This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/886c3de0-0167-40aa-be51-1dd3f5789dfd.roa
File:                     886c3de0-0167-40aa-be51-1dd3f5789dfd.roa (raw, json)
Hash identifier:          jMXt6/8Od0ImYmWTMPGEA3DECo7mB+1hgnjJKK0UFrI=
Subject key identifier:   42:F8:29:C2:04:71:44:F3:A5:78:1C:34:80:B5:AF:5B:99:66:1F:67
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1F93F01D78467BF854FBA4F5ABBAD29720BE78
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/886c3de0-0167-40aa-be51-1dd3f5789dfd.roa
Signing time:             Tue 10 Feb 2026 01:20:46 +0000
ROA not before:           Tue 10 Feb 2026 01:20:46 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.169.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:93:f0:1d:78:46:7b:f8:54:fb:a4:f5:ab:ba:d2:97:20:be:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 10 01:20:46 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=7ab60f133f2b591379a2b3403391e7ab3ec320f33fd39f1e666567e2f3cbd799, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:3f:f3:bc:a0:03:09:e8:5d:d1:2d:a8:9f:
                    6f:25:e1:ef:0d:f5:92:9e:34:55:76:4b:ef:49:c9:
                    e2:87:dd:2c:23:bc:78:91:4a:e2:25:2a:8e:91:84:
                    a2:6d:ce:32:a9:28:77:7e:65:fa:ca:02:8d:7e:e9:
                    3e:40:27:67:ad:de:b7:e6:ee:2d:b9:fd:a7:90:8a:
                    d2:e3:1d:a3:1a:05:69:b6:c1:db:39:58:de:44:b7:
                    ca:f7:02:58:2d:bd:4d:10:0a:94:c9:5c:a9:c6:d9:
                    46:e9:eb:41:9f:c9:d7:b4:c5:fb:86:ff:94:0a:c8:
                    14:cc:1f:6e:a6:84:1b:fb:69:7b:43:d2:26:16:e1:
                    53:eb:45:a5:0d:15:41:e1:2b:81:3a:d8:82:50:a4:
                    dc:f6:a9:74:9e:ee:24:ca:ad:8a:ee:81:28:d4:14:
                    60:a3:91:28:1e:f2:d3:82:9c:96:24:bd:26:42:19:
                    31:4b:d4:11:5d:51:09:d9:74:17:9c:a2:6c:98:da:
                    5b:9a:1f:ac:a7:5d:19:07:7f:47:e1:a1:dd:6a:21:
                    de:94:40:0d:6c:4b:0d:77:15:18:d0:31:fc:2d:4f:
                    e5:c3:b3:d0:69:5d:94:be:fa:be:20:10:5b:47:4d:
                    df:51:30:33:d3:97:7a:a5:f3:7b:31:06:df:34:04:
                    c6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:29:C2:04:71:44:F3:A5:78:1C:34:80:B5:AF:5B:99:66:1F:67
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/886c3de0-0167-40aa-be51-1dd3f5789dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.169.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:16:65:4f:71:20:b9:2d:d4:81:11:16:10:f5:a3:c0:94:c6:
         c1:64:d6:38:2d:b0:15:58:80:90:a7:8a:a5:57:15:bd:df:ea:
         04:df:f8:b0:bf:49:00:2a:5e:3f:5b:c2:0d:b5:8b:c3:56:46:
         20:4b:74:89:97:f0:08:7c:bf:26:73:cd:c4:eb:d5:f2:d0:32:
         e3:67:94:bf:bd:64:53:a5:a2:3c:2a:72:d4:9b:18:dd:bc:5e:
         35:ad:4e:16:9b:81:02:fc:df:da:c6:2d:3e:05:dc:6f:c1:47:
         0e:a2:ac:32:03:42:94:01:b3:d8:b4:64:c7:78:7e:c0:19:c8:
         ed:03:f7:7a:10:62:29:6f:b3:34:1e:52:34:4a:b1:ae:90:1f:
         79:02:37:aa:a0:79:c6:82:7e:f6:14:30:c9:a7:4f:07:fc:a2:
         45:53:23:92:ac:f8:cf:33:c7:21:42:2f:ee:7a:ad:31:7e:f4:
         6b:41:46:0b:1f:ea:fd:14:bd:ad:87:23:62:fc:d0:40:63:74:
         19:5c:31:e4:9d:39:4c:81:cc:bd:bd:09:b7:db:bf:fd:83:ce:
         7b:4d:ff:95:a0:df:ed:8e:70:80:d0:3a:db:73:71:f4:18:63:
         bd:f3:6a:93:c6:6a:4a:f5:8c:d1:aa:4e:c9:ca:96:9a:90:83:
         2f:18:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 08:06:32 2026 by rpki-client