This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ef29466-00b2-4064-829f-9e52620573d7.roa
File:                     2ef29466-00b2-4064-829f-9e52620573d7.roa (raw, json)
Hash identifier:          Ai0RzA1rjAoNNBbdnkGwqvhBS9RsXfUaEvqdMkD6H/4=
Subject key identifier:   05:16:9A:FC:22:8E:7B:BE:36:D0:08:DF:B0:B7:04:56:70:48:95:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       375AEA9EF7B1C82CFB89F3211B249FC28729644A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ef29466-00b2-4064-829f-9e52620573d7.roa
Signing time:             Tue 10 Feb 2026 00:41:03 +0000
ROA not before:           Tue 10 Feb 2026 00:41:03 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5a:ea:9e:f7:b1:c8:2c:fb:89:f3:21:1b:24:9f:c2:87:29:64:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:41:03 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=e10746f5156f2634da8fb04ec1aa606cebdd7efcb18bb399a5a6eeeec7a85383, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:47:b6:a0:df:8c:e4:4a:13:3b:31:98:51:a5:
                    87:70:82:01:fc:46:71:d5:1d:35:2b:97:f3:fd:26:
                    80:43:5a:22:f8:b5:d3:5a:c6:58:d2:60:e3:5a:ed:
                    be:4a:72:82:c9:e5:a5:1d:7b:ff:5c:40:52:ec:f1:
                    68:e3:b1:65:b4:79:09:0f:71:5e:c8:de:8b:0e:44:
                    20:b5:fe:4a:a8:9f:63:f1:ac:24:15:d2:05:f0:7c:
                    2d:ae:e1:26:de:60:e0:7e:43:03:ab:a1:f0:f6:aa:
                    3d:5c:d0:34:2c:e5:83:43:e0:9b:c2:35:6a:49:af:
                    50:25:df:0c:b7:bf:87:ee:3f:55:db:0a:7d:23:0c:
                    1e:1b:85:94:b1:ff:a2:b9:e7:2c:28:35:8b:c2:65:
                    51:63:b3:07:24:b3:bc:f5:57:bd:55:68:63:ab:77:
                    34:e6:be:ab:7e:52:15:e0:09:ec:af:01:8a:2d:cf:
                    bb:5a:ea:d8:c0:b4:de:29:05:5b:b8:e1:6f:70:24:
                    e4:0e:d4:c4:1e:cb:f4:da:d2:fc:30:1d:a7:bd:64:
                    85:19:e3:af:61:ea:41:76:8c:4b:bc:43:d8:9f:f9:
                    30:58:80:86:9a:d2:b8:5d:33:b0:ff:5f:54:d5:de:
                    73:c0:ba:e8:94:9a:28:a0:71:ff:22:ff:b7:6e:89:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:16:9A:FC:22:8E:7B:BE:36:D0:08:DF:B0:B7:04:56:70:48:95:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ef29466-00b2-4064-829f-9e52620573d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:9a:73:09:cb:9b:9c:ee:75:34:62:5e:a1:15:90:3f:aa:a1:
         44:52:3b:76:57:6a:df:21:96:90:37:c7:76:b2:f6:18:d5:c3:
         ae:4c:ac:7c:3e:6d:3e:64:ce:03:56:97:e1:92:6d:86:55:49:
         bf:c7:42:34:48:c2:ce:01:6a:b1:0a:06:92:87:70:8b:8e:9e:
         88:85:d4:57:04:43:8e:47:e3:ce:77:03:13:9d:52:09:24:c9:
         06:5f:bb:5b:b2:56:d5:fc:5d:fa:06:18:d6:bf:d2:98:18:27:
         1f:5a:4b:a4:42:f4:f5:19:a8:4f:49:1c:17:c5:f7:fe:dd:3b:
         88:72:73:07:20:9c:41:63:69:70:9d:e1:f6:6a:6a:e6:44:bb:
         fe:c4:95:7b:33:37:ac:5b:a3:d4:30:46:9b:0e:b5:93:1e:fc:
         53:01:94:9a:fd:6e:34:bf:17:11:90:98:84:cb:fb:9a:59:a9:
         ab:60:0c:68:cb:e2:25:9b:2d:c7:d4:8e:8d:72:c9:e9:af:48:
         66:91:43:39:d4:7b:98:7b:2b:94:de:bf:79:f1:b9:b0:e5:d2:
         eb:05:34:d9:24:e2:6d:b0:53:64:b7:c2:cf:e0:bc:53:af:08:
         92:22:d5:6c:2a:ba:86:a0:9f:ab:52:18:09:ca:56:9b:97:ed:
         4f:e4:63:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 13:33:15 2026 by rpki-client