This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa
File:                     07653354-62e0-4912-98f0-2c22354ec38a.roa (raw, json)
Hash identifier:          TV0rNoSDyb87OGDldm71U+ese686OlimIaAltt7zRJg=
Subject key identifier:   03:48:AC:C1:D9:13:60:8D:07:B6:3B:CC:BF:76:50:44:56:D6:32:5E
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       220CA8EC5358661A9E4DCC2EC20F77A96A67D4AD
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa
Signing time:             Wed 10 Dec 2025 00:50:28 +0000
ROA not before:           Wed 10 Dec 2025 00:50:28 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0c:a8:ec:53:58:66:1a:9e:4d:cc:2e:c2:0f:77:a9:6a:67:d4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Dec 10 00:50:28 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=37f082b58ac9bb15f300b3232b9fae505b4c8ac6e74d8eb55bf6383958464d85, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:dc:44:60:fe:33:15:13:c6:08:60:40:2c:
                    a0:1b:ef:7d:c3:26:87:b1:43:5b:29:a3:40:22:2e:
                    b1:1c:d3:2c:97:b7:81:93:db:58:40:9b:bc:db:06:
                    d2:8f:f6:9b:23:aa:fe:6d:ec:7a:aa:c3:b2:c3:3f:
                    aa:73:6b:ec:8a:87:64:9e:e2:1e:18:43:08:2d:49:
                    f9:bf:0a:0c:1f:ab:89:d7:2f:81:4e:44:6b:d4:d4:
                    5b:6b:41:85:e6:4f:dc:9e:0e:b9:5a:ab:6d:ea:3e:
                    e3:73:c1:b6:52:f2:14:dc:19:dd:5c:e6:e3:06:44:
                    47:2a:36:19:dd:d2:b8:d3:f7:ef:f4:df:71:62:24:
                    fc:14:d4:14:f7:9a:07:5b:01:31:8b:fb:15:d5:db:
                    09:38:69:c8:60:df:85:64:38:d1:00:f5:e5:d9:99:
                    c4:a2:d9:7a:78:89:a4:5e:26:18:ea:fc:12:23:9c:
                    e2:1b:88:93:2b:44:bb:5b:72:4d:d8:33:7b:20:a2:
                    3d:e4:eb:43:7d:8a:4d:e6:04:aa:a7:04:41:5b:1e:
                    f6:a9:ec:23:49:3e:82:44:f3:1b:32:9e:27:18:e1:
                    d8:f9:1d:7d:5b:bf:0a:8a:c8:83:d7:4b:15:be:fc:
                    5d:b5:38:cb:7b:37:33:3e:c9:84:9c:73:c2:c2:b0:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:48:AC:C1:D9:13:60:8D:07:B6:3B:CC:BF:76:50:44:56:D6:32:5E
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:b8:9d:45:00:a7:54:e0:3f:35:94:64:24:e4:d7:34:e4:
         95:91:5f:06:61:58:fc:aa:ca:8c:0f:44:2a:05:4e:fc:1a:b9:
         9f:c7:9b:16:56:8a:81:66:36:90:16:89:7c:c6:60:db:50:dd:
         11:f3:9c:f6:ce:2e:a4:29:d8:2c:3b:37:ae:de:95:c4:23:f7:
         19:47:2f:06:11:96:06:54:86:d7:d8:51:57:e7:18:53:0f:f9:
         fe:56:ba:d2:d2:0e:f4:b2:5c:4a:44:0b:19:0f:e6:ce:00:37:
         05:10:b0:92:03:71:e3:19:50:d3:ef:d2:c0:c1:30:bc:c6:ca:
         0d:2c:b9:e2:02:15:92:6b:7e:c5:cb:80:23:ab:e9:c5:16:9d:
         63:4c:9a:ed:35:d4:18:55:96:36:dc:87:c5:43:a9:a5:2f:28:
         58:27:c9:f5:06:35:8e:86:4f:ef:60:a2:73:f8:8d:15:26:18:
         92:90:28:b1:b8:d2:12:d6:19:2d:34:1a:02:8c:e6:cd:a4:ea:
         05:a9:90:60:b8:6c:c0:38:88:e4:89:99:55:87:01:86:ee:5f:
         4c:9f:2d:94:a3:94:0b:b4:74:94:20:24:c1:2b:d3:c1:e7:50:
         a5:b5:ce:ae:0f:e4:30:64:3a:c9:53:bd:2c:d6:c4:61:b9:91:
         7d:45:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 17:50:39 2025 by rpki-client