This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2d805de-e5b4-4f57-bdf3-f499f9f9f267.roa
File:                     a2d805de-e5b4-4f57-bdf3-f499f9f9f267.roa (raw, json)
Hash identifier:          CjJMlqEH7sob9V2BMrosNrym+5jjYp7Ix762sCJABG4=
Subject key identifier:   4C:5D:AB:65:FE:0E:54:DF:4D:E1:0E:43:2F:B9:86:2D:AA:29:D8:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F6610547430376408DCF8C88270C94473A6CFE6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2d805de-e5b4-4f57-bdf3-f499f9f9f267.roa
Signing time:             Tue 13 Jan 2026 19:55:12 +0000
ROA not before:           Tue 13 Jan 2026 19:55:12 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1feb:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:66:10:54:74:30:37:64:08:dc:f8:c8:82:70:c9:44:73:a6:cf:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 19:55:12 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=6356471f958def30cd2cec127b555dec318c4f5dbabdd7e1b36f68d1a16ce19f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:22:4e:f3:28:bd:0f:c9:42:4f:54:0b:ed:
                    a7:c1:4b:1c:0d:68:1b:c2:a7:67:18:3e:7c:b3:cc:
                    0d:de:57:52:b3:e4:b7:40:48:8b:a9:be:00:b3:5b:
                    8b:99:65:ee:6a:7c:81:bb:64:bc:d1:61:e6:ff:8a:
                    90:2c:02:20:54:b4:70:cb:f3:8a:8f:39:00:ac:54:
                    d5:7a:b1:c4:94:0d:5b:10:9e:11:18:c1:41:17:59:
                    24:bc:36:e5:3e:57:35:68:3b:be:ab:5a:01:01:65:
                    a0:d4:be:dc:d1:d7:d6:09:d1:a9:dc:eb:de:91:05:
                    ee:4a:61:bf:46:fc:a6:f9:bc:15:a0:bb:b0:5d:87:
                    62:8f:5c:8d:7b:37:b9:9f:84:b9:17:2e:02:1a:19:
                    05:8c:65:94:93:b4:2c:19:ec:6b:62:9f:39:6c:b8:
                    92:76:eb:0e:27:05:31:7b:e9:77:f3:22:7b:bf:b4:
                    5d:8b:56:76:a2:24:43:08:d9:e5:24:80:cd:ac:79:
                    62:4f:26:81:01:d6:e0:7c:be:88:f6:b7:ea:03:0e:
                    04:5f:b8:8b:7b:3d:ab:88:e5:14:99:37:ed:a2:9b:
                    86:fd:1a:2c:bc:0e:57:b5:0d:9a:db:95:25:85:39:
                    1d:e7:3c:9a:4b:00:ae:ee:f6:14:a2:d4:3c:23:26:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5D:AB:65:FE:0E:54:DF:4D:E1:0E:43:2F:B9:86:2D:AA:29:D8:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2d805de-e5b4-4f57-bdf3-f499f9f9f267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:7a:71:9a:96:43:1f:fd:92:69:f9:be:b6:81:56:de:7b:
         94:bb:a5:7b:c2:20:f6:73:75:c3:17:23:c4:07:d7:c5:60:ce:
         2d:56:5f:09:66:d0:c4:a7:00:2d:e7:1d:a8:d6:46:88:2c:2d:
         ae:08:9e:07:5c:90:1d:51:55:f5:7e:c7:b5:5b:52:93:43:c9:
         8d:2e:a1:4f:fa:5c:26:ad:fb:57:f5:e7:38:ea:9a:28:8e:bc:
         c0:5c:b2:da:0d:5b:51:89:b1:b7:97:cb:b8:3c:6d:a3:43:31:
         b7:06:54:a1:fc:90:05:27:d0:c3:c8:79:00:f5:96:79:3e:eb:
         45:21:81:49:77:04:39:0e:33:f8:8b:cb:ed:90:19:cb:80:f0:
         99:42:cc:6a:ee:e7:c5:88:ea:0e:ab:a1:09:50:21:82:28:99:
         ef:f4:ca:59:51:af:b4:dd:de:03:5c:9b:ce:72:c1:aa:09:c8:
         6d:9e:46:88:37:dd:b5:98:7a:67:ce:d7:92:16:83:c2:c8:a8:
         96:92:a7:14:50:ee:4c:ff:90:aa:ea:44:9c:b4:48:19:c2:b4:
         47:e8:4c:2d:70:c3:eb:97:8a:73:9e:8b:12:99:8b:b8:3b:ea:
         cd:05:bd:b2:e8:74:0a:d1:d0:ca:38:c4:05:34:3d:71:ba:0b:
         76:11:05:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 19 09:49:19 2026 by rpki-client