This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9820a3dd-3eea-4c8b-a704-54342f5308e9.roa
File:                     9820a3dd-3eea-4c8b-a704-54342f5308e9.roa (raw, json)
Hash identifier:          pckDkC1a3KZnMQMQ+XhyX6dguUFz10xm/p9ZDb1k0dw=
Subject key identifier:   95:59:00:68:C9:B0:BA:F1:4A:1A:07:7A:FD:20:71:3D:EC:C9:A0:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C40E80215FFE50F83FF3AC0D9BFB170CE764800
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9820a3dd-3eea-4c8b-a704-54342f5308e9.roa
Signing time:             Tue 27 Jan 2026 02:06:48 +0000
ROA not before:           Tue 27 Jan 2026 02:06:48 +0000
ROA not after:            Mon 27 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.107.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:40:e8:02:15:ff:e5:0f:83:ff:3a:c0:d9:bf:b1:70:ce:76:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 27 02:06:48 2026 GMT
            Not After : Apr 27 23:59:59 2026 GMT
        Subject: serialNumber=13f62925341723a575ae6beab8c92ac82502001584f7c5c9acc7d0ef03924bf9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:ce:ac:b7:7c:4b:db:a9:ee:1e:fd:3c:2c:
                    f6:82:e9:0b:d6:ec:90:29:c1:67:ce:b3:40:c1:fb:
                    8e:63:27:26:d5:f0:49:d4:e5:9c:48:38:73:f3:b9:
                    23:b4:f5:52:04:76:8a:d9:81:94:cd:1b:a4:27:67:
                    b9:2c:c2:42:10:08:61:9a:e5:f1:e7:0a:76:58:9d:
                    52:87:28:69:a9:c8:8c:76:bb:96:29:cc:ec:b3:5c:
                    dc:4c:af:bc:bf:72:3a:d6:6d:78:9a:96:60:f6:5e:
                    0b:c9:fc:17:df:ba:4b:6b:b6:29:6f:19:e4:02:c5:
                    1e:bc:24:fb:84:48:ac:8d:8b:55:87:ab:39:61:5d:
                    68:7e:61:ae:0b:e4:f2:75:e3:ed:c5:d1:ed:c7:29:
                    6a:2c:09:4b:90:c6:5f:e2:5d:f1:26:16:1f:76:6a:
                    81:ee:70:6f:2b:52:84:f7:f7:eb:71:30:4d:18:77:
                    7c:11:ea:5c:1d:d0:62:eb:0e:63:64:8d:5f:e4:0d:
                    ae:ed:3f:19:fc:5f:bb:59:6b:ff:60:ae:08:8b:b9:
                    35:bb:2a:2a:37:8b:fa:9b:7d:f9:c5:de:9c:91:9a:
                    c2:6b:13:e7:73:2e:e2:e8:05:f0:ed:07:a9:11:19:
                    8d:09:1a:d0:3c:ef:64:70:06:b0:29:ac:8d:ed:dc:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:59:00:68:C9:B0:BA:F1:4A:1A:07:7A:FD:20:71:3D:EC:C9:A0:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9820a3dd-3eea-4c8b-a704-54342f5308e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:39:8d:ca:7e:ab:df:50:f7:ca:3f:bc:91:fc:90:76:be:ab:
         3e:8d:38:4c:ca:2d:9d:50:5f:24:0b:8d:b4:d9:da:71:b5:a1:
         a6:50:be:57:14:66:6a:73:e0:8f:cf:f7:58:22:0c:0a:5a:48:
         92:7d:f5:00:7a:f6:74:ee:07:83:45:e5:95:8b:01:a5:4d:94:
         b9:29:a5:3e:06:e3:46:7a:1b:00:1f:5a:db:c8:dc:d4:fb:9e:
         b1:e3:c0:60:77:74:b0:74:0d:7c:ea:08:63:b0:de:90:46:91:
         cf:f7:e3:5b:26:d4:4e:ad:ad:e1:85:4e:e9:f2:c0:60:cf:6f:
         01:b0:12:de:a8:e0:34:06:4b:c3:13:a5:36:da:04:0d:f6:77:
         ec:4a:f0:29:b9:0f:b6:e2:4f:c8:0c:c2:e6:af:1f:e4:a8:d4:
         50:c2:14:53:93:f5:20:72:4e:8b:37:06:d6:b2:a8:29:3f:77:
         f6:58:61:cb:c7:b5:df:d9:02:ec:f4:b2:79:0c:a8:56:a1:1a:
         4f:81:45:a9:28:fd:9e:00:3e:5e:a7:a4:c2:fa:30:7b:6a:d2:
         4f:a9:84:78:04:d5:7f:0f:7b:21:20:1d:3d:45:40:4c:a8:4f:
         35:25:d1:a9:91:7e:40:ce:94:6a:00:0d:14:0c:92:e1:af:97:
         5e:39:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 15:12:14 2026 by rpki-client