This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f01fa6-15d2-49a7-876d-51a9c30772e8.roa
File:                     26f01fa6-15d2-49a7-876d-51a9c30772e8.roa (raw, json)
Hash identifier:          w6pCSMXTit9F3D+wJfRgr8zHOtOwRck3BHQ6dNHmQHI=
Subject key identifier:   12:26:77:10:3B:DE:A3:AF:2A:EC:32:0D:FF:80:23:B3:7E:30:66:17
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       103E4F0FFE2C9AE58E4D6D19C50A25708272E6B4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f01fa6-15d2-49a7-876d-51a9c30772e8.roa
Signing time:             Sat 29 Nov 2025 01:21:02 +0000
ROA not before:           Sat 29 Nov 2025 01:21:02 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3e:4f:0f:fe:2c:9a:e5:8e:4d:6d:19:c5:0a:25:70:82:72:e6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 01:21:02 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=c5d2281d9c06254cc484c367e7becc62e15673c613ce0e52def7e16942a1b879, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:99:2c:a4:ed:82:9c:f1:af:44:7d:d9:81:f9:
                    dd:4f:bb:f0:68:dd:54:39:e4:47:5d:82:7a:ef:6e:
                    e3:a3:a6:06:3a:61:df:93:42:8e:4a:6b:7c:80:36:
                    a6:df:97:5b:c4:b4:ad:0c:8e:21:7d:85:e1:4b:c0:
                    32:01:34:3d:1c:1c:b8:83:f8:6e:74:a5:56:9f:b0:
                    57:a1:e5:1f:dc:2c:07:0d:d6:db:a3:df:36:67:3c:
                    43:c1:d0:51:64:f2:f7:05:a3:ca:53:30:fa:ee:06:
                    b1:3b:19:8a:37:7d:35:03:69:5d:d0:eb:9f:86:0a:
                    f7:09:06:4b:1a:82:40:fe:ca:45:0e:27:6f:cf:62:
                    ff:f6:74:b2:50:c3:c8:f9:0c:f6:d1:19:58:00:6d:
                    f3:f3:15:17:dd:8c:5a:80:1f:ba:83:d5:26:2e:be:
                    54:6b:60:6c:37:ae:b8:e7:04:ec:9f:d4:fa:4b:b4:
                    13:a0:ec:2b:b8:d5:40:54:de:e5:02:c8:73:c8:f6:
                    97:61:12:6b:00:57:24:c0:02:cc:93:4f:c6:ed:04:
                    fb:ce:34:ac:35:df:bc:b7:dc:78:bf:56:4c:dd:fe:
                    69:bd:81:67:c6:d2:e1:53:71:13:bb:e6:ff:4c:ad:
                    1a:e2:10:a3:29:62:47:f4:63:d1:2a:86:20:18:3c:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:77:10:3B:DE:A3:AF:2A:EC:32:0D:FF:80:23:B3:7E:30:66:17
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f01fa6-15d2-49a7-876d-51a9c30772e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:44:aa:84:67:56:37:e3:9c:08:a4:13:c9:7a:cb:79:a9:
         cc:9b:ba:90:c4:8c:c7:2e:c4:de:a0:c3:ca:68:f2:b5:79:db:
         ca:8c:f5:7a:7d:d6:a4:06:cd:6c:7d:34:4e:0d:7a:60:99:7d:
         da:e3:62:17:7d:7f:d3:3f:4d:90:41:9c:75:09:26:c1:f8:71:
         48:29:5f:95:19:89:76:50:7f:71:c4:e9:d7:24:57:86:0d:4a:
         d7:0c:d9:04:5e:ef:9a:2f:7b:74:e3:31:96:ed:91:9a:67:ff:
         a8:01:16:e0:b2:3b:6d:6e:2e:c6:11:bd:dc:8d:2b:f4:b2:66:
         eb:63:29:94:e7:df:b0:2c:6e:08:18:d1:c7:c1:b6:76:23:58:
         74:8b:16:b4:6b:5e:53:94:9b:52:87:f2:a2:38:4e:6e:ac:11:
         8f:b1:a6:94:26:29:df:0c:6a:6d:05:5e:18:57:bf:8e:11:f9:
         84:2a:9b:68:49:99:23:31:da:08:6a:96:90:d7:d4:c7:ee:06:
         06:08:65:99:de:46:d4:44:81:29:15:a7:5b:21:b1:3f:4c:31:
         20:a6:31:43:7c:8b:cc:83:e5:34:86:aa:49:5d:d6:b4:1b:1c:
         eb:26:b9:71:0b:3e:87:9a:55:c8:36:6b:fe:8a:cb:5b:a0:b7:
         76:3f:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:36 2025 by rpki-client