This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa
File:                     59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa (raw, json)
Hash identifier:          hWy4fLLOEQWQdzfbEQkMH0oVm22A29w27cquo3MCVmk=
Subject key identifier:   2C:04:20:9E:D4:19:C5:5D:FF:FF:1F:58:B0:6D:9C:59:C8:AF:46:0B
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       73D1037CF00A6A2D743AC267285FBDB11AF8B010
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa
Signing time:             Sat 15 Nov 2025 00:50:12 +0000
ROA not before:           Sat 15 Nov 2025 00:50:12 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d1:03:7c:f0:0a:6a:2d:74:3a:c2:67:28:5f:bd:b1:1a:f8:b0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Nov 15 00:50:12 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=bd50bdeb7896bf80a7e968b179666937176b2d15529e51509b0b0551bb842333, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:ce:16:88:85:4e:a8:d7:a9:4e:e1:5a:e1:
                    d9:bf:7b:78:75:b0:88:9d:2d:c9:c0:e0:49:ff:f1:
                    9c:9d:f4:69:88:d4:1c:6b:87:35:b7:23:a7:93:4d:
                    89:c4:29:7f:85:80:3f:93:08:14:77:a8:ad:dd:4f:
                    86:01:75:c2:93:b3:b3:24:94:87:f3:ae:d8:71:84:
                    7c:96:54:90:24:56:a3:8c:22:d9:6a:94:a6:a0:4c:
                    2a:3e:98:4d:98:c1:94:58:b7:f8:ad:a0:05:65:e9:
                    50:71:40:98:59:41:7d:3e:97:b3:62:e8:6a:71:2a:
                    90:98:f7:2a:fc:54:5b:df:b9:59:bb:a9:54:b5:a3:
                    41:4b:e9:a7:88:58:3c:da:23:42:45:cb:84:26:b4:
                    69:ae:d7:43:b6:17:d5:90:38:69:7f:09:54:da:a1:
                    88:60:d9:dd:79:f3:3a:7e:a1:8a:22:df:74:1c:87:
                    bb:e3:63:4b:1e:34:d5:f8:6f:ae:24:04:7a:cc:ab:
                    71:46:11:00:d0:0c:f9:33:3c:99:72:ce:e6:3c:93:
                    53:26:38:da:ed:62:64:00:50:54:26:64:1b:db:5f:
                    60:b1:38:38:df:87:3e:dd:47:f9:91:57:b4:69:c2:
                    76:e1:15:1c:bb:c4:7e:48:23:32:7b:ef:6e:d1:f7:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:04:20:9E:D4:19:C5:5D:FF:FF:1F:58:B0:6D:9C:59:C8:AF:46:0B
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:30:20:51:46:75:8d:c8:e7:7d:8e:0b:69:8d:41:6b:14:bc:
         4b:8a:12:8c:38:16:c1:3d:8b:ae:6c:f6:40:ed:fe:1c:59:f9:
         70:fd:4e:db:92:0e:7e:10:77:f0:da:2c:88:97:0f:2a:e9:5d:
         08:89:99:f3:36:4b:ce:d6:d1:23:c3:b7:68:ba:11:27:fa:4f:
         2a:d4:44:70:8d:54:5d:1c:fa:83:94:7e:78:03:19:1d:cd:ac:
         14:91:07:82:0d:e9:55:f6:c2:91:aa:78:e4:25:7f:00:da:5b:
         31:3f:03:25:e0:0c:2a:63:cb:54:66:d4:b0:5e:89:f8:0e:5b:
         3d:98:82:e6:11:18:33:34:b7:a1:f6:88:dc:72:66:4d:8a:36:
         f8:af:64:e5:28:4c:dd:6f:77:cd:f5:85:dc:bc:87:f4:6c:25:
         74:d0:2a:de:d6:91:9b:fb:ce:f8:dc:01:41:fe:98:0d:a3:eb:
         81:b6:7b:a8:ee:0f:c7:bc:3c:83:ee:08:5f:de:41:71:db:8d:
         03:d5:a9:c0:3b:fd:90:5c:8b:c1:7e:e3:94:d0:f6:b4:4e:55:
         f0:ad:63:68:67:a3:42:1b:08:15:73:3b:2b:f4:01:f2:4d:77:
         f5:76:61:f0:4b:28:9d:c3:03:7e:80:38:37:5f:04:1f:ec:a8:
         7f:82:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:59:57 2025 by rpki-client