe:9d:21:88:0e:17:94:1c:c4:6f:99:
                    07:91:a6:32:bf:cd:63:50:03:83:6e:e5:7e:2e:60:
                    f3:18:5d:ab:72:22:1b:41:63:d3:1c:39:f0:60:74:
                    2e:53:bb:ff:ef:eb:21:3d:bd:94:ba:6e:45:26:00:
                    ee:1c:ef:45:42:2c:d2:b3:80:ac:c1:87:2f:9b:7e:
                    ab:3c:97:8c:e1:7f:df:75:81:93:16:7d:7e:f0:2c:
                    0c:ae:c0:ea:1b:43:44:3e:66:fd:67:30:2c:86:88:
                    a7:0b:19:48:89:18:a3:e8:d2:7c:e2:46:d2:d3:fa:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:48:A9:4C:5D:C1:BF:D9:87:C8:09:09:EB:C9:84:CE:97:3C:2E:7F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c9b7ce8-6f31-4670-aba0-f3a5556d6083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.84.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:dc:9c:be:75:b8:23:b9:c6:5c:7e:a9:38:76:0c:47:19:dd:
         da:3c:7f:ce:ac:0e:f6:8f:b0:b0:08:cb:bf:b3:c3:cc:54:ab:
         62:27:8f:fa:33:c0:4c:e6:4b:d0:ee:ad:0b:31:25:33:24:a6:
         35:65:ad:7a:cf:f1:04:31:46:be:73:53:dd:6b:71:63:5d:91:
         19:dd:2c:43:c4:94:53:f6:32:01:53:46:12:b3:93:c4:43:cb:
         c9:d4:4e:94:66:a4:65:b6:a0:d7:d2:f8:f5:bc:e3:5e:aa:d0:
         c7:f8:94:46:d9:e3:47:8c:b3:b4:89:f4:0d:d2:9b:79:37:44:
         03:20:8a:39:c9:00:53:e6:5a:d8:c6:cd:f0:30:e5:e4:c2:16:
         94:91:3a:56:bc:26:c5:ed:c1:df:18:c1:3b:fc:18:b8:cc:ac:
         5b:2b:8f:0a:19:25:46:47:75:4e:4f:2a:2c:84:09:c8:aa:07:
         bd:8d:ab:f6:d6:a5:4c:8d:d7:01:70:ca:0c:65:c1:fa:ac:56:
         1b:7f:7b:67:cd:2c:aa:b9:e9:57:ac:f3:ce:58:73:44:c0:6f:
         5f:a4:20:53:ff:bf:cf:73:94:00:f7:7a:d4:0e:c8:e8:41:db:
         ed:e6:cb:94:69:bd:93:e9:55:a5:e4:9f:ec:7b:47:61:56:48:
         c0:9c:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 06:38:57 2026 by rpki-client