This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fecb6982-06d4-4bb4-a59c-59982eb1b971.roa
File:                     fecb6982-06d4-4bb4-a59c-59982eb1b971.roa (raw, json)
Hash identifier:          xE8WiixkUT1sHiSsEPhsf7MkjNo16YPubNi3/VwEbbo=
Subject key identifier:   A1:A8:1B:07:23:1B:F5:65:C3:7B:5E:A7:A1:A7:C9:E4:B5:32:6A:62
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       3DA16477FEF45F15CC8C45123C296037C925DDFE
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fecb6982-06d4-4bb4-a59c-59982eb1b971.roa
Signing time:             Tue 25 Nov 2025 19:40:11 +0000
ROA not before:           Tue 25 Nov 2025 19:40:11 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a1:64:77:fe:f4:5f:15:cc:8c:45:12:3c:29:60:37:c9:25:dd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 25 19:40:11 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=679ada7ddd1de403e092473aed5ea84dd6f74203add66420059b19a60fecc7eb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:60:bd:47:84:12:d7:0f:ae:62:3a:a8:98:
                    98:dc:71:29:ce:9c:67:95:7e:42:30:5a:95:cd:e3:
                    43:24:1d:b3:c6:07:21:9e:42:c8:1d:0a:f6:04:c4:
                    d9:72:63:80:a4:41:4f:b1:a2:14:dd:5b:ba:65:e0:
                    e3:d0:55:99:84:c8:9d:76:cc:47:11:59:aa:14:10:
                    b0:4d:61:de:f2:e1:69:33:f8:29:3d:3b:30:df:7e:
                    ba:f2:5f:7d:5f:e4:27:b4:d1:29:dc:c4:4a:6f:94:
                    f2:f1:39:94:f0:16:97:c4:27:72:18:25:9f:85:07:
                    4e:ff:d6:66:dc:c2:58:39:90:62:07:13:fb:54:aa:
                    92:dd:6d:f5:42:55:2a:b3:32:00:e7:d6:73:a2:44:
                    c2:33:ab:f2:b9:15:05:39:d5:1b:be:18:8a:87:28:
                    ab:cb:06:85:fb:92:b5:c7:bb:92:bc:6d:f4:7e:f2:
                    d9:df:87:b3:5c:26:ec:6c:2d:96:0e:75:20:39:fc:
                    70:f0:27:a9:c7:d4:db:61:fd:83:39:5a:44:8b:0c:
                    f6:a0:89:66:d6:7a:59:bb:38:f9:7f:6e:10:fd:27:
                    40:9e:a3:89:a4:c6:e4:4c:02:2d:4f:3a:7a:d4:a6:
                    66:70:6e:49:f6:0b:0a:9f:93:07:66:e4:08:bd:71:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A8:1B:07:23:1B:F5:65:C3:7B:5E:A7:A1:A7:C9:E4:B5:32:6A:62
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fecb6982-06d4-4bb4-a59c-59982eb1b971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:17:25:30:ab:48:62:70:50:69:81:4c:d3:ca:2f:f2:0f:36:
         57:b0:d4:a9:be:36:3b:1f:3e:5d:f9:78:bf:b9:21:e6:e3:ff:
         51:9d:5b:81:2c:8a:72:e2:17:a9:74:d8:e4:90:ce:12:2c:dd:
         99:6b:e4:b5:59:b7:a3:28:d4:8b:00:45:1b:4b:73:25:36:11:
         38:e3:d1:6c:18:3d:1d:f0:e9:d5:72:ce:c8:31:d3:e9:fc:c9:
         66:e9:9e:1d:de:23:78:0a:a9:d0:05:0b:a6:10:50:c6:e9:44:
         03:64:f3:1e:a2:56:84:2d:0f:c4:a7:9d:1c:43:1a:4e:c1:c1:
         80:ed:5b:3e:f2:6e:47:fa:60:cd:6b:a3:50:86:50:1d:25:fa:
         0a:6a:96:3e:95:c0:30:d4:eb:55:76:e5:c5:ed:38:29:44:85:
         f7:63:24:e4:ff:ff:28:69:dc:fc:5e:75:27:24:9c:6e:5d:93:
         02:1b:73:cf:d3:a6:2f:4a:f3:a8:93:f9:d9:ce:e7:38:c0:17:
         77:3e:37:22:1e:0f:30:fc:cc:38:fd:51:6d:e2:31:6e:98:14:
         79:c1:72:6c:ac:f5:67:35:5b:c6:b3:cc:f4:bd:28:67:3c:bd:
         1e:c3:6a:2e:05:7d:58:ca:6d:1f:02:8a:a3:90:71:7d:18:15:
         87:81:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:08:50 2025 by rpki-client