This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa
File:                     9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa (raw, json)
Hash identifier:          1KhFimTr6E3eSHPJX86dxzRNN/wHAQTDEHLe0tDfSQM=
Subject key identifier:   7F:88:AF:10:2B:64:42:86:36:A1:AC:1D:44:D8:9E:C3:90:3E:0D:20
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       59395A9DAAD48A0A3169C029FEA2813A2D748A1A
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa
Signing time:             Sat 15 Nov 2025 00:50:12 +0000
ROA not before:           Sat 15 Nov 2025 00:50:12 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:39:5a:9d:aa:d4:8a:0a:31:69:c0:29:fe:a2:81:3a:2d:74:8a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Nov 15 00:50:12 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=fe717334b895f9ef87f0b7cfee55dc834ab7d25bd31dbb72435a6a73e27ee455, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:2c:e4:a7:76:d4:37:19:17:fb:60:69:81:
                    ab:36:c7:0a:fa:9a:48:2d:93:d6:26:e8:35:6e:6e:
                    ea:67:ed:c9:46:dc:55:38:0d:ed:24:85:32:5e:ac:
                    ce:3a:b6:8e:10:b6:af:7e:af:c3:61:a0:e2:0b:b3:
                    84:63:21:29:fc:d5:f5:0b:0c:3f:d7:28:cf:07:dd:
                    6d:d5:c5:a1:4d:d3:5d:ea:a3:62:ef:9e:16:fa:da:
                    d5:cb:19:06:d6:e2:45:eb:de:0b:ce:81:76:74:e0:
                    66:f4:fa:1e:b4:ed:04:e0:c2:ef:fc:a5:f4:81:96:
                    c4:e1:08:3f:72:74:58:d8:33:30:24:30:b4:ff:af:
                    47:0b:97:3f:f3:b1:0f:24:61:2b:a7:cb:42:e0:2f:
                    de:f7:c1:42:d3:66:6f:9c:74:ef:b7:0c:2b:6c:71:
                    b2:47:a3:50:bc:0f:7f:81:10:0b:47:18:4d:d4:8a:
                    8b:63:62:ca:b4:be:70:f3:c5:a4:5b:4e:3d:a6:7a:
                    9c:42:09:b3:af:86:ff:f9:d8:ce:c6:58:9f:94:ca:
                    71:4a:fa:50:f3:99:76:b5:9f:2d:b2:20:b2:d5:14:
                    96:75:63:36:bb:73:b5:92:1d:04:85:88:89:37:7d:
                    aa:49:b4:5c:fe:ef:21:1b:86:d2:62:41:3d:46:b9:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:AF:10:2B:64:42:86:36:A1:AC:1D:44:D8:9E:C3:90:3E:0D:20
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:15:d4:73:d9:f5:02:eb:89:54:3a:a5:77:ae:b2:df:ca:d3:
         e6:81:e9:b2:5c:2d:9b:da:29:12:47:fe:2a:f6:7f:a6:3d:c9:
         61:f9:7f:cb:b2:a6:da:b5:cc:e1:00:d0:4b:5a:56:7e:77:33:
         31:ee:d8:78:9a:b9:ee:9c:4b:60:e0:d3:68:54:c0:9c:27:77:
         d9:d9:37:4c:37:0e:4e:63:26:da:80:29:ad:31:3f:a1:a9:1c:
         65:d1:84:5f:f8:a3:ba:27:6c:50:3b:81:ba:44:f4:53:23:71:
         b4:f5:ad:3b:20:21:ad:b6:13:d9:2c:44:b4:1f:3f:9c:ca:66:
         41:cd:0b:ba:07:f0:e0:4d:f7:a5:cc:14:68:b7:71:b4:e8:ab:
         43:80:de:49:b9:cd:b0:e2:e7:eb:13:53:b4:d1:08:11:3e:4b:
         0c:52:78:6a:b2:01:81:2f:e1:6f:6b:e6:ed:25:4f:6c:d0:50:
         49:23:a9:8d:11:b3:d7:b3:05:5a:80:18:09:ee:3b:ef:42:17:
         a4:8e:9c:0f:21:b8:12:ff:ba:2b:e1:64:9f:b3:ff:10:65:70:
         66:33:c3:22:f6:38:31:39:58:38:5a:f8:20:85:d2:fc:98:18:
         93:97:f9:ff:f3:76:ed:b2:08:4e:52:f2:de:b4:d0:19:0d:75:
         3a:a8:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:10:59 2025 by rpki-client