This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa
File:                     a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa (raw, json)
Hash identifier:          szgy7nppix+Dx6cQvZJVUQEn8uMu0wHS6bDQj9kXGwY=
Subject key identifier:   44:79:FD:E7:6E:77:5A:02:2B:71:54:EE:D7:63:FC:6F:2A:F9:19:45
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       6BE2AAB7CB89F06D0295B23E786F4DF7344DE9D2
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa
Signing time:             Thu 13 Nov 2025 01:50:03 +0000
ROA not before:           Thu 13 Nov 2025 01:50:03 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e2:aa:b7:cb:89:f0:6d:02:95:b2:3e:78:6f:4d:f7:34:4d:e9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 13 01:50:03 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=24f63631861e96b44917aecea4d76d139b366d66d92b57eb502ee768701b08ad, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:40:e1:22:92:b2:47:ea:72:40:d5:e4:2c:
                    7d:ac:1c:38:5a:eb:0a:9a:72:84:6e:33:0e:03:5b:
                    08:a2:e3:18:c4:4c:1c:79:fa:2d:fe:00:45:0c:54:
                    77:8d:05:3b:59:1e:b3:3a:e8:21:e3:82:4e:99:e1:
                    fd:53:71:d0:e1:b6:ea:e7:0a:f5:07:64:13:f0:6b:
                    fb:d8:67:2e:bd:07:9b:48:c6:97:d4:6f:a2:da:8e:
                    58:81:06:b0:7b:80:8c:0f:c9:f3:dc:d8:0e:2f:bf:
                    a2:b8:9b:43:af:17:0c:6c:9e:37:d4:77:9b:ad:cb:
                    ff:cd:b8:37:66:44:86:ee:fb:6b:5b:65:ba:0a:49:
                    87:60:2f:b6:50:f1:41:54:52:10:ac:8e:d0:ad:25:
                    65:04:69:1b:c4:0e:6b:d9:54:10:04:53:3e:f1:66:
                    3d:f7:25:08:50:ee:f9:3a:ce:17:ac:94:7a:63:4b:
                    4f:03:3c:80:14:c5:d2:2c:4f:b3:c3:02:ac:c9:1a:
                    3c:24:ad:9b:7e:3e:87:bb:e0:75:ba:f0:9f:8f:ba:
                    28:f9:49:de:50:7b:ea:e3:e3:a5:0a:7d:f3:2a:cd:
                    2d:de:ba:ec:43:34:d0:9a:21:b5:a2:98:88:f3:a7:
                    3a:ff:fa:e1:bd:dc:3e:36:56:5f:4c:57:f4:79:a8:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:79:FD:E7:6E:77:5A:02:2B:71:54:EE:D7:63:FC:6F:2A:F9:19:45
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:1f:33:c9:24:f0:57:d4:b2:b9:1a:75:9b:b5:6b:ab:6b:f5:
         c2:5e:4d:bb:40:79:27:6b:93:00:cc:12:7c:09:ec:c8:67:16:
         9f:ae:7c:e9:cf:c3:53:75:73:d4:d8:16:45:b7:9d:34:4a:9b:
         f1:2a:61:c6:6c:1a:ec:e6:8f:31:8a:58:e0:9c:d2:89:90:7e:
         75:c2:73:ab:67:48:69:51:82:23:12:44:aa:6c:cc:4e:9a:c3:
         26:c6:a8:2b:8e:14:be:f3:ad:2b:10:9d:76:99:80:da:7a:be:
         af:13:7b:74:40:f4:70:8a:ae:ee:2b:bc:45:ff:6e:4b:55:39:
         d8:1b:c4:18:5b:76:4c:ac:94:a1:79:c1:1b:26:1d:ee:79:0d:
         7d:5b:d7:c3:1b:2c:e8:da:ec:f1:88:15:07:e2:17:aa:07:3d:
         8d:16:f5:17:62:e7:e4:68:c1:ce:5c:fd:98:c9:83:11:df:c9:
         54:ef:8f:b0:c2:60:3f:e7:6d:27:59:b6:e3:e8:48:fc:6f:32:
         0d:2e:17:4b:81:a8:c8:ed:20:08:96:2f:95:46:be:3b:d7:db:
         6d:16:70:32:97:fe:21:44:53:33:b6:97:2a:e7:8c:4c:40:88:
         8a:fb:7d:1d:31:4e:87:39:42:4c:d7:5b:ab:dd:2e:f6:09:dc:
         e0:a4:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:32:18 2025 by rpki-client