This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2fd24a8-dcac-4508-902c-c108cd032f3d.roa
File:                     e2fd24a8-dcac-4508-902c-c108cd032f3d.roa (raw, json)
Hash identifier:          ZPU3UpvnfHTwMiM0KvTp0mr63tzvaGZOqXEQFJDeqeg=
Subject key identifier:   EA:61:3B:83:0B:41:F4:41:22:06:FB:14:A8:8A:FC:71:AD:9C:16:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       435F41E3C2C98AC2A3C5A2FB8D8C6B9435564A55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2fd24a8-dcac-4508-902c-c108cd032f3d.roa
Signing time:             Tue 27 Jan 2026 03:22:41 +0000
ROA not before:           Tue 27 Jan 2026 03:22:41 +0000
ROA not after:            Mon 27 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.234.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5f:41:e3:c2:c9:8a:c2:a3:c5:a2:fb:8d:8c:6b:94:35:56:4a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 27 03:22:41 2026 GMT
            Not After : Apr 27 23:59:59 2026 GMT
        Subject: serialNumber=61c2def60f59c04a3831867dd4a860cba290522296b74df331f999276a0f968c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:80:b6:1c:66:51:0a:9f:65:89:34:40:ea:
                    39:ab:6a:b7:d0:63:3a:89:95:d9:65:3a:ca:46:1d:
                    6f:20:b3:69:b7:cd:35:05:52:d7:1a:eb:aa:73:45:
                    55:9e:14:5a:04:4e:3f:60:df:0a:31:00:87:f9:51:
                    11:91:d4:d8:88:af:2c:9c:6a:bf:45:22:32:b1:89:
                    8d:a2:ff:53:67:b8:a6:7c:6d:95:62:ae:62:6a:ca:
                    8a:c2:3e:ee:39:2c:c4:1e:8a:59:c9:1b:8f:25:1b:
                    a4:83:82:20:e6:47:e3:d7:7d:20:f7:98:56:5c:d4:
                    3f:4d:10:d8:78:d8:ff:88:0a:81:b9:65:8e:bb:f0:
                    3e:6b:dc:71:41:49:04:d4:03:dc:b0:88:5a:0c:ea:
                    2c:d4:ec:53:a4:c5:c3:58:55:56:0b:e7:87:4a:82:
                    0e:e9:1c:9d:a7:dc:68:c1:e8:ac:4e:6b:20:61:db:
                    f0:b5:1e:31:41:13:b1:e8:46:f5:6c:e8:16:0a:e4:
                    04:b8:5a:b2:27:df:2a:1f:19:1a:bd:7f:0b:f9:35:
                    f0:b3:ea:e1:59:ef:8b:31:c8:0f:d1:4a:b7:fe:6f:
                    7b:54:46:65:9b:7f:fd:a1:86:e6:ab:83:9b:cc:9a:
                    61:a5:8e:dc:de:61:2a:d5:ec:6d:4c:ef:ff:7d:b7:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:61:3B:83:0B:41:F4:41:22:06:FB:14:A8:8A:FC:71:AD:9C:16:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2fd24a8-dcac-4508-902c-c108cd032f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.234.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:2a:26:ff:90:49:f3:bd:e8:00:ad:b8:55:91:6d:44:0f:ee:
         df:3a:29:16:c8:bd:60:79:51:06:e0:06:0f:4a:bf:c0:93:03:
         36:1e:fe:66:99:ae:cb:50:8e:34:cd:dd:d9:46:b2:4c:6d:de:
         ae:c9:f0:94:8a:5d:11:c7:c2:c6:d6:f6:94:bf:c5:0b:e5:8f:
         82:0c:db:a9:7a:b3:3f:ff:08:28:c1:95:e9:90:c4:80:b4:85:
         40:ae:ea:70:9b:cc:d5:96:c0:eb:7c:de:7a:f2:77:94:78:2a:
         3d:70:1c:7e:ea:8d:8b:41:5a:91:f4:f2:6e:fe:b0:70:3f:7b:
         db:a9:fe:1e:fc:67:e4:b7:73:75:5e:56:7e:68:2d:e5:b4:67:
         b9:0d:64:54:b2:76:48:16:f2:df:48:b2:0d:72:c6:eb:22:4a:
         53:1f:50:d7:1c:d8:e8:2a:2f:fb:f9:be:81:23:1c:33:73:e5:
         aa:24:48:8f:b2:79:3b:b1:a5:b6:3a:fa:a8:e2:cb:c6:d3:ea:
         99:4d:71:56:95:6f:1f:10:78:0b:2f:61:18:14:b0:f4:e8:d3:
         fa:0b:8c:2b:0d:54:fc:98:e8:fe:2f:b4:95:18:3b:53:39:85:
         c9:fa:69:db:c4:90:be:d0:a0:ee:a1:62:d9:aa:de:80:77:16:
         a3:1e:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 15:12:23 2026 by rpki-client