This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/091ef399-26b4-490b-9d67-47964db4f9d7.roa
File:                     091ef399-26b4-490b-9d67-47964db4f9d7.roa (raw, json)
Hash identifier:          iAfy3stQfMo9Th0C798FV2hmvLpLbZi2qvOiNhg+Xgs=
Subject key identifier:   8F:51:A6:7A:F4:1C:B3:05:9F:F1:37:0D:0A:2E:EE:5B:85:1D:D4:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       421FBE9189FA59DEE7FCF130CE1BFC0BAFE381C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/091ef399-26b4-490b-9d67-47964db4f9d7.roa
Signing time:             Thu 22 Jan 2026 04:37:34 +0000
ROA not before:           Thu 22 Jan 2026 04:37:34 +0000
ROA not after:            Wed 22 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f32:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1f:be:91:89:fa:59:de:e7:fc:f1:30:ce:1b:fc:0b:af:e3:81:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 22 04:37:34 2026 GMT
            Not After : Apr 22 23:59:59 2026 GMT
        Subject: serialNumber=2d20d0f1660c118f5acd39e2dcae7c5f38628f2af0d0098ac9ba2b89f5ef729b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9a:10:75:31:5d:c1:a9:6b:14:f1:35:6a:7f:
                    67:e2:87:dc:6a:0c:ea:5a:44:d1:67:9f:df:4b:83:
                    14:c8:02:ee:a0:b5:a2:3d:61:c0:68:88:81:e5:58:
                    b5:cc:0f:7f:0a:bd:72:29:71:f1:0e:39:64:0a:e0:
                    27:52:0d:62:38:1b:8b:d6:80:bb:58:3b:8a:85:28:
                    bd:e5:19:86:7c:f0:2d:2b:31:04:79:aa:1c:fa:94:
                    c8:f6:7d:e1:99:4b:5b:fe:7b:12:8e:df:ad:fd:7d:
                    e9:15:8d:44:9c:55:67:76:79:98:2c:9b:1a:ed:48:
                    11:c3:c1:ee:8c:a5:a1:fc:36:bb:80:ea:35:4c:2e:
                    73:77:b5:b7:82:62:93:9b:7b:19:91:17:c2:38:f3:
                    ff:a1:c9:9b:a7:ba:de:e5:3d:78:17:b4:4b:89:e4:
                    27:9e:55:55:06:f6:a1:d4:15:85:2a:a4:a2:0f:a0:
                    78:fd:ea:9d:db:a3:49:0b:d2:21:3c:61:04:f0:03:
                    d7:b0:88:c9:5e:b9:f0:80:1a:c7:fd:7c:ff:d7:05:
                    a4:41:ba:07:33:55:5b:d0:dc:50:03:1a:8f:d5:d8:
                    80:ef:13:70:fb:dc:61:14:57:01:01:56:fa:6b:eb:
                    3e:0e:03:7c:65:3b:73:5c:f4:22:86:87:94:82:a8:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:51:A6:7A:F4:1C:B3:05:9F:F1:37:0D:0A:2E:EE:5B:85:1D:D4:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/091ef399-26b4-490b-9d67-47964db4f9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f32:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:c6:4a:c3:4a:12:ad:7a:69:a5:4e:b2:34:00:cc:ea:ee:e2:
         f8:57:d2:41:51:68:86:9f:f2:ce:0b:a3:7e:f5:93:95:4d:4c:
         1f:48:13:74:c2:36:28:8c:bf:83:83:bd:bc:7e:08:ce:b7:3f:
         76:9c:96:9e:b4:59:5a:f0:eb:4e:bb:08:7a:c5:57:8d:69:f3:
         28:42:20:db:e6:76:d1:f5:36:53:00:22:f0:e2:7a:cb:c5:73:
         26:bd:05:33:eb:23:c3:c6:a0:37:b7:f1:2d:21:f6:9a:d6:11:
         23:c0:98:23:ef:d8:e1:f6:0e:6f:cd:ee:49:27:7c:95:74:9b:
         92:ae:ea:d2:6d:47:aa:79:49:96:3f:fd:98:68:53:c2:6c:b6:
         c9:97:21:02:1b:3c:a6:6b:82:91:e1:91:44:1a:83:16:20:21:
         12:29:c2:ae:d4:38:e2:fa:f9:24:ed:c3:61:70:16:13:a0:8c:
         e0:5a:ed:b1:2c:1f:5a:30:c9:b3:29:fb:48:24:ff:5e:55:96:
         b9:ad:69:0a:b6:2a:b9:af:b7:91:3d:dd:2d:0c:6d:4b:e2:b6:
         89:73:d0:b8:2e:5c:d1:c3:f4:d0:38:3f:a2:32:f4:23:01:d1:
         30:e2:7b:13:ea:61:ba:87:1f:bc:1b:1e:fd:dc:76:4b:92:4f:
         5e:3f:a3:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:15:20 2026 by rpki-client