This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa
File:                     01f936e1-60a2-4d7f-a949-786fa3430156.roa (raw, json)
Hash identifier:          asEgJqT06XcoovOu/FJvjoBjkNwrR4hHZZTc8J0JYJg=
Subject key identifier:   0C:55:5C:DC:C7:EA:63:BF:67:19:35:27:F1:23:EF:2B:BD:54:A2:08
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       10EEEF64B324C8E967BA6A29772F4CB9B704753E
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa
Signing time:             Wed 10 Dec 2025 00:50:08 +0000
ROA not before:           Wed 10 Dec 2025 00:50:08 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ee:ef:64:b3:24:c8:e9:67:ba:6a:29:77:2f:4c:b9:b7:04:75:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Dec 10 00:50:08 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=e0b2351099215c7a459fd48cb1c1da46b14fdf88ee99ef61d0905d8d879c7c41, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:96:bd:cf:80:25:9a:ba:32:54:a3:a7:b2:
                    a9:2c:c9:b3:39:cd:09:f4:cf:5b:5a:ab:2a:56:4d:
                    52:e2:85:8b:05:db:5d:b6:7d:a0:1e:81:df:c7:a9:
                    ce:7f:58:77:01:1c:66:45:9e:bc:fb:19:00:5f:b5:
                    a1:da:da:31:09:6e:84:5f:36:ae:c1:91:d8:8e:97:
                    cf:79:46:22:36:11:75:3c:d6:4b:83:45:c0:4b:39:
                    98:10:0d:5f:0e:1b:0a:75:82:cd:42:aa:f7:52:44:
                    eb:4d:fe:85:49:9e:c6:2b:3c:8a:22:d3:79:7d:5b:
                    c7:52:b8:4b:11:44:90:83:24:dd:6a:37:01:aa:54:
                    0a:c6:1c:31:e3:b4:00:e3:46:1f:7c:33:e2:ae:47:
                    e4:e9:7a:68:70:41:6a:62:40:4b:b9:9f:93:7f:a0:
                    80:7b:3e:bd:3f:23:8f:bc:11:e1:28:7a:76:e5:41:
                    ca:6d:d6:a3:64:6b:50:a0:56:16:cb:7d:6c:25:d5:
                    ab:b6:08:b1:37:ed:ad:be:fd:b6:1a:35:42:ba:ce:
                    ac:21:d6:25:3a:3a:1c:8b:00:4f:ae:7f:5b:e3:50:
                    6e:0e:0f:44:50:9a:89:b6:35:f8:88:e7:e6:de:d6:
                    7b:df:97:ee:fb:2c:42:b8:e2:12:70:ce:55:ca:6a:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:55:5C:DC:C7:EA:63:BF:67:19:35:27:F1:23:EF:2B:BD:54:A2:08
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:00:87:13:1d:94:5a:1f:58:98:f3:8f:a8:a7:55:e0:fb:99:
         ef:88:51:8a:4a:db:78:dc:49:3f:81:24:7f:00:35:2a:6a:33:
         40:89:a4:f3:62:00:c8:5d:e4:3f:c7:61:0f:23:9e:2b:31:d3:
         44:c0:65:f3:e2:25:a6:08:f2:8b:fc:ea:ad:67:bd:fd:f2:96:
         cf:fc:22:e3:02:6b:d2:cd:f7:09:a8:49:f8:b6:df:e1:8e:01:
         9b:4a:5b:0e:85:05:9d:ca:8c:60:40:cf:d2:e4:ef:3a:f4:6d:
         92:86:1c:26:a7:28:8e:8f:b1:35:a4:fa:d4:94:a9:ae:d8:2f:
         64:52:79:96:02:c4:91:34:57:50:b5:1a:79:f2:d4:5c:cc:a2:
         ff:2a:49:97:46:96:83:57:b1:1a:d3:db:33:9c:c1:27:ae:53:
         a5:04:4a:ae:da:c4:20:f6:11:e7:46:17:6c:9a:bc:3f:c2:ff:
         1d:24:f1:e9:21:75:40:e0:03:4e:89:64:61:d7:d8:bf:e5:33:
         88:63:3d:b2:35:c7:8f:99:49:db:1f:e5:7a:0c:e5:4b:b6:11:
         f9:b6:0f:1c:d6:96:35:b4:c6:63:a7:f1:41:30:59:82:6c:0c:
         86:04:d8:47:35:4c:14:95:3a:e2:98:f3:ca:13:ca:2b:a8:2c:
         df:4a:50:f8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEO7vZLMkyOlnumopdy9MubcEdT4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3
YTViNzRlNjk0NDljMWViMDQwHhcNMjUxMjEwMDA1MDA4WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMGIyMzUxMDk5MjE1YzdhNDU5ZmQ0OGNiMWMxZGE0NmIx
NGZkZjg4ZWU5OWVmNjFkMDkwNWQ4ZDg3OWM3YzQxMS0wKwYDVQQDEyQwMDk5YTdl
YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcy5a9z4AlmroyVKOnsqksybM5zQn0z1taqypWTVLihYsF
2122faAegd/Hqc5/WHcBHGZFnrz7GQBftaHa2jEJboRfNq7BkdiOl895RiI2EXU8
1kuDRcBLOZgQDV8OGwp1gs1CqvdSROtN/oVJnsYrPIoi03l9W8dSuEsRRJCDJN1q
NwGqVArGHDHjtADjRh98M+KuR+TpemhwQWpiQEu5n5N/oIB7Pr0/I4+8EeEoenbl
Qcpt1qNka1CgVhbLfWwl1au2CLE37a2+/bYaNUK6zqwh1iU6OhyLAE+uf1vjUG4O
D0RQmom2NfiI5+be1nvfl+77LEK44hJwzlXKahvhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDFVc3MfqY79nGTUn8SPvK71UoggwHwYDVR0jBBgwFoAUmcNUTAjJlFS4
eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05
YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2
M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3
ZTU1MmM2ZTM1LzAxZjkzNmUxLTYwYTItNGQ3Zi1hOTQ5LTc4NmZhMzQzMDE1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw
LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFgfwowDQYJKoZIhvcNAQELBQADggEBAGAAhxMdlFofWJjzj6inVeD7me+I
UYpK23jcST+BJH8ANSpqM0CJpPNiAMhd5D/HYQ8jnisx00TAZfPiJaYI8ov86q1n
vf3yls/8IuMCa9LN9wmoSfi23+GOAZtKWw6FBZ3KjGBAz9Lk7zr0bZKGHCanKI6P
sTWk+tSUqa7YL2RSeZYCxJE0V1C1Gnny1FzMov8qSZdGloNXsRrT2zOcwSeuU6UE
Sq7axCD2EedGF2yavD/C/x0k8ekhdUDgA06JZGHX2L/lM4hjPbI1x4+ZSdsf5XoM
5Uu2Efm2DxzWljW0xmOn8UEwWYJsDIYE2Ec1TBSVOuKY88oTyiuoLN9KUPg=
-----END CERTIFICATE-----
Generated at Thu Dec 11 17:51:38 2025 by rpki-client