This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca0cf64-ca3a-4328-bd56-afc91d1c2beb.roa
File:                     eca0cf64-ca3a-4328-bd56-afc91d1c2beb.roa (raw, json)
Hash identifier:          NMcI6MB/Nb5S3sGXy+3OJWW+6k7blGL3mPvumSyRCpI=
Subject key identifier:   EB:E9:2C:79:EC:3F:D8:20:CC:F1:0E:C3:5E:2B:AA:53:76:FE:7D:8F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       53AA0A5159C08B5A94E25DFD660D0DE348A06FDB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca0cf64-ca3a-4328-bd56-afc91d1c2beb.roa
Signing time:             Sat 14 Feb 2026 01:10:33 +0000
ROA not before:           Sat 14 Feb 2026 01:10:33 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.220.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:aa:0a:51:59:c0:8b:5a:94:e2:5d:fd:66:0d:0d:e3:48:a0:6f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 14 01:10:33 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=f772fcf768bfe5cffab11ad0c527f0593570e68f65815a1398a724966a322500, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:4c:0a:c3:19:30:03:ec:ed:2e:2f:3f:a9:
                    ff:67:fd:59:75:4f:b5:8d:75:1c:bc:69:6c:6e:c0:
                    66:fb:52:78:05:f9:c3:2b:75:9f:81:0f:28:ba:f6:
                    62:ce:94:23:9c:cc:86:8c:c5:33:fd:ea:7d:3d:9d:
                    0a:7a:f3:2f:f1:f1:f2:a9:9f:5e:5f:ba:aa:93:ab:
                    72:64:af:b9:84:1b:3b:30:b5:65:b0:58:fd:13:23:
                    63:1b:bd:63:4f:59:57:c1:39:55:a8:9f:82:58:54:
                    a0:21:cc:10:22:44:ed:17:0d:6f:6d:a2:d3:7a:18:
                    13:d0:32:ee:21:74:1f:9d:b7:64:8e:dd:34:ad:12:
                    44:b5:7a:8e:d9:59:2e:96:38:fc:06:4c:fb:18:87:
                    ec:43:bc:f2:c7:26:6a:92:3f:8b:e8:40:ea:57:ec:
                    74:26:4e:95:0c:ea:ea:ec:e3:58:cc:c2:65:30:be:
                    6b:18:ab:36:b3:a8:ce:42:21:75:d5:ed:47:17:f1:
                    2c:32:e1:f8:47:dc:d1:e9:6a:82:dd:84:e1:9f:fa:
                    1a:cc:71:0a:71:7f:54:5f:ea:eb:1c:f9:39:4b:93:
                    a8:ea:26:ec:84:b2:9b:f0:6b:dd:3d:b7:fd:b1:b1:
                    38:14:19:ce:20:80:49:e2:b5:7f:25:f9:0e:c7:3c:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E9:2C:79:EC:3F:D8:20:CC:F1:0E:C3:5E:2B:AA:53:76:FE:7D:8F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca0cf64-ca3a-4328-bd56-afc91d1c2beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.220.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:bb:12:07:d1:c7:85:e3:99:36:2f:11:f8:94:64:62:a3:2e:
         ab:ba:17:d2:3f:47:09:55:8f:a1:b7:47:c5:d9:e6:9f:ae:e8:
         20:7b:fb:ec:87:3e:f2:41:af:32:6e:2f:18:4c:51:5c:18:7e:
         d3:6b:d5:bd:4e:f9:24:8d:43:71:41:58:10:48:3c:59:c6:ed:
         38:d1:e9:58:dc:f2:91:06:e2:49:2b:ae:79:93:0f:48:ae:8b:
         33:fe:3b:a7:5c:b2:f2:38:be:21:8d:f6:97:9f:c4:7f:ad:d7:
         03:c0:8c:89:6f:51:3c:63:21:5a:06:9b:4d:df:34:86:93:de:
         3f:f7:45:93:b8:4d:7a:e3:56:85:8d:dd:3f:18:4d:be:5c:ee:
         37:ed:6d:e4:88:93:6a:1a:39:dc:5a:f8:b1:d8:c9:22:8d:25:
         c1:c4:55:7a:cd:48:92:56:57:a6:c2:72:e9:b5:75:de:de:35:
         ce:92:f3:e1:de:a1:bb:e6:02:36:a1:1f:7f:be:ba:29:6a:b6:
         dd:d2:8d:8c:1a:62:a3:3e:d5:89:f2:00:63:01:33:56:26:a3:
         48:33:94:f3:2f:96:85:95:5b:32:73:a7:b8:ba:c8:e3:22:6f:
         9c:83:00:1a:13:a5:60:de:5a:15:1a:91:9f:a7:99:90:64:05:
         1b:32:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 08:06:29 2026 by rpki-client