This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ca597d5-e2d7-4ff2-96a9-3ceaba019064.roa
File:                     9ca597d5-e2d7-4ff2-96a9-3ceaba019064.roa (raw, json)
Hash identifier:          A3Q71SyTnunxh8Ki9hVbFozan5BA5tMrhS0qggudaPU=
Subject key identifier:   48:E4:70:EC:9A:DB:70:34:84:73:59:49:B6:A0:2A:A1:98:B6:D5:60
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       539CC287A2095738B9347A0D1BF0E29EA589FA8B
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ca597d5-e2d7-4ff2-96a9-3ceaba019064.roa
Signing time:             Thu 13 Nov 2025 01:50:47 +0000
ROA not before:           Thu 13 Nov 2025 01:50:47 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9c:c2:87:a2:09:57:38:b9:34:7a:0d:1b:f0:e2:9e:a5:89:fa:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 13 01:50:47 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=20ce815b93a058382882fc601d53c4e7ec4ff9e5c4d5d9fee456a97bd823a18e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:3a:33:61:0c:cb:f3:6b:fd:3e:e1:88:34:
                    41:29:e5:bf:d4:01:41:a1:dc:b8:c1:1f:2f:21:84:
                    d4:8f:3e:e2:18:42:57:e9:52:ac:36:34:64:5c:fb:
                    a1:2e:9d:00:b8:3c:8e:78:e2:10:d1:2f:bf:4c:10:
                    0a:79:1d:eb:df:2d:ba:73:7f:be:2a:4d:25:3a:88:
                    96:b5:19:68:9a:03:87:1e:ef:eb:a4:c5:42:8a:5c:
                    e6:c1:c0:05:68:a9:dd:24:73:e7:1a:48:3a:92:69:
                    05:e2:95:b1:5b:d4:8a:29:eb:a2:b1:bb:a1:78:ef:
                    64:66:cb:80:c1:56:a0:9a:6a:06:7e:80:64:d9:f2:
                    d4:94:5b:ce:76:8c:14:22:d4:d9:c4:f6:0e:5c:fe:
                    a9:5d:d4:6a:0f:68:2e:0d:4c:1c:1b:e8:65:0d:b3:
                    8a:56:eb:3d:79:fd:42:bc:c8:89:c7:b0:ea:b4:9c:
                    0b:37:af:9a:7f:c8:57:a3:c0:1e:34:f2:9d:79:97:
                    fe:e5:32:8f:d6:75:c8:fa:41:0c:f7:5e:2f:92:29:
                    ab:4a:54:ad:97:fe:88:fc:21:90:7c:cd:e5:10:26:
                    25:09:81:6d:1f:9a:77:57:23:c5:7e:4b:c9:e8:c9:
                    68:d4:d2:35:2b:d7:90:be:47:b9:c9:72:cb:54:17:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:70:EC:9A:DB:70:34:84:73:59:49:B6:A0:2A:A1:98:B6:D5:60
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ca597d5-e2d7-4ff2-96a9-3ceaba019064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:db:3d:a1:0b:46:3a:a2:3f:ee:a3:ea:e0:1a:e0:cf:2a:df:
         e7:36:68:4f:97:88:44:21:d2:35:3b:c8:95:95:ee:d3:c3:0f:
         21:28:e3:ff:ea:d0:97:9e:21:f8:06:10:c7:26:61:9d:5e:1c:
         10:d8:2a:db:b3:ba:df:db:ce:12:f3:72:12:ca:c5:61:97:02:
         af:79:bd:fa:b3:fb:e9:af:7c:bd:05:39:93:11:1a:d5:e6:fd:
         f2:91:4e:cd:0a:c9:85:61:1b:28:dc:58:b0:96:02:97:cf:5f:
         d1:31:db:b7:35:bf:36:0b:d2:fc:e9:3c:da:9b:0e:91:a8:44:
         b8:bb:9f:59:3f:89:ea:3f:91:06:07:60:13:50:13:03:7b:8d:
         c8:60:72:9f:86:08:4e:a9:78:e8:56:a5:6b:ff:f2:36:1d:32:
         b1:e7:26:f3:d1:0a:b0:07:22:16:fd:f2:db:48:c4:60:0e:60:
         63:2d:e5:66:56:c8:cb:f0:10:d8:5c:24:08:71:6b:a2:2f:1c:
         ce:f7:ff:b1:18:1d:6e:22:aa:0d:40:d5:3e:72:e6:96:f6:55:
         a0:51:15:e6:a3:f9:73:81:ec:8d:a2:92:30:f0:91:ef:1e:26:
         cc:a0:c1:1f:f6:5b:32:54:a2:89:4c:a5:7b:bb:a6:72:6e:08:
         f3:21:18:40
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU5zCh6IJVzi5NHoNG/DinqWJ+oswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTEzMDE1MDQ3WhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMGNlODE1YjkzYTA1ODM4Mjg4MmZjNjAxZDUzYzRlN2Vj
NGZmOWU1YzRkNWQ5ZmVlNDU2YTk3YmQ4MjNhMThlMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoITozYQzL82v9PuGINEEp5b/UAUGh3LjBHy8hhNSPPuIY
QlfpUqw2NGRc+6EunQC4PI544hDRL79MEAp5HevfLbpzf74qTSU6iJa1GWiaA4ce
7+ukxUKKXObBwAVoqd0kc+caSDqSaQXilbFb1Iop66Kxu6F472Rmy4DBVqCaagZ+
gGTZ8tSUW852jBQi1NnE9g5c/qld1GoPaC4NTBwb6GUNs4pW6z15/UK8yInHsOq0
nAs3r5p/yFejwB408p15l/7lMo/Wdcj6QQz3Xi+SKatKVK2X/oj8IZB8zeUQJiUJ
gW0fmndXI8V+S8noyWjU0jUr15C+R7nJcstUF1EvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSORw7JrbcDSEc1lJtqAqoZi21WAwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzljYTU5N2Q1LWUyZDctNGZmMi05NmE5LTNjZWFiYTAxOTA2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYCwwDQYJKoZIhvcNAQELBQADggEBAIXbPaELRjqiP+6j6uAa4M8q3+c2
aE+XiEQh0jU7yJWV7tPDDyEo4//q0JeeIfgGEMcmYZ1eHBDYKtuzut/bzhLzchLK
xWGXAq95vfqz++mvfL0FOZMRGtXm/fKRTs0KyYVhGyjcWLCWApfPX9Ex27c1vzYL
0vzpPNqbDpGoRLi7n1k/ieo/kQYHYBNQEwN7jchgcp+GCE6peOhWpWv/8jYdMrHn
JvPRCrAHIhb98ttIxGAOYGMt5WZWyMvwENhcJAhxa6IvHM73/7EYHW4iqg1A1T5y
5pb2VaBRFeaj+XOB7I2ikjDwke8eJsygwR/2WzJUoolMpXu7pnJuCPMhGEA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:20:38 2025 by rpki-client