This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa
File:                     5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa (raw, json)
Hash identifier:          zRmulXhlhlXGQ03+0kJx8kA1/ZCsyJXtvduQ7zUeMh8=
Subject key identifier:   00:85:47:98:32:0D:5A:A1:90:2A:1C:40:7E:D4:13:B4:8D:97:F4:0A
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       66A3A5396C2B6588BCBF5D11737C60D8624A4BA5
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa
Signing time:             Sat 08 Nov 2025 00:10:05 +0000
ROA not before:           Sat 08 Nov 2025 00:10:05 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a3:a5:39:6c:2b:65:88:bc:bf:5d:11:73:7c:60:d8:62:4a:4b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov  8 00:10:05 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=de0ffce6f3580cf2d603047e44151a5d6aa5a88915f6efbe41d719cd506b3fc4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:6e:a3:b4:e7:44:05:b3:86:fb:37:07:6a:
                    0e:c1:cb:28:3f:ed:7f:29:46:a0:9d:45:78:29:d0:
                    df:3c:2d:3f:3a:87:30:7e:ba:3a:cc:3c:31:3b:1d:
                    2b:de:11:6e:9a:64:6e:0e:28:00:00:3f:e1:31:44:
                    a3:82:4a:a5:51:48:f2:92:5d:de:75:41:ee:ab:fc:
                    47:34:0c:6a:8b:5c:8f:39:d3:6b:cb:cd:56:76:38:
                    20:5c:c6:d0:9a:a5:43:6f:8d:47:21:05:3e:bd:1e:
                    f3:e0:41:7f:ce:60:68:dc:26:1d:25:96:c4:1d:91:
                    80:b7:2c:26:dd:0d:98:60:8b:f3:de:91:05:dc:97:
                    f2:46:f6:71:a3:3e:c2:e8:10:56:6e:8f:e8:ee:a3:
                    42:51:50:e3:8b:d6:59:99:4e:75:9d:c9:c1:8c:56:
                    ea:03:a3:d2:0e:f8:c5:09:85:f3:d9:59:b0:7c:7b:
                    57:e6:12:60:e9:ee:38:54:c1:90:76:e1:b6:24:8e:
                    4d:b5:3f:ab:0e:c5:ef:2f:74:ba:c7:27:a3:fd:b0:
                    aa:1f:24:60:dd:62:c2:b9:6a:6a:f4:ed:68:d5:fe:
                    4e:2f:d9:51:54:37:b5:fc:e3:ba:9f:aa:f8:ee:d1:
                    c6:2e:27:bf:7c:27:3a:d3:f3:6f:4c:cf:f6:0f:31:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:85:47:98:32:0D:5A:A1:90:2A:1C:40:7E:D4:13:B4:8D:97:F4:0A
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:61:b9:6d:4b:d8:8b:cf:8a:b0:98:07:83:8a:f3:3e:a9:59:
         62:5f:35:25:61:1d:b9:0a:eb:af:24:d1:df:56:97:d3:df:bd:
         ad:b8:22:f3:06:cf:81:ad:8c:f8:14:35:4c:2b:61:69:5b:a2:
         08:48:d2:1b:b2:ce:ed:04:42:f0:20:18:da:a8:57:8c:e9:8d:
         9e:e3:92:75:58:ee:91:34:90:68:3a:cf:f6:20:ee:f3:32:73:
         1d:a7:00:6f:0c:95:15:81:f5:4a:4a:9d:86:7f:25:73:03:4a:
         a9:cc:34:c9:71:3a:a6:b2:9a:b8:d8:69:27:be:05:77:1b:21:
         f2:8a:c1:44:dc:30:ad:ff:4f:e9:e8:88:a5:ca:e9:72:aa:c4:
         21:cf:76:d1:ba:b0:6e:c4:01:2b:08:11:c0:b5:3a:bd:8f:a7:
         e1:c3:18:07:50:6c:70:4a:0c:b8:83:86:29:9e:4f:5c:c6:8d:
         5a:cf:93:b8:d5:fb:c4:66:12:63:6e:d3:72:6f:6a:97:8c:4c:
         cf:fa:ba:a5:5f:c0:d7:99:4b:3c:60:93:b5:8c:94:c7:74:2e:
         0b:5f:9d:ad:c1:a4:91:93:80:9b:2d:4a:c5:d8:71:78:9e:3d:
         96:e2:28:79:b0:69:91:26:4d:81:c1:83:c6:4d:8f:21:fc:71:
         99:be:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 19:39:23 2025 by rpki-client