This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa
File:                     9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa (raw, json)
Hash identifier:          QCRHmmZ+JNppzXKx3/0f12T7aT+4PYQt3eCZT+NzH9c=
Subject key identifier:   35:F8:91:71:37:50:A4:F7:D1:13:13:D6:02:8A:43:B4:3E:15:32:21
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       13387F03A8DDF4465EC03A9CC00FDC4815545F00
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa
Signing time:             Wed 10 Dec 2025 00:50:07 +0000
ROA not before:           Wed 10 Dec 2025 00:50:07 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:38:7f:03:a8:dd:f4:46:5e:c0:3a:9c:c0:0f:dc:48:15:54:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Dec 10 00:50:07 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=cf1780e0a24ef7b9d57a8798ddb3af9a8efeaa7167ec7bb2a8b77625237c92fc, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:68:33:30:ef:5e:e3:96:ff:c9:7f:62:72:e5:
                    0b:e1:8c:1d:aa:c2:e9:ce:30:93:c4:98:48:cf:d5:
                    80:62:d4:d4:9d:7d:e1:82:84:2f:81:f4:20:ff:c9:
                    75:2a:57:de:8b:4f:af:03:c9:31:77:e9:de:d4:3b:
                    88:23:e7:91:76:4d:45:c1:5a:eb:3b:d8:23:32:3a:
                    3a:87:71:89:2a:41:54:4f:8e:02:c4:d2:41:e6:9c:
                    e4:b8:7f:ea:03:e9:04:38:27:82:25:52:47:11:09:
                    b8:bc:40:ff:98:ed:25:7c:af:7b:0f:4f:4e:63:fa:
                    e3:23:2b:26:e6:4d:c2:31:05:bf:fa:a6:2e:b3:8c:
                    3c:84:9d:f4:dc:e8:b4:ef:d7:48:7b:ae:7d:0b:cb:
                    ad:96:21:0c:68:b7:0d:5f:af:a4:f2:17:e2:11:5b:
                    17:d3:72:2c:11:95:a7:4e:b0:6a:d5:a6:0e:6d:f7:
                    f3:ef:84:0e:7c:44:dd:2e:80:52:b5:93:b2:1d:ac:
                    bf:15:c9:4f:54:00:29:f0:7d:34:5b:70:7c:24:c1:
                    5d:3f:21:66:3a:ab:e3:df:16:7f:99:95:b6:2d:20:
                    74:6d:dd:6e:33:93:d9:95:8e:03:ee:06:f2:25:af:
                    31:c2:a1:f7:27:f1:7d:45:4b:77:c8:44:41:60:49:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F8:91:71:37:50:A4:F7:D1:13:13:D6:02:8A:43:B4:3E:15:32:21
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:eb:44:c9:84:3a:b5:5b:14:c9:9b:7c:59:bf:0d:78:93:76:
         a0:6f:92:05:f7:2b:8d:6c:21:f6:2d:3f:ae:de:67:cd:47:28:
         4a:e8:fb:83:da:27:07:70:51:df:25:6c:7a:b1:5e:97:79:2a:
         1e:f5:50:8f:ca:1c:d7:e2:d0:80:30:88:2d:7c:4d:ae:5d:37:
         cd:78:8f:98:33:13:80:87:ac:c1:dc:d5:6a:b0:ed:32:18:c3:
         d3:15:a3:86:e1:0a:05:93:58:e8:9c:ca:35:53:ae:a6:c9:71:
         c8:e6:f6:82:f7:38:94:a3:26:38:0e:e5:99:1a:09:bc:9d:92:
         79:aa:de:d9:42:43:2a:2d:d2:90:a8:8d:8d:f0:d6:66:33:68:
         5b:ff:4a:3a:2d:73:99:7a:ed:c7:d9:3d:37:14:6c:4e:58:21:
         2f:d4:49:8b:67:d0:3f:63:a8:01:4b:1a:77:68:82:85:10:1a:
         fd:2e:fb:f7:e4:43:4e:97:c4:93:0a:d6:4f:c8:81:de:0b:75:
         b3:5e:b4:8a:f1:e4:83:df:40:50:51:7d:73:4c:1c:3b:8e:ec:
         c3:b1:ce:24:a5:2e:2a:79:13:31:69:f0:7e:8c:b5:51:29:c9:
         69:0f:c5:d9:94:44:8a:d3:bb:ac:0f:f4:53:1e:2a:5b:02:63:
         dc:50:81:e9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEzh/A6jd9EZewDqcwA/cSBVUXwAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3
YTViNzRlNjk0NDljMWViMDQwHhcNMjUxMjEwMDA1MDA3WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZjE3ODBlMGEyNGVmN2I5ZDU3YTg3OThkZGIzYWY5YThl
ZmVhYTcxNjdlYzdiYjJhOGI3NzYyNTIzN2M5MmZjMS0wKwYDVQQDEyQwMDk5YTdl
YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCJaDMw717jlv/Jf2Jy5QvhjB2qwunOMJPEmEjP1YBi1NSd
feGChC+B9CD/yXUqV96LT68DyTF36d7UO4gj55F2TUXBWus72CMyOjqHcYkqQVRP
jgLE0kHmnOS4f+oD6QQ4J4IlUkcRCbi8QP+Y7SV8r3sPT05j+uMjKybmTcIxBb/6
pi6zjDyEnfTc6LTv10h7rn0Ly62WIQxotw1fr6TyF+IRWxfTciwRladOsGrVpg5t
9/PvhA58RN0ugFK1k7IdrL8VyU9UACnwfTRbcHwkwV0/IWY6q+PfFn+ZlbYtIHRt
3W4zk9mVjgPuBvIlrzHCofcn8X1FS3fIREFgSV2vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNfiRcTdQpPfRExPWAopDtD4VMiEwHwYDVR0jBBgwFoAUmcNUTAjJlFS4
eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05
YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2
M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3
ZTU1MmM2ZTM1LzlhNmFjZTU0LWYyMzEtNGUyNS04YTM2LWM0NjFkNDlkZmE2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw
LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJgfwQwDQYJKoZIhvcNAQELBQADggEBAAzrRMmEOrVbFMmbfFm/DXiTdqBv
kgX3K41sIfYtP67eZ81HKEro+4PaJwdwUd8lbHqxXpd5Kh71UI/KHNfi0IAwiC18
Ta5dN814j5gzE4CHrMHc1Wqw7TIYw9MVo4bhCgWTWOicyjVTrqbJccjm9oL3OJSj
JjgO5ZkaCbydknmq3tlCQyot0pCojY3w1mYzaFv/Sjotc5l67cfZPTcUbE5YIS/U
SYtn0D9jqAFLGndogoUQGv0u+/fkQ06XxJMK1k/Igd4LdbNetIrx5IPfQFBRfXNM
HDuO7MOxziSlLip5EzFp8H6MtVEpyWkPxdmURIrTu6wP9FMeKlsCY9xQgek=
-----END CERTIFICATE-----
Generated at Thu Dec 11 17:50:39 2025 by rpki-client