This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cef2557-f948-4122-9416-b76289906013.roa
File:                     4cef2557-f948-4122-9416-b76289906013.roa (raw, json)
Hash identifier:          sUfmaet4JWughcbWVr7jX+Zqr0Cm4Yd2hUPKYeGAW6c=
Subject key identifier:   42:6C:66:C0:C8:98:99:05:87:9F:5E:B7:CD:C0:B3:1B:32:92:FE:BE
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       13CF54173EBBFA0593080EC07F26E83DD8712B19
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cef2557-f948-4122-9416-b76289906013.roa
Signing time:             Thu 05 Feb 2026 09:51:41 +0000
ROA not before:           Thu 05 Feb 2026 09:51:41 +0000
ROA not after:            Wed 06 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Feb 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cf:54:17:3e:bb:fa:05:93:08:0e:c0:7f:26:e8:3d:d8:71:2b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb  5 09:51:41 2026 GMT
            Not After : May  6 23:59:59 2026 GMT
        Subject: serialNumber=36d07b5c27ddab9f8aa7e5c2e2b553f7f9b11af78d3f3ef56157efcc4fea7db2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:8f:1e:13:c4:b9:a9:f1:02:8a:7a:b4:97:
                    f4:6e:03:e0:cd:10:a8:25:12:be:48:2b:d1:94:05:
                    16:ca:f6:1e:2b:e6:2e:ff:81:4e:8f:30:85:92:6d:
                    f9:e7:4c:ae:f5:55:fe:18:0b:f3:86:9b:3a:f9:67:
                    0b:6f:ca:a8:60:33:5f:b7:ed:83:74:1b:9c:82:3d:
                    ae:41:45:e6:a2:20:1d:bb:d3:2a:21:ac:b9:53:26:
                    e5:58:9b:db:d1:44:93:f4:e9:94:37:78:6a:47:37:
                    c3:98:a0:38:c4:a4:51:75:cd:15:98:2d:73:80:e6:
                    45:74:f3:b8:e7:a9:63:51:a6:4d:75:35:39:14:68:
                    8c:6d:e8:b6:2e:d1:76:16:06:29:91:22:80:32:fb:
                    b7:c6:77:a4:09:f9:04:ac:be:b7:3e:02:d1:c7:99:
                    e7:ec:98:43:60:59:fa:b2:8e:b6:d8:17:7a:b8:fe:
                    83:3b:79:af:fb:fb:88:46:82:fa:24:cc:c1:df:19:
                    ce:e6:55:3a:8c:e9:f3:95:6b:6b:b1:ae:5f:6f:c1:
                    bb:a5:c0:5b:11:01:5d:0e:af:b0:55:99:bc:fc:6c:
                    49:9c:db:24:41:82:bc:cb:db:59:23:d2:fd:c4:d5:
                    31:9e:82:8a:a3:17:95:62:d7:86:f7:91:7f:0f:86:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6C:66:C0:C8:98:99:05:87:9F:5E:B7:CD:C0:B3:1B:32:92:FE:BE
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cef2557-f948-4122-9416-b76289906013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:700::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:9c:27:a2:35:c0:1d:13:c5:b2:6b:6d:20:a6:0c:fd:8d:cc:
         dc:64:e2:5f:bd:e7:a2:8f:dd:be:77:ea:f3:ce:87:ea:10:3b:
         71:86:93:0e:a6:f1:26:5f:00:9d:73:58:75:d0:fd:7e:8b:ca:
         01:0f:01:81:e1:74:16:b6:7c:39:97:87:99:c4:77:a2:ee:31:
         9c:a8:f9:1b:36:d3:a2:90:49:c6:4b:7f:14:f5:81:4a:89:77:
         fe:70:f0:35:b7:8b:86:6d:af:bd:ce:77:37:de:f8:c0:fd:f1:
         d9:d3:2c:79:de:cd:73:14:37:8f:8c:84:e5:99:fd:d2:47:fe:
         fe:fd:11:03:a2:99:fc:ed:88:47:d2:be:1a:1d:fc:8a:02:23:
         d9:78:06:06:f4:75:39:dd:97:0a:13:8e:f6:dc:f7:ff:fe:17:
         66:ba:5f:0f:b4:81:0b:6b:4e:fe:24:0d:8a:89:95:bb:b9:70:
         2d:81:d9:5f:79:c4:52:c2:9f:c5:27:a9:4b:20:2a:8b:54:ee:
         19:ab:56:25:48:82:14:33:5e:33:c1:1b:c0:e2:02:b8:3e:d2:
         9b:07:e1:27:2c:7a:73:57:b1:a2:64:ab:bc:82:83:b1:4d:af:
         ed:a1:e5:30:2a:b0:59:a6:25:15:14:af:0d:6d:e2:58:85:ca:
         25:e5:79:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 6 02:06:05 2026 by rpki-client