This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6cb9bfa-a8c2-4640-a670-10aea4ba8638.roa
File:                     f6cb9bfa-a8c2-4640-a670-10aea4ba8638.roa (raw, json)
Hash identifier:          sp0TaAE+E4ICpBfY+qH42qwzUDE/4ykg55SJxkGA/wU=
Subject key identifier:   32:73:B1:F2:83:48:5D:80:14:0D:EA:04:EC:5A:BA:9B:8E:7D:6E:8C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5A1DC3FC767C692949AD6792ED670F9958E93366
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6cb9bfa-a8c2-4640-a670-10aea4ba8638.roa
Signing time:             Mon 12 Jan 2026 18:37:04 +0000
ROA not before:           Mon 12 Jan 2026 18:37:04 +0000
ROA not after:            Sun 12 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.5.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1d:c3:fc:76:7c:69:29:49:ad:67:92:ed:67:0f:99:58:e9:33:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 12 18:37:04 2026 GMT
            Not After : Apr 12 23:59:59 2026 GMT
        Subject: serialNumber=3221231079c9de85eca3d4e82edf25b1f5ab55b99e2421521e21d0393d9dd721, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:7a:69:48:b7:05:cb:ea:c3:ca:ff:9f:88:
                    c6:60:c4:ae:c2:d1:d5:b6:51:96:8c:d4:0d:52:1f:
                    83:e4:9c:39:0b:f7:55:25:2e:3e:8a:c7:fa:f0:fb:
                    70:98:e7:3c:b0:30:23:d5:d0:e8:5c:a8:51:aa:da:
                    49:58:0a:14:26:18:5f:32:09:53:19:9c:73:4e:84:
                    7d:1b:fa:26:70:53:51:77:4a:c4:77:71:d0:f6:68:
                    dc:d2:01:93:fb:18:2b:a5:82:2c:6c:97:56:d2:6d:
                    55:0f:f4:b6:a6:cd:40:24:cd:68:70:db:04:df:b9:
                    3b:39:3f:b7:0f:52:73:0e:b4:0a:f6:5e:dc:25:be:
                    ce:4f:e6:8e:48:a8:16:92:51:43:64:7d:42:09:a4:
                    3c:6f:9f:f0:b6:f2:72:3f:71:6e:0e:46:92:46:e3:
                    fb:3d:34:15:53:6a:82:9f:43:a6:79:c3:11:8d:ff:
                    2d:59:2a:44:42:92:7d:70:43:56:e3:8c:19:94:0c:
                    4f:5a:b3:5d:c1:29:9f:53:da:ae:2c:35:07:83:69:
                    bc:e5:95:30:22:80:2f:b8:6a:9e:4f:f8:d0:38:65:
                    05:7d:a2:84:84:7d:4a:a6:7e:8a:48:89:e4:80:b6:
                    80:a3:6e:c6:ee:55:30:e6:f1:50:2b:d9:41:ef:65:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:B1:F2:83:48:5D:80:14:0D:EA:04:EC:5A:BA:9B:8E:7D:6E:8C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6cb9bfa-a8c2-4640-a670-10aea4ba8638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.5.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:14:7b:7a:ae:1f:fa:41:fb:4d:35:ef:3e:9c:d5:d2:7e:dd:
         a1:3f:f9:ea:19:f2:b1:51:e7:77:28:d8:b3:c4:98:c8:92:ee:
         2f:fd:e4:69:d7:7b:f4:c8:83:29:44:5a:d3:18:da:d2:0b:94:
         17:d0:28:6d:a6:f1:ca:a3:d6:eb:06:da:79:2a:53:7d:98:ad:
         08:3e:17:2a:48:54:61:fb:42:92:84:e5:b1:ab:90:6a:64:19:
         50:00:27:34:88:b8:03:55:17:30:8b:88:a6:7b:0c:6e:51:fa:
         e1:bc:c8:8c:fa:db:2b:3d:95:ee:49:4f:31:b8:4b:80:94:10:
         d9:62:ac:17:5a:52:92:56:4e:30:1a:94:40:c4:38:66:ac:cb:
         05:77:b7:36:18:ee:f7:b5:43:e4:63:d4:16:1a:fe:6a:bf:ff:
         cb:55:69:f8:0d:f3:eb:88:fe:bb:7a:19:48:1f:ed:b1:a8:38:
         60:28:1b:1f:5b:17:ae:bc:49:b8:7f:eb:72:32:20:71:eb:93:
         83:64:cf:be:d7:17:fd:a3:8b:e0:ad:30:2d:80:87:37:30:c6:
         3f:b8:94:0c:3a:10:a1:58:0b:66:f6:1d:c0:40:27:0d:dd:c0:
         46:df:bf:0b:27:d6:f3:02:bf:f5:0c:64:4a:5e:fa:a5:a1:07:
         68:de:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:48:39 2026 by rpki-client