This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/967fc7e2-b70e-44c0-8934-be01affe1d6d.roa
File:                     967fc7e2-b70e-44c0-8934-be01affe1d6d.roa (raw, json)
Hash identifier:          yqW2qR8VUoJP21r9/6oSIQXwPF7DsE/Zxx022ZgDJYM=
Subject key identifier:   F0:73:40:C0:63:71:DA:4E:54:F3:1C:80:CC:18:01:05:3B:36:7B:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5266ECE3CBB596176512874E71D5C1C418AF6931
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/967fc7e2-b70e-44c0-8934-be01affe1d6d.roa
Signing time:             Tue 27 Jan 2026 02:53:11 +0000
ROA not before:           Tue 27 Jan 2026 02:53:11 +0000
ROA not after:            Mon 27 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.107.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:66:ec:e3:cb:b5:96:17:65:12:87:4e:71:d5:c1:c4:18:af:69:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 27 02:53:11 2026 GMT
            Not After : Apr 27 23:59:59 2026 GMT
        Subject: serialNumber=9d71aa6849c6563378b0fdd064fef506ee7e69908d401b9433d485e1cd395ec2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:97:b2:47:2d:54:02:e8:f2:13:99:8b:c9:
                    a3:ff:3a:71:bc:25:78:29:20:99:a5:6b:aa:b0:85:
                    3e:8a:c3:3d:dd:0d:ac:87:08:2b:0b:a6:37:07:56:
                    08:05:ad:8f:ab:66:74:3e:4d:3a:2a:39:c1:fe:ac:
                    d9:67:73:21:26:b4:d9:6d:c2:49:cb:79:69:d9:fe:
                    4c:14:74:5e:c6:21:fa:49:67:86:13:6e:13:e0:37:
                    14:18:2a:a1:5e:2f:b1:ca:c0:8e:72:17:b9:54:30:
                    e4:dd:0d:7d:ca:46:5f:f3:ec:8c:d7:cd:50:2d:3e:
                    d7:52:d2:22:a1:63:50:5e:9b:e4:0f:80:68:cb:04:
                    9f:f9:a8:03:e1:80:1c:cc:37:71:17:6b:db:f3:c5:
                    95:ce:55:a1:f5:fe:a4:5e:0c:ef:74:e2:2a:bb:f6:
                    0a:7c:bd:a4:a4:14:4b:c7:3a:c8:8a:fc:7c:dc:dc:
                    99:c1:09:b9:62:48:0e:b9:f1:47:ab:45:69:ca:86:
                    66:23:dd:0e:c5:32:6b:bd:97:8b:cc:e2:d8:d2:a4:
                    9d:9e:31:74:a1:03:63:f7:5d:18:5f:bd:6b:34:48:
                    20:c4:9b:5b:49:de:d9:0b:5b:9e:58:67:c9:19:f4:
                    0c:00:44:57:e9:d3:2c:84:3f:85:bb:b8:96:5d:bf:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:73:40:C0:63:71:DA:4E:54:F3:1C:80:CC:18:01:05:3B:36:7B:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/967fc7e2-b70e-44c0-8934-be01affe1d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:22:12:cf:00:a0:29:0a:c3:21:fc:56:21:78:56:36:0f:61:
         fb:7b:4b:64:11:3c:4e:91:b5:0a:d6:4d:8c:93:fa:d8:fa:98:
         6e:11:5c:29:f8:c1:90:a0:5f:26:c4:21:10:c0:66:4d:06:b1:
         ee:23:f6:bf:27:a5:e0:37:1e:12:56:5a:e9:76:f4:9d:a6:c7:
         8a:0b:da:9e:b5:5c:df:b8:3c:28:3d:e7:89:c8:93:45:bf:9b:
         59:8a:d6:c1:0f:51:84:96:bb:81:d0:fd:19:47:57:68:9c:45:
         f7:ff:a4:ea:1d:d2:7b:4d:25:3f:d8:97:7e:e1:94:88:5c:4b:
         5d:c5:1b:47:47:d0:fe:2a:85:50:13:5e:ae:c2:d4:42:7e:a9:
         14:f3:d5:70:26:32:37:43:73:db:ee:b9:81:bc:a0:f2:7c:1c:
         57:27:f8:37:97:a9:7f:3b:09:43:d3:25:de:af:66:fb:1e:84:
         8c:b3:82:e8:c1:6c:a3:bf:da:fc:6a:fd:5d:f6:56:08:0d:e9:
         d9:6c:a4:21:66:ef:4b:ef:d9:a1:f4:f1:f3:bd:1a:0f:ce:af:
         d4:27:d6:0d:dd:98:f4:64:83:09:dd:1f:86:6d:95:a3:ed:65:
         0c:72:42:43:df:02:29:40:20:2b:f7:59:fe:90:ae:c0:bf:bd:
         b6:22:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 15:12:18 2026 by rpki-client