This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88bab20f-78b5-450f-9115-a79d586e6f88.roa
File:                     88bab20f-78b5-450f-9115-a79d586e6f88.roa (raw, json)
Hash identifier:          pPHitVXkIuRuGO4xldcd9jE+INMpFpPFbH7xKkWOK8M=
Subject key identifier:   B0:F0:B5:48:78:0D:63:BE:55:A5:D7:D3:A6:20:84:45:72:BF:5B:02
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5DAD8745B255F2A207F4FBB99FB564509DE65863
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88bab20f-78b5-450f-9115-a79d586e6f88.roa
Signing time:             Tue 10 Feb 2026 01:31:22 +0000
ROA not before:           Tue 10 Feb 2026 01:31:22 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.169.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ad:87:45:b2:55:f2:a2:07:f4:fb:b9:9f:b5:64:50:9d:e6:58:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 10 01:31:22 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=c54fa6f2ab502a0e6aa54fd5f72e9929ab36b23c92293cc5dab2a6332b398606, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:d9:c2:e4:31:c8:09:11:0d:08:8b:bb:94:
                    75:81:03:2d:5a:57:5a:0a:7c:c5:ff:68:d6:62:9d:
                    3a:d5:28:95:f9:30:5d:12:7e:80:74:12:0a:20:43:
                    2f:0a:74:7d:68:5b:2a:ce:f1:21:59:f6:2f:ff:52:
                    cd:d9:7e:8d:86:63:71:f0:ea:60:3e:7f:f1:af:b2:
                    22:c4:03:de:21:3a:03:a3:75:bb:40:a4:4d:cc:2b:
                    d9:bf:9a:39:1a:d3:28:d8:ad:f6:39:6a:e2:14:30:
                    33:54:c3:a5:f6:23:53:29:51:03:ff:85:7a:1d:48:
                    a9:8c:27:aa:cb:43:88:30:d5:dd:a1:64:c8:4a:34:
                    1d:65:bd:bf:f1:b9:ff:c8:94:12:6d:af:9a:a4:45:
                    91:e9:73:82:03:28:b0:f8:b8:63:f0:ba:1c:4f:9d:
                    ea:0a:b1:62:a1:80:2d:cd:e6:2d:c1:99:7a:3b:72:
                    31:26:8c:4b:21:7b:95:08:26:b4:a3:c5:b2:f3:dd:
                    97:d9:59:bd:9e:c0:17:20:c0:ee:91:f6:37:d5:92:
                    40:b7:49:31:00:1e:61:4b:fc:bc:19:81:e0:1e:37:
                    42:47:1c:94:65:32:79:95:f5:99:8d:b1:a2:91:8b:
                    f2:61:0e:11:f4:af:79:18:0f:88:ce:0c:eb:50:0f:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F0:B5:48:78:0D:63:BE:55:A5:D7:D3:A6:20:84:45:72:BF:5B:02
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88bab20f-78b5-450f-9115-a79d586e6f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.169.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:d2:81:34:c8:53:3e:c8:ba:e9:e6:71:10:00:a5:94:f0:de:
         b8:86:99:35:4b:2c:78:29:b5:21:b0:be:0b:16:d0:20:34:ec:
         0b:1b:78:c3:b9:d1:82:09:d9:74:0a:af:63:48:3a:72:6e:3d:
         24:80:66:4e:8d:6d:52:13:8c:ea:0c:b6:6e:d7:60:f0:21:0b:
         53:bc:c2:e1:ae:24:3a:d4:ac:ca:5e:bc:0c:62:c0:c5:20:44:
         29:56:d6:2c:c8:0f:d1:2b:af:1d:ae:87:71:e0:2c:3a:c4:e7:
         18:7c:17:5a:ce:5b:42:3a:34:f5:9a:29:cd:84:cf:32:c2:c9:
         29:82:8f:00:b5:ad:34:bd:83:e9:09:15:aa:55:ef:6c:86:d2:
         22:42:f8:87:7e:3b:b4:6b:05:b5:da:bb:33:3e:b1:fb:75:ea:
         42:21:76:00:c3:14:7c:e5:13:d0:86:a0:7a:e7:e1:26:22:d1:
         04:8d:5a:27:7e:4f:01:52:87:5a:7f:6e:ab:b8:b1:2c:3a:20:
         5f:c5:c0:58:62:47:67:11:8e:5d:01:5e:87:96:6a:ea:44:d2:
         20:94:0c:bb:f5:7f:65:8c:de:26:6b:dd:61:d4:e0:6d:f8:b5:
         ef:8d:60:66:f9:40:67:bf:dd:54:ca:05:72:fa:4d:33:d5:8c:
         dd:17:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 06:38:27 2026 by rpki-client