This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa
File:                     8ac8d230-2c50-472b-aaac-384834352fef.roa (raw, json)
Hash identifier:          SaBIBBnL2vWMVMkRpbcvBY/NvsFeUHYp6/PfZUYsXqQ=
Subject key identifier:   64:7E:46:D6:A4:2B:4C:2C:2B:84:08:DA:76:57:E4:FA:B6:5C:F0:97
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       4112BD04EBD6DEC83658DFB4818907C2DD96F89C
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa
Signing time:             Mon 08 Dec 2025 02:00:11 +0000
ROA not before:           Mon 08 Dec 2025 02:00:11 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:12:bd:04:eb:d6:de:c8:36:58:df:b4:81:89:07:c2:dd:96:f8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Dec  8 02:00:11 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=95d9081a354a370729353eec98265f39e31bafa0b87cba79ac2240840dc40b12, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:e1:55:aa:69:63:e0:ea:64:2b:9e:6f:ca:
                    a1:8a:cc:d4:4e:a3:97:6d:35:b4:7a:e0:5a:b9:af:
                    a5:c1:24:a6:c7:7f:71:62:eb:5a:e9:ab:82:9c:4b:
                    76:fd:fb:96:e9:4a:eb:c5:0f:a6:1c:72:c6:53:5c:
                    79:40:f9:eb:07:87:cf:2b:50:4a:fa:87:df:4d:ab:
                    e9:e5:b7:da:85:e8:93:00:97:3b:95:c7:01:25:92:
                    8b:dc:10:16:f4:5c:0c:2d:3f:e9:b8:9c:40:38:76:
                    5f:26:e5:91:ed:5d:8f:2b:bc:aa:dc:99:e6:62:70:
                    3f:53:32:0f:38:60:be:95:ec:23:7f:8e:d6:74:1a:
                    54:cf:e2:39:9b:c1:a0:d7:b9:a9:c0:a8:5b:09:ab:
                    75:f0:d0:24:42:42:32:eb:f9:60:b9:30:18:7c:aa:
                    88:fd:18:d4:14:93:87:df:84:67:8f:da:58:5d:ba:
                    e1:70:a1:77:a5:1f:2b:e9:b6:db:ad:eb:be:61:4a:
                    3e:b8:99:bc:23:53:15:9c:89:55:e7:c1:a6:e4:37:
                    9d:c0:a6:6b:2b:c4:31:0e:fb:74:62:66:2b:b6:1d:
                    7d:7d:e2:00:2b:fa:a4:8c:b0:24:e1:ae:7a:85:a0:
                    5d:26:dc:44:e7:4f:27:08:92:68:c5:ec:d9:47:67:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7E:46:D6:A4:2B:4C:2C:2B:84:08:DA:76:57:E4:FA:B6:5C:F0:97
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:34:4d:30:83:43:65:82:5b:e9:ce:f3:61:5a:99:01:c7:d4:
         54:19:6b:8a:5f:31:08:50:55:67:51:19:33:9c:ff:53:f9:9b:
         8d:de:5d:9d:b4:c4:cb:b6:5d:fc:78:e3:e0:88:67:32:ca:b7:
         bb:35:59:f8:11:04:73:4b:3c:36:24:d2:68:1f:18:d9:15:47:
         79:b0:c3:69:a0:cb:b0:d8:2a:a3:f2:0d:c0:04:5d:5f:f1:58:
         f9:e9:76:03:cf:79:06:83:00:03:4d:87:fd:68:a1:35:e5:50:
         17:40:61:0b:b5:d6:df:7b:fe:e2:9a:d3:a7:fb:48:7c:42:ec:
         89:c2:ec:06:e4:a8:f3:1b:4b:f8:1c:a9:7f:7f:93:24:f2:2d:
         0b:db:a6:d4:9f:6c:f1:c9:3b:59:a1:20:a3:88:d9:1e:cf:52:
         d3:b7:78:71:59:eb:0b:fe:80:d9:7b:e6:58:48:dc:e0:da:36:
         e1:26:13:0c:1f:da:6b:18:4b:a4:08:40:28:93:ba:27:7a:f6:
         97:05:6d:8a:b1:ea:c9:d8:00:b2:f6:69:a6:1f:fd:b8:ca:e3:
         83:71:39:ef:14:75:53:60:21:5a:e9:5a:70:ce:aa:50:11:43:
         0d:1c:a4:f0:94:9b:04:db:b1:7b:fe:12:72:c8:88:45:46:11:
         a0:fe:24:5b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQRK9BOvW3sg2WN+0gYkHwt2W+JwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDIwMDExWhcNMjYwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NWQ5MDgxYTM1NGEzNzA3MjkzNTNlZWM5ODI2NWYzOWUz
MWJhZmEwYjg3Y2JhNzlhYzIyNDA4NDBkYzQwYjEyMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCk4uFVqmlj4OpkK55vyqGKzNROo5dtNbR64Fq5r6XBJKbH
f3Fi61rpq4KcS3b9+5bpSuvFD6YccsZTXHlA+esHh88rUEr6h99Nq+nlt9qF6JMA
lzuVxwElkovcEBb0XAwtP+m4nEA4dl8m5ZHtXY8rvKrcmeZicD9TMg84YL6V7CN/
jtZ0GlTP4jmbwaDXuanAqFsJq3Xw0CRCQjLr+WC5MBh8qoj9GNQUk4ffhGeP2lhd
uuFwoXelHyvpttut675hSj64mbwjUxWciVXnwabkN53ApmsrxDEO+3RiZiu2HX19
4gAr+qSMsCThrnqFoF0m3ETnTycIkmjF7NlHZ6MPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZH5G1qQrTCwrhAjadlfk+rZc8JcwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzhhYzhkMjMwLTJjNTAtNDcyYi1hYWFjLTM4NDgzNDM1MmZlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBADg0TTCDQ2WCW+nO82FamQHH1FQZ
a4pfMQhQVWdRGTOc/1P5m43eXZ20xMu2Xfx44+CIZzLKt7s1WfgRBHNLPDYk0mgf
GNkVR3mww2mgy7DYKqPyDcAEXV/xWPnpdgPPeQaDAANNh/1ooTXlUBdAYQu11t97
/uKa06f7SHxC7InC7AbkqPMbS/gcqX9/kyTyLQvbptSfbPHJO1mhIKOI2R7PUtO3
eHFZ6wv+gNl75lhI3ODaNuEmEwwf2msYS6QIQCiTuid69pcFbYqx6snYALL2aaYf
/bjK44NxOe8UdVNgIVrpWnDOqlARQw0cpPCUmwTbsXv+EnLIiEVGEaD+JFs=
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:04:00 2025 by rpki-client