This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/50c22e78-7f05-4b92-b53b-6653311aea7e.roa
File:                     50c22e78-7f05-4b92-b53b-6653311aea7e.roa (raw, json)
Hash identifier:          +8aKrLn6aS5QIB2fvmisGicNGDSiSw9TkbeV+RdIT1w=
Subject key identifier:   6F:C6:38:FB:BA:A5:8F:C1:26:69:C7:4D:C8:1A:9A:6B:85:DF:5A:04
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       0BF597121CC42E515DBDD0FE57D5908804B08ED7
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/50c22e78-7f05-4b92-b53b-6653311aea7e.roa
Signing time:             Wed 03 Dec 2025 01:50:09 +0000
ROA not before:           Wed 03 Dec 2025 01:50:09 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f5:97:12:1c:c4:2e:51:5d:bd:d0:fe:57:d5:90:88:04:b0:8e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Dec  3 01:50:09 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=a8daec65447fd8878b3a93bb737b444708a5d03b2b2980f381c9da4a729ac185, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:bf:79:f3:af:54:15:3b:0f:06:a4:54:a0:
                    9e:94:c3:95:e7:1b:0a:e2:76:51:c7:7e:f1:b2:df:
                    ca:f9:93:0e:bc:de:3b:af:f5:56:aa:ce:1d:94:54:
                    d2:6b:c5:ac:b4:a3:32:4c:7d:d7:7f:23:80:7c:0b:
                    7f:78:b2:0f:f0:58:e3:4c:93:78:06:8f:16:8e:11:
                    22:4f:ce:87:2d:88:cf:6d:a8:98:df:ad:1a:f8:9c:
                    5e:80:39:db:ce:39:93:59:7c:69:e4:ec:64:9d:cb:
                    41:cd:9b:5d:31:c5:c0:4a:44:6a:55:2f:d7:c0:29:
                    f4:5d:73:cc:59:35:bc:07:b3:9b:41:35:e7:3b:fc:
                    c0:22:40:20:f2:b1:81:d1:93:ce:57:c7:5b:5d:89:
                    6b:8d:83:41:e6:1f:6c:ad:57:03:9f:5d:31:86:68:
                    31:ac:40:c3:d1:72:7a:e8:ca:be:36:49:c5:08:3a:
                    29:ae:54:1c:aa:b3:d1:1f:6a:a9:5c:ac:e8:82:a8:
                    16:76:8a:82:3d:20:b2:fd:42:e0:74:db:a2:44:0b:
                    7a:31:ce:c2:48:67:41:96:93:22:81:90:1b:fe:74:
                    ee:58:67:9b:11:d8:7b:ba:a4:46:1e:ac:f4:58:c8:
                    6d:2b:50:2d:f1:2a:b0:85:c5:6c:3c:20:26:ee:22:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C6:38:FB:BA:A5:8F:C1:26:69:C7:4D:C8:1A:9A:6B:85:DF:5A:04
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/50c22e78-7f05-4b92-b53b-6653311aea7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c8:0e:41:88:63:34:8c:06:0b:4c:d0:23:d6:f2:83:a6:b5:
         83:81:c7:13:84:88:29:45:22:ea:7f:50:ac:e3:c1:70:11:29:
         a8:d6:c2:ec:16:f8:1c:4c:8b:fc:a4:e2:d0:66:3d:82:98:a8:
         40:c7:d7:74:9a:1a:77:7d:a0:9d:5f:36:41:f5:9b:4e:44:52:
         8f:bb:96:bf:60:ce:fb:1c:6f:3b:5e:78:a3:b5:cd:3d:43:d0:
         74:c5:09:cc:16:1b:54:77:8e:91:e1:4b:1e:ce:5a:c4:fc:38:
         94:68:b0:93:fa:64:74:40:d3:42:ac:5e:71:c4:75:5a:1a:4a:
         af:37:7f:a0:62:b1:1a:a5:64:e0:1a:67:54:16:a8:b5:57:55:
         89:8d:1c:62:26:fa:15:c6:04:42:d8:6c:c4:b5:09:51:53:96:
         36:80:33:ad:0d:20:f8:38:2c:c6:5a:8a:d2:1d:86:28:5c:63:
         03:36:20:8b:4b:f5:f6:c7:12:65:c0:26:dd:99:43:8d:8e:5b:
         97:4a:7c:80:6b:8e:ea:02:5d:3b:ae:d8:43:55:d0:e9:b9:9a:
         29:be:63:d7:b3:29:39:20:ea:c0:1b:8a:d2:fd:a4:f4:ea:58:
         4e:f2:a0:b6:4e:bd:db:43:ac:af:ef:7f:db:58:ee:82:f3:c3:
         fa:c4:f4:00
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC/WXEhzELlFdvdD+V9WQiASwjtcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjAzMDE1MDA5WhcNMjYwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhOGRhZWM2NTQ0N2ZkODg3OGIzYTkzYmI3MzdiNDQ0NzA4
YTVkMDNiMmIyOTgwZjM4MWM5ZGE0YTcyOWFjMTg1MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0gr95869UFTsPBqRUoJ6Uw5XnGwridlHHfvGy38r5kw68
3juv9Vaqzh2UVNJrxay0ozJMfdd/I4B8C394sg/wWONMk3gGjxaOESJPzoctiM9t
qJjfrRr4nF6AOdvOOZNZfGnk7GSdy0HNm10xxcBKRGpVL9fAKfRdc8xZNbwHs5tB
Nec7/MAiQCDysYHRk85Xx1tdiWuNg0HmH2ytVwOfXTGGaDGsQMPRcnroyr42ScUI
OimuVByqs9EfaqlcrOiCqBZ2ioI9ILL9QuB026JEC3oxzsJIZ0GWkyKBkBv+dO5Y
Z5sR2Hu6pEYerPRYyG0rUC3xKrCFxWw8ICbuIl+5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUb8Y4+7qlj8EmacdNyBqaa4XfWgQwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzUwYzIyZTc4LTdmMDUtNGI5Mi1iNTNiLTY2NTMzMTFhZWE3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYDEwDQYJKoZIhvcNAQELBQADggEBABDIDkGIYzSMBgtM0CPW8oOmtYOB
xxOEiClFIup/UKzjwXARKajWwuwW+BxMi/yk4tBmPYKYqEDH13SaGnd9oJ1fNkH1
m05EUo+7lr9gzvscbzteeKO1zT1D0HTFCcwWG1R3jpHhSx7OWsT8OJRosJP6ZHRA
00KsXnHEdVoaSq83f6BisRqlZOAaZ1QWqLVXVYmNHGIm+hXGBELYbMS1CVFTljaA
M60NIPg4LMZaitIdhihcYwM2IItL9fbHEmXAJt2ZQ42OW5dKfIBrjuoCXTuu2ENV
0Om5mim+Y9ezKTkg6sAbitL9pPTqWE7yoLZOvdtDrK/vf9tY7oLzw/rE9AA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:00:57 2025 by rpki-client