This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8991f83e-ff4c-4d8b-9498-4f1f3ce1b454.roa
File:                     8991f83e-ff4c-4d8b-9498-4f1f3ce1b454.roa (raw, json)
Hash identifier:          gb7UdJu0/TJHNC2f4ONBvk5eSQ5IrkmMEFwaMZqwmeI=
Subject key identifier:   E8:F6:15:9B:D5:CF:4B:47:62:3C:5B:81:4B:3D:29:83:8B:0D:F3:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CE7BEB80C1DB2928C567212715E3BDA8A2EB74E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8991f83e-ff4c-4d8b-9498-4f1f3ce1b454.roa
Signing time:             Sun 08 Feb 2026 01:00:09 +0000
ROA not before:           Sun 08 Feb 2026 01:00:09 +0000
ROA not after:            Sat 09 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.21.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e7:be:b8:0c:1d:b2:92:8c:56:72:12:71:5e:3b:da:8a:2e:b7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  8 01:00:09 2026 GMT
            Not After : May  9 23:59:59 2026 GMT
        Subject: serialNumber=96fcdaadd2bb138693c4018bf6500946c63b5b3674ffd07b194fc886a569d7ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ba:e9:92:e0:ad:c1:4c:8a:14:9b:11:fa:be:
                    6e:cc:8e:7b:a8:1d:05:d3:ca:4e:be:34:10:50:6b:
                    a8:16:70:32:5d:55:fb:f1:70:2f:7c:3f:e0:4d:59:
                    0a:93:e8:8f:6a:c6:bb:28:cb:bc:ff:87:18:e3:cd:
                    d0:63:fe:d5:59:98:e0:6e:c6:35:6e:58:b9:a1:ac:
                    df:f0:cb:8e:4f:1a:db:fb:de:f8:da:77:88:ec:05:
                    a1:2f:1c:f9:31:83:bd:5b:44:5b:af:78:5f:86:9c:
                    ac:ba:76:b5:91:33:c1:fc:5a:49:3a:00:bb:d3:d2:
                    37:d6:f0:69:d9:6f:33:80:23:2e:33:8a:e4:39:77:
                    15:09:b0:43:62:d1:70:ac:e9:64:0f:00:a8:58:b0:
                    46:4a:4c:d5:df:11:f8:1f:9b:18:ea:f4:0a:cd:da:
                    60:6f:f2:48:ce:06:46:fa:b6:4e:36:51:64:3e:ab:
                    f6:93:ff:cc:8b:88:e8:b9:e6:c8:ee:7b:b1:ac:a5:
                    84:29:e1:ee:0d:51:d6:ed:b4:c3:0b:ae:ca:60:d3:
                    5d:a0:46:eb:70:cb:fc:63:5b:0a:a9:06:d2:13:eb:
                    46:e2:d8:a6:81:60:da:b9:9a:dd:ce:21:a9:ea:75:
                    39:49:8f:59:78:69:19:d6:61:e5:7f:b0:97:b9:4e:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F6:15:9B:D5:CF:4B:47:62:3C:5B:81:4B:3D:29:83:8B:0D:F3:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8991f83e-ff4c-4d8b-9498-4f1f3ce1b454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:be:27:ab:ad:b5:8b:78:c8:ff:57:be:86:4c:ef:a4:62:34:
         ce:8b:bc:9d:97:8d:8b:1d:82:95:cd:b8:0d:9a:65:a6:f4:8c:
         03:34:cd:8a:ea:78:6a:7a:a9:64:27:9f:2d:37:42:b5:3d:54:
         5d:65:cf:77:d9:43:02:ab:db:f0:a4:51:cb:de:09:25:41:b1:
         0b:e9:77:e2:61:48:ec:ba:d5:44:bd:e2:08:27:94:5d:ec:1c:
         f7:f9:f3:ff:27:a5:42:94:61:98:84:77:af:66:ba:0b:29:ca:
         aa:c3:34:92:1d:da:77:60:d1:89:b2:ee:e3:c8:bb:85:d0:cb:
         f2:fa:da:28:95:76:34:0b:0a:1d:01:83:bf:f0:92:73:cd:56:
         3c:10:30:2b:5c:4e:8d:eb:a8:44:92:4b:f3:4f:24:47:52:27:
         4e:20:e1:e2:87:80:a6:41:c7:1f:b5:f5:e5:74:55:76:6c:d0:
         6a:d2:44:cd:8d:b8:8e:f5:61:d7:54:f9:dd:bb:49:f0:14:5e:
         65:df:01:65:09:ba:10:c5:5e:d8:f4:cc:11:15:8e:a6:fd:ea:
         1d:fb:5c:74:d5:c3:34:cc:95:00:eb:ed:49:a5:48:77:9c:1e:
         00:a5:38:33:7f:3d:69:f9:3a:45:03:b5:29:31:1f:5a:69:34:
         76:07:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:44:33 2026 by rpki-client