This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/60632273-f232-4b3a-8142-9800e188da0c.roa
File:                     60632273-f232-4b3a-8142-9800e188da0c.roa (raw, json)
Hash identifier:          UHZm3A0vD/ZASfFZmdqrBItVm30DhPVY0oGkMssPzgM=
Subject key identifier:   83:AB:CE:E3:3A:A8:1E:C4:03:BF:88:32:58:D3:96:C8:71:02:FA:9F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       69EA406E1D8E95AFFE36D643C10529536BFAA1FA
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/60632273-f232-4b3a-8142-9800e188da0c.roa
Signing time:             Sat 08 Nov 2025 00:10:07 +0000
ROA not before:           Sat 08 Nov 2025 00:10:07 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ea:40:6e:1d:8e:95:af:fe:36:d6:43:c1:05:29:53:6b:fa:a1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov  8 00:10:07 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=cda4771854a0b48cb46b0042fb0e2e22317316356d21a23b0e4ad16e59b7fbd1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:d5:5e:45:9d:0b:7a:05:04:30:4b:87:22:
                    a5:75:b3:09:86:9d:47:c0:22:5c:e5:ac:d2:06:fd:
                    f1:31:9f:3b:2a:c9:b3:70:6b:af:68:29:7e:d2:aa:
                    7c:1e:30:0b:29:7a:df:e9:15:8a:78:4c:f9:bb:fb:
                    ab:3c:52:b4:45:94:88:56:b5:a8:f7:6c:6d:85:3c:
                    38:92:dd:7a:1d:7a:ea:59:8d:37:31:9e:1f:d4:79:
                    ee:29:82:d1:f5:a6:a6:07:40:6b:54:b1:c7:7f:da:
                    54:11:96:5f:77:7a:95:2f:8a:d8:94:80:de:a1:86:
                    ea:db:cd:0c:25:81:73:60:83:e1:27:1b:31:db:ec:
                    0c:6f:3a:da:e9:db:a8:77:20:1e:4d:99:7c:27:64:
                    8a:16:ca:06:da:d0:31:cf:20:eb:07:26:6d:7c:ea:
                    29:18:2c:1f:0e:d8:e8:a2:ea:bc:a1:0d:24:d7:2a:
                    30:c7:43:6f:60:00:ea:60:68:ed:2e:bf:64:4c:42:
                    22:6c:ff:4a:77:87:9b:e2:ff:47:f7:94:a9:60:a3:
                    6e:d7:80:0d:5e:1e:63:9b:5d:1f:ab:84:d4:4d:c1:
                    f4:4d:6a:a1:5e:eb:8f:ff:48:2e:35:27:df:c4:bb:
                    25:d9:5d:8e:2e:d9:9e:7f:b4:f3:ee:15:46:77:65:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AB:CE:E3:3A:A8:1E:C4:03:BF:88:32:58:D3:96:C8:71:02:FA:9F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/60632273-f232-4b3a-8142-9800e188da0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:2b:67:95:f6:02:88:28:81:80:3b:4e:90:f8:ab:a2:c7:
         b8:aa:61:e1:fa:9c:07:8a:ac:70:78:e6:75:66:61:cc:3e:da:
         c0:a5:3f:26:b1:ea:79:54:b4:1f:d4:80:3d:06:26:8c:80:d5:
         4a:10:a1:3c:93:06:0f:ed:eb:d7:1a:60:1d:32:f1:fc:11:05:
         fc:cc:c7:32:5e:c4:64:f7:a0:cd:60:20:fa:82:97:7a:c2:59:
         8b:13:da:a3:e6:81:e8:fe:f5:d5:70:30:ec:82:72:8f:b7:fe:
         d8:6a:39:b6:02:c5:8b:0b:e6:f9:16:05:7b:1b:ee:32:7e:9a:
         d4:20:ee:ca:90:fe:e9:05:6c:e2:0d:3b:1a:a5:57:77:f8:72:
         97:08:ed:73:b1:a1:e7:36:f6:5e:16:ae:db:05:a5:95:5b:a1:
         a4:23:76:32:90:4b:8c:e2:82:90:d6:e1:50:e0:3b:da:ab:57:
         7b:5f:47:7b:81:74:c5:d5:b6:f5:c3:62:15:03:63:a2:40:00:
         ab:36:92:d6:5e:40:7e:78:f7:c0:09:38:fe:54:45:0e:34:0d:
         b7:db:18:59:26:60:81:68:10:9c:59:b2:69:5a:72:db:b6:d5:
         e1:7e:fb:8b:e5:29:b2:2b:8e:60:95:a7:d3:aa:d5:74:df:d1:
         88:b1:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 19:40:23 2025 by rpki-client