This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa
File:                     619deba8-10a4-4570-992e-49cf451e8d80.roa (raw, json)
Hash identifier:          8xGRmcKTGKO+AIq3t/tcC7+7Wc14PWW8pbO/6VqA/+U=
Subject key identifier:   EF:25:35:9A:25:D1:AC:6B:10:F8:97:DC:B4:15:BE:70:1F:D8:9B:5E
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       07E912F365634617DEBC0E9A12531C502365A0F9
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa
Signing time:             Mon 08 Dec 2025 02:00:29 +0000
ROA not before:           Mon 08 Dec 2025 02:00:29 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e9:12:f3:65:63:46:17:de:bc:0e:9a:12:53:1c:50:23:65:a0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Dec  8 02:00:29 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=4e43d03c9926bb6e6fbd7ec3f3ceed662b347b84b3f4d598270efba9aedd78e5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:ee:97:80:20:66:08:f6:95:0f:cf:8d:96:
                    28:a7:e9:b6:69:3e:97:c5:f7:7b:c8:e5:9c:43:36:
                    4d:80:b4:eb:0c:4e:2b:12:ac:50:e7:d9:ea:b4:54:
                    8c:0c:e8:21:2c:f7:db:f4:4f:a3:9a:a0:77:49:22:
                    23:00:82:cc:79:2f:93:6a:e8:8d:70:f5:72:3c:9f:
                    5d:a7:29:74:66:d1:57:cf:4e:8e:19:75:25:3e:09:
                    0c:f8:46:34:af:47:40:79:71:7a:15:b9:23:9c:22:
                    a8:43:58:4d:81:53:4d:4d:cb:01:1e:c1:2c:d0:eb:
                    f6:cc:cc:d1:8b:59:87:ff:59:97:1a:be:91:16:8b:
                    9e:8d:06:74:03:0d:af:f1:c3:47:13:fd:3e:ae:6d:
                    21:67:1b:bd:09:99:4a:0f:bf:3a:2c:a7:80:19:a0:
                    cc:99:60:b8:d8:6a:93:b9:3b:11:74:4e:4e:5f:e5:
                    81:f9:1e:f5:fb:f4:df:56:bd:2e:e0:ce:29:a3:da:
                    55:d1:61:7d:9f:09:5c:cf:09:d8:d9:af:cc:ad:97:
                    d6:59:dd:62:d8:b3:a4:ca:f0:d6:21:b7:75:19:2c:
                    5e:90:b1:05:45:71:30:e8:85:3c:d3:a2:70:a5:11:
                    a9:bd:e7:cc:8a:7c:e3:8e:be:a5:2c:0e:7a:e5:f4:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:25:35:9A:25:D1:AC:6B:10:F8:97:DC:B4:15:BE:70:1F:D8:9B:5E
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:b0:0b:c4:a6:8e:dd:35:2b:69:2d:a4:9b:13:69:df:27:
         b8:7b:5e:02:af:bd:7a:87:9f:c7:d6:dc:b4:e0:17:f1:a7:6b:
         66:07:b5:a5:ed:14:e9:6d:82:01:55:fd:fe:be:93:36:c5:30:
         c7:8f:31:89:fd:03:9f:61:60:98:13:e2:54:f3:ed:cc:e0:49:
         07:4c:77:65:ba:51:ab:cb:4f:7c:ca:6e:07:92:4a:b1:a8:17:
         66:dd:b6:53:02:87:5a:b1:b8:fb:9d:5f:0e:03:a9:fa:23:4e:
         f8:aa:79:9b:cb:18:f5:0b:86:64:c5:b0:f1:ac:a0:36:86:4d:
         99:13:ae:7f:09:c2:a4:b2:35:2e:8d:93:72:15:59:6e:d9:f9:
         00:07:68:c3:d4:b4:fb:81:e6:74:fe:3b:79:4f:92:5b:33:fc:
         af:84:fb:e2:ea:d4:bf:b9:74:d3:26:17:0b:3a:40:ab:4a:e2:
         56:02:e7:92:9a:1d:09:27:91:cf:4a:c9:8c:fc:60:b8:b6:68:
         5e:8f:36:7e:44:56:d7:cc:41:ff:d7:24:6a:8f:df:cc:c3:05:
         a6:66:f8:62:38:39:d2:f7:78:fc:58:1c:de:6e:c1:9f:89:aa:
         ea:1c:16:db:95:18:9b:ac:92:ca:69:df:5c:87:a4:97:b5:9e:
         e3:0a:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:54:11 2025 by rpki-client