This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/59a41d2d-a58c-4843-9b09-5d7d72571b49.roa
File:                     59a41d2d-a58c-4843-9b09-5d7d72571b49.roa (raw, json)
Hash identifier:          oE+reH9w7F3IguvD85zfG8o8jgo/cc7+PgtzvW+4Ids=
Subject key identifier:   F7:BD:15:1E:CA:61:B0:BC:21:67:12:F8:B3:2B:2B:4A:71:AB:BB:FC
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       7D46A5C97237E900766C29A06FA02DD358EA291D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/59a41d2d-a58c-4843-9b09-5d7d72571b49.roa
Signing time:             Wed 10 Dec 2025 15:06:35 +0000
ROA not before:           Wed 10 Dec 2025 15:06:35 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     699
IP address blocks:        35.111.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:46:a5:c9:72:37:e9:00:76:6c:29:a0:6f:a0:2d:d3:58:ea:29:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Dec 10 15:06:35 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=a1b74d9bee17be0b3a51d8ad7cfa22d1293fd0aab1ce109ecdaa0a0be4349e88, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:0d:f8:37:a9:b5:f5:a8:3a:71:52:0d:4a:
                    3e:a1:8a:93:40:10:aa:bb:d9:51:96:93:77:ee:42:
                    ea:5f:fa:bd:a9:df:2b:ae:18:d0:c0:81:28:1c:ae:
                    a0:80:16:c2:56:d6:1b:11:bd:fc:2e:40:78:12:48:
                    fa:9a:15:ef:a1:f6:81:4b:6e:08:d1:74:f4:cf:fc:
                    5c:38:c3:6b:fc:85:61:49:1d:22:af:c0:a8:2d:f7:
                    0b:c9:62:e1:13:3f:e4:45:a5:10:31:eb:07:91:be:
                    76:f4:34:c5:81:f0:9c:2a:62:18:ec:e7:a3:75:70:
                    f2:61:c9:8b:ac:d6:49:4c:9e:7a:be:02:f9:5c:f2:
                    17:9d:f7:95:09:48:40:94:d1:86:f5:34:7e:21:f3:
                    86:fa:dc:fc:2c:d4:a3:f1:b1:0c:58:f2:66:a6:87:
                    d8:d9:8f:ca:3f:ef:75:c8:98:88:47:7d:04:34:60:
                    da:38:6f:46:33:e8:91:c4:aa:32:b3:b3:50:54:f6:
                    f5:9c:a7:16:2d:6b:ec:c3:3c:9f:3e:00:1d:f7:8d:
                    c7:37:f5:8e:ce:31:0f:ad:22:2c:65:86:39:22:fa:
                    03:83:ec:bb:9f:0f:22:d7:a4:58:02:05:59:6a:32:
                    e7:63:9c:e2:d7:fb:34:b1:55:ad:69:a6:78:b9:61:
                    12:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BD:15:1E:CA:61:B0:BC:21:67:12:F8:B3:2B:2B:4A:71:AB:BB:FC
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/59a41d2d-a58c-4843-9b09-5d7d72571b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.111.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:e4:48:4f:e9:dc:a9:79:fa:7d:6c:9d:01:af:57:84:b8:60:
         2a:bb:ae:d1:62:d2:ab:87:53:72:ee:53:62:8c:9f:0c:5d:58:
         9c:72:af:a2:49:26:03:8c:13:d2:10:b2:08:cd:62:c9:81:b0:
         60:5b:ad:2c:3d:23:24:ab:d3:97:b2:56:91:4e:16:ce:c8:b7:
         16:ab:82:51:44:73:44:fe:0d:11:97:2d:97:17:cd:f0:1d:fe:
         3d:82:0a:dd:96:37:d4:a0:0a:e7:9e:e0:ef:ba:66:e0:bc:2f:
         bc:41:01:97:bb:e8:12:a0:14:f0:48:6a:eb:21:15:22:97:f1:
         8f:74:89:2c:1f:ac:1e:0c:c0:f4:fc:87:55:2d:b2:46:9b:30:
         67:6c:ef:fa:bd:d1:3c:69:ae:ce:15:4b:12:8e:f8:04:8c:dc:
         fb:58:90:66:4f:71:67:fd:25:b9:66:36:f6:0d:3e:df:8d:f4:
         eb:30:e8:46:a2:3b:c3:e3:9d:2f:29:d9:45:e7:17:83:1d:16:
         63:0f:a6:59:84:a9:cd:30:f0:d4:20:ed:21:42:2a:46:52:a0:
         de:7a:0c:64:65:bd:92:88:54:93:0f:7a:96:42:81:93:fa:a9:
         cc:ad:7c:9e:33:05:85:61:cc:77:1c:92:23:30:6c:f6:46:2a:
         ef:df:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 11:16:32 2025 by rpki-client