This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa
File:                     040e375f-0cc8-46f8-8435-facc3d4d127e.roa (raw, json)
Hash identifier:          XnEFBrp88zSTwYZS77E7OY8+b9BfTdVGKMPJ2gK4TZM=
Subject key identifier:   56:67:2E:AA:BD:6B:31:1A:74:F0:04:12:95:77:DF:70:C7:DF:1C:9A
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       783DFC857AC3D41BCDC4C0D4C5F121D0F6AADD56
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa
Signing time:             Thu 13 Nov 2025 02:00:08 +0000
ROA not before:           Thu 13 Nov 2025 02:00:08 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     801
IP address blocks:        35.96.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3d:fc:85:7a:c3:d4:1b:cd:c4:c0:d4:c5:f1:21:d0:f6:aa:dd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 13 02:00:08 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=3e8824c342121186f812ce536325e642c7fd9d1f94791301de142e64fbdee15f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:77:52:6f:56:26:e8:2e:54:0c:06:d2:7b:
                    11:97:05:2e:42:ea:8b:73:4c:9f:bc:c1:90:3a:f8:
                    a3:f7:51:09:00:2a:a9:47:ee:96:c2:f6:38:81:7d:
                    ca:65:dd:c9:06:ab:77:dc:fd:c6:56:f7:e2:40:42:
                    61:f8:c1:f0:01:fa:c6:7f:e4:59:01:82:31:b3:65:
                    eb:2a:0e:c4:30:60:84:b3:33:c5:f0:70:21:59:25:
                    d1:0f:b8:f0:4d:f2:07:dc:88:07:33:30:39:23:94:
                    58:64:dc:58:45:7b:fa:50:cb:72:42:51:a9:e9:aa:
                    ad:35:51:7e:b6:ff:75:6e:89:fb:c9:07:2d:7c:6d:
                    9d:c2:6e:21:ce:5d:db:05:07:c5:0f:d2:b7:31:21:
                    88:a4:0e:44:5d:ca:c0:d9:00:f1:b6:15:0a:8f:22:
                    a1:23:d7:a4:e7:83:28:80:27:17:64:9d:80:b8:bd:
                    f7:74:30:74:36:e9:ed:22:e3:04:d9:f0:eb:27:8e:
                    48:19:5d:67:12:f6:66:5a:bc:35:bb:51:ab:98:18:
                    14:f7:42:03:b7:6a:bb:27:25:db:68:9b:84:86:20:
                    4d:79:e7:ca:a1:c9:23:23:76:45:64:61:c9:22:94:
                    75:a3:29:ec:96:4f:33:c0:58:3d:6a:0e:78:89:6a:
                    8f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:67:2E:AA:BD:6B:31:1A:74:F0:04:12:95:77:DF:70:C7:DF:1C:9A
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:bd:75:fb:be:06:04:50:e6:24:9b:43:6f:ab:9f:26:61:70:
         51:c0:2e:2c:58:17:43:fb:95:54:89:e5:0a:9d:0a:ac:f8:01:
         4a:f3:3e:8c:37:05:3b:48:74:c1:4e:ca:c6:99:9a:61:3d:22:
         d2:6f:39:fd:18:f0:20:93:02:fe:54:27:83:b0:f7:13:b2:9d:
         f6:20:d3:4d:7a:e6:49:d5:28:65:ee:f7:14:21:c4:b5:a9:6e:
         7b:ff:ab:ba:38:01:32:52:c2:4d:0c:ba:92:48:51:4d:6b:de:
         eb:ee:fb:d7:d5:8a:dc:3d:a4:76:8e:6e:2d:94:e5:e1:4e:48:
         89:a6:d9:93:c6:4a:38:02:60:2a:66:ed:d4:44:1a:d6:ae:05:
         83:92:13:c7:6b:b2:fa:9a:11:5e:78:62:23:29:43:33:3a:50:
         8b:7c:4c:45:65:af:b8:30:d3:a4:56:2b:0c:e8:30:25:d2:b8:
         38:0f:8b:bb:93:44:51:38:38:0c:10:66:6d:31:a7:2b:27:17:
         4f:db:8c:7a:ab:0a:c5:ff:7a:65:74:c7:78:f6:9a:61:90:c2:
         28:c1:c9:20:98:cd:ff:e9:2e:fe:6a:cc:db:b8:f9:a0:19:d7:
         7a:30:80:98:07:20:43:22:cc:05:c0:4d:14:8f:df:7f:63:12:
         b5:8f:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:04:15 2025 by rpki-client