This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa
File:                     eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa (raw, json)
Hash identifier:          Bf+dx8Q4FjNOnErnL6rN/EkBAyyJzlgXEdjRe+zHAYY=
Subject key identifier:   09:1B:3E:A0:A0:82:EA:34:DE:81:83:C9:97:5E:ED:40:9E:DD:58:34
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       1B3245917B3F33567B410F1429A2A3CE3159614F
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa
Signing time:             Wed 10 Dec 2025 00:50:28 +0000
ROA not before:           Wed 10 Dec 2025 00:50:28 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:32:45:91:7b:3f:33:56:7b:41:0f:14:29:a2:a3:ce:31:59:61:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Dec 10 00:50:28 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=d20e54b11b49292ad3f8283d2756830d02a5f4dac81d2fe513299c9ce44ffd0c, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:a4:33:d1:db:83:d6:4b:85:4f:be:96:7b:
                    31:55:9c:2e:68:77:9f:b7:23:15:b4:a8:f2:93:2c:
                    3d:80:8e:6d:c7:24:5c:52:d9:99:3a:e2:f7:ac:3c:
                    c4:99:48:1d:45:98:46:a3:f6:53:a1:68:0b:07:27:
                    3b:3d:fe:4b:b7:2d:63:00:a1:b2:d5:e1:5e:06:e8:
                    cc:bd:1b:53:18:47:ef:68:82:59:22:93:43:d0:e6:
                    4c:53:b1:16:61:70:85:3b:e0:75:03:c1:f2:56:c4:
                    cb:03:68:5a:7e:32:39:4f:5a:3e:94:45:ce:32:55:
                    3d:df:0b:bd:3d:0f:ce:5d:80:9a:7d:27:c2:a9:be:
                    53:73:55:38:e1:a8:fc:de:c0:2b:3c:9a:e9:b0:c8:
                    66:e2:05:fb:d1:92:18:43:e6:78:de:a6:a3:f8:e9:
                    89:d4:3f:ea:55:ef:33:3f:e3:3f:51:bc:01:3a:92:
                    32:e2:cc:d8:7d:0e:ef:a7:6d:49:ce:e2:e3:d4:bc:
                    4d:8f:55:b5:ad:c1:a3:07:89:89:49:af:fd:19:7e:
                    ad:4d:e4:84:f9:60:d9:27:7d:25:9a:32:e9:c8:35:
                    58:32:2d:ce:69:10:de:a9:58:f4:94:7a:42:6a:5e:
                    c6:d3:70:14:e7:54:a5:54:37:52:e1:44:5c:af:20:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1B:3E:A0:A0:82:EA:34:DE:81:83:C9:97:5E:ED:40:9E:DD:58:34
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:cc:d0:24:bf:18:b6:45:c4:cd:10:f2:ad:eb:b3:59:46:b1:
         2f:cd:c9:1d:22:6b:1d:0f:dc:22:c2:7b:0b:42:7c:2b:6f:81:
         c0:a5:8c:aa:15:5f:9e:a9:63:e4:c5:da:8c:cb:b3:ab:d0:3c:
         d8:e6:c8:54:75:64:6b:6a:60:7f:85:5b:5b:a7:64:e9:93:d7:
         e5:84:75:5f:b7:41:7a:62:19:8e:f4:84:8c:27:eb:7c:19:e2:
         e7:b2:a9:b3:e1:9a:fb:ef:00:57:49:3f:c9:61:71:be:d9:f0:
         bc:a7:ab:d5:0c:48:81:74:b7:17:0d:2b:75:07:c2:fd:46:60:
         c6:8e:25:01:14:19:90:88:ff:38:a7:b3:bf:aa:bc:9b:db:fe:
         91:a8:84:8e:22:89:d3:d7:04:30:4f:62:9a:01:49:1d:df:ad:
         d3:35:e6:2a:6c:7a:1e:c2:cd:94:8f:3e:85:89:99:fb:6c:d3:
         c6:fe:16:5c:47:c8:05:4c:2a:70:51:7e:e3:bb:f3:ec:ac:3b:
         1a:81:1d:2e:7e:74:67:02:2c:f4:25:a8:9e:0a:07:5c:30:9b:
         e9:da:06:04:97:6d:cd:95:83:8a:2f:1f:bd:22:e3:53:9f:a5:
         a1:3e:ae:74:ec:24:d5:7f:67:a9:03:fa:c2:63:c0:58:29:59:
         94:b5:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:06:35 2025 by rpki-client