This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/313b438f-67a0-4833-9e98-f8c4f6f3c2cd.roa
File:                     313b438f-67a0-4833-9e98-f8c4f6f3c2cd.roa (raw, json)
Hash identifier:          WY5xVkzENfkk2wDjdajl1uDxLIhcc2F2P5JsY3OHlbk=
Subject key identifier:   BA:08:EA:39:28:D5:F0:8C:74:2E:FA:FB:36:A8:60:21:DB:96:05:0F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       79F37DE7EB3C3C67D3C273E0A6FF999FCCD1B43E
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/313b438f-67a0-4833-9e98-f8c4f6f3c2cd.roa
Signing time:             Sat 15 Nov 2025 05:00:08 +0000
ROA not before:           Sat 15 Nov 2025 05:00:08 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f3:7d:e7:eb:3c:3c:67:d3:c2:73:e0:a6:ff:99:9f:cc:d1:b4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 15 05:00:08 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=4c7ec7bdbbcc56567c978ebc8c6bc42cb0facbc3a1d2b26eeb53ad96ccbe82b2, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:3e:a4:e3:80:90:0c:f0:e0:98:93:bd:af:
                    7b:90:83:5e:12:68:83:cc:d9:da:cb:6c:c9:42:83:
                    dd:13:53:95:fb:89:fa:95:27:a2:42:bd:db:11:d2:
                    41:dc:14:8b:b2:07:75:6e:6b:7b:9d:c1:36:f4:24:
                    dc:83:95:04:e2:09:ce:e4:6e:61:99:54:62:07:3f:
                    e4:3b:eb:4f:e8:eb:52:97:cf:7d:3e:90:f8:3d:a8:
                    aa:94:22:02:83:4d:11:03:72:cd:00:76:51:a7:91:
                    2d:fe:2e:57:5b:c1:86:25:b6:00:de:5c:eb:08:a5:
                    66:74:1f:62:cd:4e:e7:e7:7c:64:8b:e0:c2:49:8a:
                    b0:64:4e:64:ef:06:8f:3c:d0:a9:f8:2c:8a:78:da:
                    65:65:ea:b4:44:f4:37:30:24:5c:ca:4e:a7:67:df:
                    39:63:a6:db:c1:77:bf:0a:6d:81:9c:30:22:62:34:
                    b1:14:58:3d:da:87:37:54:80:08:d6:f9:d9:03:9e:
                    98:0c:99:dc:21:19:84:04:d5:1d:39:c0:c2:2e:ee:
                    5f:d0:7a:bf:40:ad:dd:34:e7:5c:80:f5:f2:a5:12:
                    c9:82:5a:b7:f7:33:16:19:07:08:2b:b5:8f:9b:c0:
                    47:99:57:25:57:72:3b:ac:11:f0:a8:36:b4:fb:c2:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:08:EA:39:28:D5:F0:8C:74:2E:FA:FB:36:A8:60:21:DB:96:05:0F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/313b438f-67a0-4833-9e98-f8c4f6f3c2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:55:88:2b:06:35:be:75:6d:fd:8e:d1:77:4e:f8:8f:f0:35:
         65:8f:8c:f5:26:8c:71:71:e4:ce:00:16:be:34:ae:7e:ed:3f:
         0c:8c:9a:1f:19:92:6c:f0:f0:35:5f:13:70:9a:4e:67:70:50:
         78:3c:36:b2:fe:88:e5:94:32:de:1e:7e:c8:63:a9:58:5b:fa:
         7d:8e:0c:f5:b0:e8:8e:d8:22:72:17:02:00:88:44:3a:a3:92:
         8d:3e:8a:b8:1d:80:ae:3d:86:99:c0:03:62:d7:0c:64:1b:2f:
         45:d5:ae:c6:7e:68:1a:8c:03:64:86:f8:50:a3:a1:5f:3b:48:
         f6:ec:64:af:ff:0f:4c:3e:04:2e:35:82:70:75:35:d8:3c:e5:
         dc:a6:29:f9:29:de:67:06:f9:f6:5a:af:4c:fd:c6:05:30:39:
         4b:a9:3e:ed:3b:dc:2a:78:b7:7e:4e:62:d4:44:89:bf:9d:d7:
         66:5a:52:1a:eb:00:bc:36:2e:8c:1b:de:72:0a:14:5c:c1:35:
         bc:25:4e:8c:cd:81:14:74:e9:5f:5e:80:69:ca:6c:16:71:69:
         67:db:1d:dd:1f:ac:42:e8:4b:53:54:23:ea:d4:14:53:a5:37:
         65:a7:cd:b8:a4:f4:e0:ed:50:4e:28:2b:cf:ed:69:4a:53:34:
         4f:6a:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 17:45:55 2025 by rpki-client