This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa
File:                     da111c82-234c-46a2-a1ef-e848103120cb.roa (raw, json)
Hash identifier:          FEb5oxQt1eJIofUOW1Hanl7FiREBUwb2YTcyzBGRjXU=
Subject key identifier:   FB:CE:5D:CB:36:E8:EC:54:72:50:D4:40:24:37:05:92:36:1A:4B:91
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       50802C2455360FB77B92BAB3E762252E5D90A368
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa
Signing time:             Wed 11 Feb 2026 00:20:06 +0000
ROA not before:           Wed 11 Feb 2026 00:20:06 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:110::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:80:2c:24:55:36:0f:b7:7b:92:ba:b3:e7:62:25:2e:5d:90:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 11 00:20:06 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=85b0f4cbf3bf9fc359d8ed948547312cb96e83cb6bb24b8944ad4fec26d06ebc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:86:46:75:25:8b:4c:21:d8:b9:b1:02:eb:
                    01:c2:8a:b2:45:4b:c9:e1:7f:e2:40:bc:96:48:c4:
                    ad:2f:b7:c2:c5:e4:bf:e9:eb:2c:dc:d4:95:98:ca:
                    08:2a:0b:d5:14:b4:00:5b:55:4a:cf:be:ce:6b:79:
                    36:c8:57:c7:e4:3e:bc:72:bf:98:3e:a2:c1:b6:3d:
                    26:21:ae:e6:3d:49:f7:ed:27:23:60:50:98:f9:5f:
                    00:97:68:70:b7:40:b6:db:e4:da:fc:2a:e7:5e:c6:
                    04:04:f4:84:cc:8b:ff:9f:a0:51:88:7c:a5:56:c8:
                    20:66:82:c4:6e:e8:5e:d5:03:45:2f:e8:f7:62:1a:
                    67:09:23:3a:93:19:40:d2:dd:0a:db:23:08:51:2a:
                    95:e5:80:8f:db:cc:d7:c7:2e:e7:c9:da:67:76:6f:
                    ea:38:9e:39:38:58:ee:af:d9:b3:12:98:73:be:56:
                    ea:69:f5:00:fe:23:8b:31:9c:40:4e:15:ca:3e:37:
                    4c:a6:41:5f:a5:66:b6:0a:70:cd:d6:1a:83:f6:85:
                    ec:5a:a6:ec:2a:0b:2f:e0:64:f5:62:6a:19:07:05:
                    1f:eb:b8:7c:a3:98:6b:88:2c:04:26:42:26:c5:88:
                    b3:18:d9:cc:40:02:15:f7:e0:f5:9c:a4:85:58:e5:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CE:5D:CB:36:E8:EC:54:72:50:D4:40:24:37:05:92:36:1A:4B:91
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:110::/47

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:53:a4:df:38:ce:53:41:1c:10:a1:0d:11:b8:94:51:4f:
         cb:1f:33:c5:13:fc:e5:a5:b3:55:8a:0c:06:01:ff:ee:1c:20:
         8c:a1:ff:e2:43:4a:a2:29:84:88:ef:c0:34:1e:f3:ed:1e:b4:
         ff:75:05:e5:91:a4:90:71:60:91:a7:3d:33:31:e5:8b:cb:ab:
         6d:38:5f:8a:90:fc:6a:6e:d3:6e:f0:bd:16:5d:3b:d0:00:9e:
         c3:90:e2:a8:fe:8d:38:6f:b8:88:2d:13:a2:8b:2c:76:09:6f:
         c3:73:91:35:0c:e8:25:b9:a0:32:81:07:d4:06:a3:90:0e:ea:
         fe:36:b1:96:75:9b:47:3b:11:14:19:77:67:7c:f2:ac:8d:66:
         37:29:8a:30:a1:2c:61:c3:49:c0:a0:cd:56:89:9a:48:c5:d9:
         5c:45:8d:77:ff:39:9f:f7:81:38:09:82:7a:ba:08:02:b2:90:
         23:55:0c:ca:c1:25:bd:f5:ac:33:3e:4e:25:74:80:db:9b:c1:
         e1:8f:c1:4e:42:0c:55:65:df:ce:39:a7:5d:b8:d3:b5:4b:50:
         de:ab:ee:dc:bd:04:bb:92:e8:b4:57:b8:7a:59:ba:00:8c:b3:
         02:36:b8:db:00:d0:8d:f0:e1:a3:fa:86:48:85:7b:ae:10:54:
         cd:84:16:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 13 01:47:39 2026 by rpki-client