This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c595ec98-9d25-4b66-af3c-07b4ee5480e4.roa
File:                     c595ec98-9d25-4b66-af3c-07b4ee5480e4.roa (raw, json)
Hash identifier:          HeOtrgX9Ec/54n50hy2x9FnAZ63Yc2lW4Sg0xNh7WLg=
Subject key identifier:   13:26:31:12:9C:B7:C9:1F:8B:16:0C:7E:35:05:FF:92:E9:3B:96:1F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       58F8CC19CA4E0507A69A463B97EAE77DCC47BAFC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c595ec98-9d25-4b66-af3c-07b4ee5480e4.roa
Signing time:             Fri 06 Feb 2026 00:20:56 +0000
ROA not before:           Fri 06 Feb 2026 00:20:56 +0000
ROA not after:            Thu 07 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.245.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f8:cc:19:ca:4e:05:07:a6:9a:46:3b:97:ea:e7:7d:cc:47:ba:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb  6 00:20:56 2026 GMT
            Not After : May  7 23:59:59 2026 GMT
        Subject: serialNumber=29b6d1bd05b2a22488a0195ad182fc345f2f3d931ba87d5ecdd8c59328aee8a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:4a:03:f4:4f:69:f6:55:c4:25:0a:1d:e6:
                    02:75:cc:1c:da:57:c9:7b:07:c3:92:7c:25:aa:56:
                    cb:71:88:a0:eb:3a:4f:73:9f:f0:59:31:27:65:fb:
                    69:36:37:e7:40:d2:f9:bc:a5:13:8c:1a:db:29:24:
                    99:48:a3:09:e0:94:80:da:f6:e0:8f:ec:06:2e:8b:
                    13:5a:57:a7:bf:e0:1e:89:9d:ba:b8:30:cc:7f:2b:
                    6b:24:88:df:5e:aa:ad:d1:fd:f6:98:86:3a:3b:a5:
                    ba:00:3c:5a:91:13:f3:f0:f6:b6:be:10:66:ed:e2:
                    9c:06:86:bb:eb:3e:73:0c:41:3a:8f:19:f0:d3:79:
                    ca:b8:ec:6a:79:46:8c:c8:1b:97:1b:3a:98:ad:48:
                    61:f1:c3:18:f6:4a:36:29:bc:d2:ed:3d:e1:49:56:
                    06:8f:03:c9:f0:71:a1:db:b2:4a:ac:0b:d0:81:3e:
                    9d:f4:8b:c5:05:ae:7c:5c:54:c3:d7:00:37:2c:96:
                    e9:20:a3:0c:5e:83:e1:d4:7a:73:f4:65:3b:de:9b:
                    c9:1d:84:3b:7e:b1:2e:39:3a:19:3c:1c:34:2e:9c:
                    cd:57:ed:66:2a:14:14:24:38:8f:ce:7c:1d:22:f1:
                    15:e9:d4:e0:16:56:21:a7:f3:fa:75:8f:a8:cf:95:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:26:31:12:9C:B7:C9:1F:8B:16:0C:7E:35:05:FF:92:E9:3B:96:1F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c595ec98-9d25-4b66-af3c-07b4ee5480e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.245.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:d8:e3:87:74:5e:ae:b0:7a:62:ec:0a:77:11:6a:89:44:82:
         56:7e:64:14:9f:9b:cb:09:04:7e:db:53:68:93:ae:14:9f:8f:
         04:7e:46:c2:92:d1:fd:6c:ce:57:da:5d:92:3f:9c:5f:76:e3:
         6e:c4:98:c8:da:4c:12:ac:c9:9e:8a:39:8d:ea:c9:2d:30:d5:
         e2:23:c2:40:7f:65:ca:04:10:2a:fa:4f:e6:7a:9e:a2:52:fb:
         5c:51:5b:95:bf:96:a9:56:b7:ae:65:73:fe:f4:89:0a:b9:18:
         c2:68:e7:ed:ea:a4:55:c9:8d:b1:59:6a:20:44:16:03:bb:db:
         b4:39:81:e4:e5:88:81:da:24:37:e7:c3:46:3d:37:8a:12:30:
         36:2a:b3:ac:a4:69:27:62:c5:46:85:87:d1:2f:d3:85:3e:9b:
         24:7b:e8:10:87:2b:b9:6e:86:97:32:6b:07:07:80:80:c6:99:
         58:8c:25:dd:04:74:79:4b:1a:7a:b3:8e:c6:62:f8:89:8d:42:
         ed:a8:ca:31:a0:80:44:b5:cd:64:0e:96:c5:f3:98:e4:09:46:
         7c:da:88:98:4d:63:7e:05:bb:ff:82:a3:42:e3:f3:ed:7d:1e:
         0c:e5:48:4d:21:6b:df:26:26:95:0f:14:42:04:73:94:d8:1a:
         dd:1b:6f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 08:06:38 2026 by rpki-client