This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6db6e667-efd2-4f80-8d79-37abec4f3e43.roa
File:                     6db6e667-efd2-4f80-8d79-37abec4f3e43.roa (raw, json)
Hash identifier:          oqpkP25QQpweqaKXbsTipfbJavHXBT2CDQ/APnej9BU=
Subject key identifier:   5B:18:7F:A2:7E:1B:F2:DF:94:12:DF:AD:49:F4:B8:5C:C1:1C:46:73
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       715C5406D1EF9BC363D40AF7527E56C17EB63184
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6db6e667-efd2-4f80-8d79-37abec4f3e43.roa
Signing time:             Fri 30 Jan 2026 22:21:51 +0000
ROA not before:           Fri 30 Jan 2026 22:21:51 +0000
ROA not after:            Thu 30 Apr 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f1:8a10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Feb 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5c:54:06:d1:ef:9b:c3:63:d4:0a:f7:52:7e:56:c1:7e:b6:31:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan 30 22:21:51 2026 GMT
            Not After : Apr 30 23:59:59 2026 GMT
        Subject: serialNumber=aa9a5013dc6a4410353ecb1e10493d87396e768c49df6ce991be705f9633f3b8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:47:fb:bb:1f:aa:f1:53:01:fc:3c:8b:dd:
                    3e:8b:52:b3:63:0b:a7:fa:e0:87:63:54:ac:f3:37:
                    6b:d5:67:15:19:4e:ee:2f:d2:2c:66:2a:ee:cb:1c:
                    58:ef:7e:81:95:7a:5d:97:8b:32:ee:84:39:cb:10:
                    1c:eb:b7:fb:15:d9:07:92:aa:42:2f:86:01:60:b7:
                    22:34:b6:d0:ba:4e:d8:bb:e0:ba:b6:23:b6:b0:16:
                    ef:5c:5c:f4:08:49:ba:58:4c:88:95:aa:59:8e:72:
                    20:3b:14:50:d1:e3:fb:8b:5a:be:44:cf:26:66:e2:
                    bd:2f:9f:94:a4:9f:ee:47:71:82:af:4e:5e:20:c4:
                    9a:7e:f4:8e:5a:3b:9d:cf:58:d2:5b:1d:cf:d1:5c:
                    6d:56:fb:07:53:72:09:b7:cd:1a:c6:7f:13:78:3e:
                    3b:18:66:bb:f8:14:d9:35:3e:de:e5:d0:f2:80:b8:
                    63:32:74:ce:97:eb:32:55:8e:e6:0d:6d:7e:c9:2b:
                    9b:11:f5:e3:2c:ef:b3:fa:16:6c:bb:e3:79:d8:f0:
                    61:0e:14:56:81:92:fd:f8:a8:c9:7c:c6:d2:e5:7c:
                    67:91:08:f5:ba:20:84:fd:26:36:63:a0:3a:ed:62:
                    dc:ed:0d:44:9a:ca:99:a6:11:38:46:48:7a:e2:4d:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:18:7F:A2:7E:1B:F2:DF:94:12:DF:AD:49:F4:B8:5C:C1:1C:46:73
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6db6e667-efd2-4f80-8d79-37abec4f3e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8a10::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:a7:2d:1a:dc:85:78:a0:7f:10:25:17:e0:41:9d:a2:7d:
         21:f6:d2:d1:05:b3:44:68:c4:1e:b7:62:68:a4:ed:ed:54:96:
         77:9b:b9:1f:86:83:f0:e4:86:89:4c:5e:9e:3e:cd:34:d2:5f:
         c3:15:de:ef:19:a3:7b:38:67:31:5d:33:8b:d4:80:65:ed:5a:
         9b:f3:fc:86:aa:5c:17:dd:af:8a:9d:3e:b1:ef:b5:64:1b:14:
         cf:8f:ed:7f:d7:f0:3e:0e:a2:97:1c:be:65:6f:de:d3:db:5f:
         d9:3d:b9:8d:4c:b7:f7:04:11:40:e1:55:62:6f:67:d4:b2:38:
         2b:12:c6:9f:37:a2:f8:0e:ae:d3:f0:69:d4:ba:51:39:93:a7:
         1e:66:db:63:3d:e7:b8:84:02:65:e2:1d:a2:86:7d:d6:3d:99:
         13:14:35:e7:03:e9:1d:61:92:45:50:e8:e2:2a:23:52:2e:40:
         f7:c9:5f:d8:40:fa:87:22:96:dc:7f:aa:70:c6:f6:48:4a:81:
         21:14:a4:6f:a2:1e:2d:84:4f:c3:b6:14:6e:fc:ae:2d:9a:e6:
         a3:44:ba:27:e1:b9:4a:b8:8d:62:00:02:b6:d0:05:85:76:31:
         d5:17:43:2a:f1:f7:69:1a:4f:fa:35:12:d2:13:6c:04:c6:e3:
         d9:f9:56:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 6 02:05:22 2026 by rpki-client