This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d691919-536d-4192-bb94-4b09044e4c56.roa
File:                     8d691919-536d-4192-bb94-4b09044e4c56.roa (raw, json)
Hash identifier:          L88f8YJmNDOT6pc4M36DzR12navtDwo1X+wFIuJ6fKo=
Subject key identifier:   5E:AB:7F:76:46:43:09:96:05:3A:7C:CA:42:52:AD:1A:AC:A0:57:F1
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       344A03ECD9A2F4F1590224083A338F8F352E691F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d691919-536d-4192-bb94-4b09044e4c56.roa
Signing time:             Wed 11 Feb 2026 00:20:06 +0000
ROA not before:           Wed 11 Feb 2026 00:20:06 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:110::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4a:03:ec:d9:a2:f4:f1:59:02:24:08:3a:33:8f:8f:35:2e:69:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 11 00:20:06 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=3055f7538e2f39305c4e0910540098f4c1a94fd9a3bd6d8dbf7ce2fc541e89dc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:8b:7b:77:b1:98:87:7d:2b:2f:53:4b:b8:
                    57:9c:87:89:21:42:bb:df:94:e6:3d:fb:b8:1f:70:
                    4a:a4:78:f7:00:b3:f7:ae:c3:7c:81:f9:1f:61:64:
                    a2:4a:00:6c:fa:12:69:3e:86:a3:0e:7b:3f:08:2b:
                    2e:36:b0:58:bd:62:79:34:ec:5b:5a:fb:bc:44:50:
                    04:65:28:ff:57:7d:b4:1f:fd:9c:a1:e1:2e:44:f7:
                    87:32:bd:f9:8d:8f:e5:2e:ba:68:5e:bd:2a:26:10:
                    d1:13:fd:1f:31:d9:23:03:a1:eb:44:4a:f4:a0:57:
                    94:71:9b:4a:d8:c9:27:26:68:5c:4e:86:73:d3:5a:
                    d4:40:e3:f5:d4:a0:cd:b1:33:a7:fd:7f:aa:ab:de:
                    42:55:59:ab:bd:0d:d3:d4:98:c4:87:48:90:33:64:
                    1e:79:ca:f7:06:cd:d2:0f:7b:55:f8:37:49:4c:de:
                    52:d7:0d:c9:c5:f4:14:30:e3:a4:62:26:a2:a1:85:
                    0c:6b:13:94:c1:a3:67:b7:ef:27:88:c8:fa:76:6b:
                    04:c1:cb:dd:a5:43:e0:62:43:2f:ee:b4:e6:34:3e:
                    37:65:1b:4d:a0:10:8c:ce:ed:09:c2:18:d3:2b:64:
                    90:5c:4f:b6:21:0b:b2:9a:b4:fa:f9:a3:0b:ad:aa:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AB:7F:76:46:43:09:96:05:3A:7C:CA:42:52:AD:1A:AC:A0:57:F1
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d691919-536d-4192-bb94-4b09044e4c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:110::/47

    Signature Algorithm: sha256WithRSAEncryption
         65:c1:61:f3:b5:c7:d4:d4:17:2e:20:7a:2e:7c:e7:30:b5:26:
         87:b9:08:a1:71:3e:4b:db:fc:4e:fc:6b:56:9e:d2:f2:63:6b:
         b3:c2:09:ec:8a:83:4a:41:c1:d5:4c:11:29:ae:9a:3c:f4:36:
         65:b7:bc:a5:4f:f2:1e:a2:61:d6:3c:eb:ee:4b:82:78:22:99:
         c9:c4:7e:95:26:3a:ad:9c:2f:20:d8:9c:86:05:40:18:58:58:
         69:fd:eb:b8:c3:80:7c:b2:91:84:71:ac:68:ca:b6:fd:7e:34:
         b7:7f:47:bc:f4:0a:3c:ff:1a:f4:ed:cb:ec:4d:f8:67:fe:3e:
         7c:a3:60:73:e2:17:1e:20:ed:14:e6:d2:4d:14:0a:64:d6:14:
         e1:95:fd:56:27:a4:35:9a:db:e1:62:69:54:7b:31:70:48:9b:
         7d:6f:da:51:d4:4c:ac:e1:33:35:42:9d:a2:53:bb:aa:3b:82:
         35:b7:3c:0d:12:31:06:f3:44:a0:fe:1b:1f:49:68:86:28:82:
         aa:da:03:6e:e9:fd:cd:b8:e7:b9:5d:84:1b:56:fc:f5:f7:f2:
         31:bc:2b:28:c3:31:02:d9:ff:d0:f9:27:ef:f9:4f:62:7c:9b:
         f7:c7:65:9f:41:3c:30:33:96:9c:76:de:30:b3:70:e3:a4:48:
         10:c3:95:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 13 01:49:36 2026 by rpki-client