This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa
File:                     a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa (raw, json)
Hash identifier:          EW4IjK2SJ3CxX1ss1h8sD+8QJr769lqm2LEWaWntYKM=
Subject key identifier:   46:9F:17:68:03:F0:65:7B:C7:69:C6:0E:29:1E:9D:48:31:D7:D6:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BD1C29AA427B641DEB263D80928045E5F7F62E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa
Signing time:             Fri 12 Dec 2025 00:00:10 +0000
ROA not before:           Fri 12 Dec 2025 00:00:10 +0000
ROA not after:            Thu 12 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d1:c2:9a:a4:27:b6:41:de:b2:63:d8:09:28:04:5e:5f:7f:62:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 12 00:00:10 2025 GMT
            Not After : Mar 12 23:59:59 2026 GMT
        Subject: serialNumber=37faec72bfb6a25677bf7310b929b22add6f349b8e2480a12b1851daddcccb47, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:68:83:3c:df:d1:f9:5f:40:ed:1d:e9:87:
                    9c:f6:8e:f4:76:78:32:8f:41:9f:a4:15:df:c3:9c:
                    e9:f3:01:1d:70:90:8b:bf:7f:c0:bd:15:ec:85:32:
                    65:ef:3e:59:26:28:ab:0a:8e:b9:ac:47:53:91:20:
                    9d:a4:87:9a:08:bd:60:36:76:96:94:28:31:b4:7a:
                    8f:69:e9:eb:4e:ce:ec:a4:2f:91:1d:26:1a:9a:34:
                    cb:6e:97:33:7c:e8:80:3c:45:ca:4e:5c:86:15:f9:
                    09:60:88:57:95:f5:48:9a:f8:a2:87:3c:f7:d5:64:
                    8d:2d:eb:5a:07:8b:96:7c:58:bb:1d:fd:7a:ff:60:
                    11:6e:90:b9:39:c9:d1:46:a1:70:af:5e:f9:51:af:
                    c3:d3:9b:21:c6:17:c0:5d:1f:e5:11:40:b8:43:de:
                    a1:55:3b:3e:fd:be:e6:5c:99:96:61:9c:bb:a6:c9:
                    37:36:d9:aa:5f:7d:43:e1:a4:3e:db:d4:4d:3b:dd:
                    5c:22:bc:53:7e:7f:bd:52:3d:1e:c5:3a:de:73:03:
                    e9:79:9c:b2:60:8a:a9:19:30:77:c8:1b:f9:1a:5e:
                    4c:eb:d7:21:2f:54:2b:bc:68:79:c5:a4:c0:c2:f9:
                    bd:71:5d:fe:41:01:1f:41:8d:b1:71:9e:e7:5b:95:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9F:17:68:03:F0:65:7B:C7:69:C6:0E:29:1E:9D:48:31:D7:D6:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:71:0a:4a:ad:68:a6:e7:d9:f5:a6:35:05:fe:d5:c7:fe:e1:
         b2:e5:01:a6:24:5b:b0:ab:e1:f4:56:5c:15:90:4c:ed:d2:5b:
         4e:57:af:18:2e:f4:68:a3:a1:dd:bd:8e:59:8f:0d:ab:15:9f:
         bb:8f:b0:33:5e:fb:9f:38:27:c2:a7:ee:9f:83:53:c5:f6:a6:
         80:66:de:8a:18:52:1e:d1:a4:59:b3:d3:51:90:9c:11:ae:47:
         e9:b9:f7:fe:91:ac:8b:f5:98:9b:3c:8f:1e:fb:5e:fb:32:77:
         dd:76:9a:08:c9:9d:e1:c1:37:7e:75:2d:c4:b6:8c:2b:f3:ed:
         2a:e8:c2:db:be:0d:5e:12:12:3f:61:86:fe:9e:fe:bd:4d:92:
         26:dc:90:7b:69:ec:87:4d:6c:a7:2a:c1:31:d9:01:fd:b7:69:
         bc:1c:3c:f6:8b:b2:8d:09:7d:30:c5:6c:a8:a9:7d:ff:5b:95:
         95:e2:77:7a:e6:02:2e:eb:46:90:07:a0:15:8a:97:41:87:d4:
         6a:8d:86:1b:99:c9:17:83:55:c5:b3:d1:c9:66:1b:81:5f:58:
         72:38:83:af:7c:08:e8:d0:61:c3:75:b4:e5:8a:5f:4f:5b:dd:
         ca:97:11:65:d6:21:30:2f:0c:79:27:04:32:6f:17:5d:71:af:
         f5:a7:ae:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:07:21 2026 by rpki-client