This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/02ff0537-6323-40c7-a06d-23b640acd6bb.roa
File:                     02ff0537-6323-40c7-a06d-23b640acd6bb.roa (raw, json)
Hash identifier:          NM83VThX4iaACXiXq/C28EfAm0DlB9+ajzFEsvtiUec=
Subject key identifier:   48:C3:30:07:25:75:CF:19:73:50:FE:C1:CB:28:72:2E:77:AE:30:C3
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3CE013619AD96E6BF2F2205EEF049F602181A530
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/02ff0537-6323-40c7-a06d-23b640acd6bb.roa
Signing time:             Tue 13 Jan 2026 19:51:50 +0000
ROA not before:           Tue 13 Jan 2026 19:51:50 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:e11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Jan 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e0:13:61:9a:d9:6e:6b:f2:f2:20:5e:ef:04:9f:60:21:81:a5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan 13 19:51:50 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=5b3e8707d2a2474b70b0e6e0c5f9a577c0b64d8278605cdde9c44e6f1ea63b91, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:34:b7:c6:10:6a:89:18:d6:2a:ea:d6:a2:
                    9f:89:b7:7b:36:52:d9:4f:5f:3f:62:94:a0:0f:57:
                    1f:f3:da:f1:15:96:64:29:49:ba:45:ec:84:c1:14:
                    4f:42:61:b5:f5:75:b9:ff:d1:cd:cf:5f:f4:f0:4f:
                    8a:06:19:34:ef:33:ee:1b:64:96:22:a5:0f:6d:86:
                    07:f2:16:81:2c:1e:89:4d:2e:2c:34:0f:f3:72:e8:
                    97:9b:1b:40:e2:6f:cc:a9:42:de:46:14:38:47:54:
                    87:5d:9e:69:5a:02:8e:4d:e4:7d:b7:01:c6:2f:78:
                    b2:8e:76:37:de:36:4a:12:5d:e3:eb:ab:fa:7c:fa:
                    93:0e:4c:3b:fd:60:85:57:bf:14:2a:c2:47:ed:35:
                    85:20:3a:0c:af:7f:de:73:75:19:90:11:87:3f:36:
                    b0:24:90:c9:5b:d9:af:50:f4:be:32:bf:fc:04:41:
                    79:97:5b:42:f9:3f:06:ac:44:fc:40:26:a3:c7:47:
                    1b:93:86:55:05:5c:60:ea:70:74:00:84:84:b0:1b:
                    25:7b:23:da:da:e9:50:ca:3d:06:87:e3:43:2d:61:
                    6e:32:0a:99:a3:b9:9b:ee:95:52:24:d6:99:ff:2b:
                    0a:b2:1a:75:98:fc:6f:d4:2f:f7:b9:dc:5b:d7:ee:
                    62:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C3:30:07:25:75:CF:19:73:50:FE:C1:CB:28:72:2E:77:AE:30:C3
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/02ff0537-6323-40c7-a06d-23b640acd6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:e11::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:ee:93:f3:10:53:15:9b:9d:f6:b9:2a:75:8a:6a:36:99:
         48:4b:f2:bc:07:46:09:4a:ab:32:28:f2:3f:bb:67:4d:61:39:
         3a:9a:5e:e9:99:df:af:b4:22:98:78:51:65:35:9f:25:eb:b7:
         f6:80:91:de:ed:da:dd:03:99:65:7d:a9:cb:da:be:25:3d:8c:
         2e:9c:4d:e1:ca:96:4d:c4:1e:f3:27:e6:cb:58:32:82:e4:f1:
         d8:f6:1b:18:35:1c:2a:57:c9:b7:ae:55:ae:08:65:54:be:04:
         5d:bd:3b:72:98:e4:8c:e0:de:e3:36:7f:de:de:aa:8b:72:65:
         0d:58:a8:1a:48:3d:c5:0a:33:d7:7a:37:bf:0f:95:de:89:77:
         31:ae:35:52:ca:83:41:07:cd:49:b7:90:ec:67:ac:f5:04:e4:
         86:e3:0a:60:42:db:06:f7:ec:1d:60:dd:0c:89:b4:a5:1e:82:
         61:7b:77:26:fe:98:ef:8d:46:82:91:a2:7c:62:ad:4a:ea:63:
         4b:f7:dc:df:e6:6c:0d:e6:d3:20:e3:df:34:ea:ae:97:e3:34:
         e3:27:1d:20:9d:d2:ee:8b:83:0d:9e:9b:2f:23:c3:ac:1c:c3:
         f7:c3:9f:ef:30:14:ea:2a:57:d8:65:11:96:e8:27:ea:e8:68:
         ee:c2:a5:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jan 22 22:45:44 2026 by rpki-client