This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa
File:                     f106bd1f-1175-4eda-af94-f788dab09805.roa (raw, json)
Hash identifier:          qhg9EuHEjN0GDY8rY/g5pSZZyvU62n1usygSrSxsvGI=
Subject key identifier:   9A:4B:70:9F:61:DB:4A:1B:40:57:3E:3E:30:47:AB:C6:F4:09:DF:64
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       710D7A2DC76BA26DDD80A84A05BCA3373EC9AE2A
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa
Signing time:             Thu 13 Nov 2025 01:50:43 +0000
ROA not before:           Thu 13 Nov 2025 01:50:43 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0d:7a:2d:c7:6b:a2:6d:dd:80:a8:4a:05:bc:a3:37:3e:c9:ae:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 13 01:50:43 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=35daf3751f2c60a8bfb6b365a934c263757e058e5129f22c1462c0077da2108c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:7f:3c:be:dd:cd:28:69:48:23:1f:93:b2:
                    78:1c:3a:b3:ae:f0:85:46:4f:ef:1c:19:a5:2b:c4:
                    2a:30:92:bb:ef:ce:76:d6:a3:7f:7e:48:f2:70:d1:
                    d5:7e:2f:ea:c1:56:f0:e4:f9:29:34:a9:2d:74:28:
                    1d:e6:cb:11:41:5a:15:0b:0c:47:38:dc:d4:50:f4:
                    97:b6:42:1a:d6:5f:5d:de:19:58:82:bd:34:3a:47:
                    87:02:a4:21:bb:bf:8a:76:84:40:7c:75:59:4d:84:
                    c5:4f:0a:d5:81:1b:1c:b9:5e:b0:e4:da:c9:0b:06:
                    3d:26:6e:83:01:a1:eb:61:63:ae:5a:47:42:b8:b3:
                    a4:17:14:ab:d2:f5:e8:e0:01:93:66:a5:30:66:eb:
                    41:9b:58:bf:ab:50:95:d1:c9:83:6f:c4:b5:63:5f:
                    30:a8:6f:0d:88:71:08:71:61:40:f3:67:fd:c5:bb:
                    e5:3c:e0:8b:1e:81:aa:3f:ec:f7:f5:dc:84:4f:92:
                    9d:55:de:0d:55:73:7a:8e:00:f7:5d:62:eb:b9:7c:
                    a3:e9:71:c9:e8:2c:e0:e7:ae:cc:a0:8f:8c:58:e1:
                    9e:ad:41:a8:51:bc:68:97:7a:4b:28:7e:01:b8:77:
                    5a:bd:20:58:85:af:53:61:15:cb:66:69:ed:80:5b:
                    9a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4B:70:9F:61:DB:4A:1B:40:57:3E:3E:30:47:AB:C6:F4:09:DF:64
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d5:ea:c8:cf:9e:78:38:e8:cd:6a:24:f6:38:e8:06:33:13:
         58:0a:d2:20:59:1b:7d:ee:c9:cc:49:67:19:99:d5:a6:23:3f:
         fd:90:ec:46:fa:9e:ac:3e:fc:24:79:55:b4:87:89:bf:f9:2e:
         91:74:fd:85:ee:03:9a:1e:14:52:14:6c:6c:ae:e7:39:af:94:
         7d:fa:6c:1e:e8:47:9a:96:e7:42:fd:a2:d7:34:5c:d2:4f:0e:
         73:9b:5d:6d:73:61:8a:5d:5a:49:4e:0a:ac:00:4e:af:69:79:
         7b:d2:5c:49:51:4c:cf:18:b5:3f:5a:d6:bf:d0:e9:dd:7e:cc:
         dc:12:92:6b:44:54:da:01:c1:31:a5:fa:76:07:9f:ef:ce:fa:
         1e:53:91:df:3a:5d:da:30:94:c2:32:35:7d:2e:c4:e9:d6:93:
         de:a7:e7:41:fc:0c:81:87:25:92:30:80:44:e2:3c:39:f5:f3:
         1e:f2:75:0d:81:18:a8:0b:2d:a6:16:45:78:7d:b2:9e:2d:dd:
         dc:d1:5f:24:86:56:a7:d6:5e:3b:98:11:af:fa:be:d1:cd:e9:
         03:f1:90:b4:07:3d:45:cb:cb:99:68:88:b9:a9:07:c8:db:31:
         bd:e2:fe:01:b8:fd:d9:48:58:58:c7:34:99:db:70:63:9c:a4:
         c1:f5:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:36:09 2025 by rpki-client