This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa
File:                     dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa (raw, json)
Hash identifier:          mAF32HbvVKNt+0bIBJJoZLbCICJIk+h7SCojFct5mEI=
Subject key identifier:   13:9A:9D:11:B9:7C:33:CC:91:FD:C1:51:CD:D9:84:E5:06:D2:DE:9F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       5D0217F2A73F6044001865D7013708A9B2268FD0
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa
Signing time:             Thu 13 Nov 2025 02:00:11 +0000
ROA not before:           Thu 13 Nov 2025 02:00:11 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:02:17:f2:a7:3f:60:44:00:18:65:d7:01:37:08:a9:b2:26:8f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 13 02:00:11 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=ce1c500fd92501e5ae84f44f6a9983ce9803d709cbaeda9308cec0da1857ec58, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:64:67:bd:e5:66:d8:d0:4f:0e:80:1b:26:
                    bf:6e:53:45:7e:5d:88:fd:26:8f:44:3c:f7:8d:7b:
                    70:97:f6:be:e8:50:fc:25:93:50:7b:56:d2:98:cb:
                    3a:1a:aa:9e:5d:4d:6f:d8:bd:98:5c:dc:2d:06:a2:
                    29:b2:65:ef:41:ad:98:71:86:30:85:fb:62:e6:36:
                    87:50:2f:64:96:ad:39:fb:64:a9:ff:99:09:23:39:
                    48:eb:7e:d5:1a:4d:60:3f:30:55:b3:65:c5:12:66:
                    cd:9b:70:50:8f:57:a6:f1:76:83:2c:0d:a0:37:79:
                    92:dc:d8:33:a4:e7:86:7b:6b:b3:0c:c0:d6:64:16:
                    42:6d:f6:10:5c:fe:83:6c:b6:cf:c4:10:8e:b1:dd:
                    82:13:33:9b:01:6d:b4:f8:dd:68:f2:9d:bd:21:e8:
                    1c:84:d4:84:01:36:9e:59:0b:5e:84:eb:12:41:d8:
                    b8:13:48:7d:61:8c:94:58:5d:ef:b4:8e:67:a5:6d:
                    5e:93:8b:34:9e:23:ae:87:1e:e1:ce:79:49:4d:84:
                    6b:4e:4f:34:98:59:22:99:bd:3c:bd:06:ff:ec:26:
                    e1:1f:8c:b2:52:8f:ee:32:ea:c5:ef:e4:87:39:d7:
                    d2:40:d7:0c:af:47:64:d9:7a:92:60:22:b5:42:eb:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9A:9D:11:B9:7C:33:CC:91:FD:C1:51:CD:D9:84:E5:06:D2:DE:9F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:03:98:2a:1b:54:ac:c8:d7:83:79:8f:8f:a8:ac:dd:69:aa:
         de:00:57:40:73:56:e8:00:eb:a0:09:2e:73:d4:e0:d8:0b:55:
         55:6c:43:48:df:b1:3c:4d:f5:69:2c:7c:5a:b4:c5:a5:bf:5f:
         b2:df:3d:05:a8:7c:9a:56:91:0f:1b:93:96:ba:e9:0f:fa:a2:
         b0:82:bd:53:13:f8:6d:bf:d1:03:94:d2:fb:a1:08:41:4a:25:
         63:18:fd:6f:ec:3c:af:75:fc:cf:2d:b6:9a:40:e2:c7:2d:86:
         27:69:e9:79:87:73:32:58:5d:54:9d:0a:49:ad:dc:aa:4f:50:
         e4:84:61:e0:36:9b:2a:6e:3b:fd:05:30:d5:f3:78:a1:09:99:
         38:60:61:7c:ce:4f:67:30:63:14:ed:71:05:4c:28:9e:61:9d:
         9b:ea:8f:d6:28:e1:0b:14:f7:6e:79:e5:c3:f7:64:91:f8:fd:
         d9:0d:c6:76:0f:65:0d:df:c6:d4:71:0d:74:47:1c:59:47:64:
         2a:5c:46:63:d5:27:ff:c1:6c:e6:ad:8e:dc:a5:72:a2:06:0d:
         d6:7b:9b:16:87:9b:b6:75:f3:50:44:27:21:97:14:ca:3c:31:
         87:d8:1a:b1:62:f5:72:2d:21:56:6d:23:17:db:c5:4b:9b:a4:
         05:a5:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:36:17 2025 by rpki-client