This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/09e78394-d99d-49c9-87f9-96be1ed5934c.roa
File:                     09e78394-d99d-49c9-87f9-96be1ed5934c.roa (raw, json)
Hash identifier:          vngiu4KxQ20ubd/R/AN2EK60ZAG6m+C475vAdtgvJP0=
Subject key identifier:   02:16:38:74:B5:C8:EE:89:8B:24:69:6C:90:FD:92:36:93:82:A5:3C
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       35D27A5C6AB836C16CEB7F120CA6F69D8B057491
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/09e78394-d99d-49c9-87f9-96be1ed5934c.roa
Signing time:             Thu 13 Nov 2025 02:00:10 +0000
ROA not before:           Thu 13 Nov 2025 02:00:10 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d2:7a:5c:6a:b8:36:c1:6c:eb:7f:12:0c:a6:f6:9d:8b:05:74:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 13 02:00:10 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=2438ed4fee985a472857012849beb5816a915be05a040a6109175d9804a6032d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:0c:d5:5d:31:84:96:7f:94:30:5a:c0:d6:
                    0a:9f:dd:cc:99:93:37:f6:a1:df:17:b0:3a:fa:bb:
                    0e:50:0d:97:ad:2e:5b:1a:e1:8d:b9:87:ac:76:c9:
                    cc:44:08:bf:c9:94:9b:a9:f7:9b:b2:34:e7:d1:18:
                    ca:d9:14:b1:99:69:21:ea:31:a6:ce:01:f2:d5:b6:
                    62:91:56:b2:00:3f:78:ea:09:3a:af:28:5a:b7:42:
                    59:71:a1:fa:ab:1f:56:71:7d:d4:bb:f9:75:9b:ca:
                    b9:e1:85:c6:35:00:91:c3:f9:b5:d2:a6:13:49:2d:
                    19:0c:e5:f9:ff:b6:c2:c8:27:b7:f5:99:47:53:d1:
                    47:b6:8b:ef:1e:e3:e7:76:3e:6b:03:2a:7a:36:45:
                    4f:69:4e:5b:9b:93:6b:c6:cc:20:c2:8c:5c:06:aa:
                    a4:cf:2c:ba:b6:25:ea:87:85:80:af:bc:5b:87:40:
                    0b:31:1e:f1:24:7b:3a:14:c6:47:26:7e:e5:5f:32:
                    17:37:c2:2d:0f:eb:66:04:44:f0:a3:ea:fb:eb:46:
                    b2:77:e6:a7:d7:30:fb:f4:ed:f9:19:24:18:16:7b:
                    7f:62:5b:a9:12:70:f3:60:d3:e9:bc:5d:de:0e:ed:
                    71:81:5b:ac:27:b4:6c:bc:85:2d:64:8e:10:25:f2:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:16:38:74:B5:C8:EE:89:8B:24:69:6C:90:FD:92:36:93:82:A5:3C
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/09e78394-d99d-49c9-87f9-96be1ed5934c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:00:6b:4e:6b:cb:d9:a3:d6:df:e2:f3:a9:5b:74:0c:40:
         42:83:5a:56:bf:94:00:88:12:0d:94:7a:70:a8:d6:1a:95:23:
         f9:e5:da:1f:e1:57:be:3e:b4:4c:f8:d0:20:f4:f0:16:fb:1f:
         b4:c4:e7:f6:9f:60:33:99:25:ca:42:41:b1:e2:d3:2c:2d:c9:
         ab:4e:cd:fc:1c:6c:ff:6c:b5:94:30:da:1b:ad:ea:f4:1d:a1:
         af:97:8d:83:40:ac:18:68:0e:d4:1a:ba:5e:54:9b:1d:c1:19:
         fe:26:f0:d9:29:3d:61:16:9d:71:07:7d:73:3a:72:f2:8b:cb:
         a4:bb:a0:3f:28:53:bb:27:d0:0f:fe:43:1a:48:fa:ad:d9:fb:
         ff:61:76:f7:9a:76:15:06:9c:4d:11:73:6f:78:a0:0d:b9:5b:
         2e:cc:68:70:bc:da:23:9d:b6:4c:22:66:ec:20:b6:a0:38:6a:
         eb:18:7b:e6:8f:07:b3:cc:98:85:13:20:f3:49:a6:19:b7:fb:
         6f:ac:3e:f8:83:08:25:64:8e:cb:f4:a2:ba:3f:12:e5:c3:ca:
         93:d8:39:12:f9:1d:f4:9b:74:e3:38:3a:44:71:f3:62:ef:c6:
         c3:d0:7f:a5:cf:8c:67:b1:36:1e:d6:e9:a9:2a:9d:4c:bc:80:
         87:e1:02:95
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNdJ6XGq4NsFs638SDKb2nYsFdJEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTEzMDIwMDEwWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDM4ZWQ0ZmVlOTg1YTQ3Mjg1NzAxMjg0OWJlYjU4MTZh
OTE1YmUwNWEwNDBhNjEwOTE3NWQ5ODA0YTYwMzJkMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3OwzVXTGEln+UMFrA1gqf3cyZkzf2od8XsDr6uw5QDZet
Llsa4Y25h6x2ycxECL/JlJup95uyNOfRGMrZFLGZaSHqMabOAfLVtmKRVrIAP3jq
CTqvKFq3QllxofqrH1ZxfdS7+XWbyrnhhcY1AJHD+bXSphNJLRkM5fn/tsLIJ7f1
mUdT0Ue2i+8e4+d2PmsDKno2RU9pTlubk2vGzCDCjFwGqqTPLLq2JeqHhYCvvFuH
QAsxHvEkezoUxkcmfuVfMhc3wi0P62YERPCj6vvrRrJ35qfXMPv07fkZJBgWe39i
W6kScPNg0+m8Xd4O7XGBW6wntGy8hS1kjhAl8tnhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAhY4dLXI7omLJGlskP2SNpOCpTwwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzA5ZTc4Mzk0LWQ5OWQtNDljOS04N2Y5LTk2YmUxZWQ1OTM0Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYCowDQYJKoZIhvcNAQELBQADggEBAGKNAGtOa8vZo9bf4vOpW3QMQEKD
Wla/lACIEg2UenCo1hqVI/nl2h/hV74+tEz40CD08Bb7H7TE5/afYDOZJcpCQbHi
0ywtyatOzfwcbP9stZQw2hut6vQdoa+XjYNArBhoDtQaul5Umx3BGf4m8NkpPWEW
nXEHfXM6cvKLy6S7oD8oU7sn0A/+QxpI+q3Z+/9hdveadhUGnE0Rc294oA25Wy7M
aHC82iOdtkwiZuwgtqA4ausYe+aPB7PMmIUTIPNJphm3+2+sPviDCCVkjsv0oro/
EuXDypPYORL5HfSbdOM4OkRx82LvxsPQf6XPjGexNh7W6akqnUy8gIfhApU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:27:59 2025 by rpki-client