Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132f73c3-a546-4296-a702-8a3aab70f706.roa
File:                     132f73c3-a546-4296-a702-8a3aab70f706.roa (raw, json)
Hash identifier:          AfduxWuHPSuQKiyeQuz7Y3RDTFqjfNGBegO7Vr9yR40=
Subject key identifier:   8D:45:89:B3:31:FB:0F:AE:C0:46:C0:C9:D9:74:B1:D3:06:F1:B2:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55A2B9F8268784823E0E0CAC2DD69B51E1F23580
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132f73c3-a546-4296-a702-8a3aab70f706.roa
Signing time:             Wed 18 Feb 2026 00:20:34 +0000
ROA not before:           Wed 18 Feb 2026 00:20:34 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        121.93.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a2:b9:f8:26:87:84:82:3e:0e:0c:ac:2d:d6:9b:51:e1:f2:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:20:34 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=a2c88dee37e9a52e9059a375f6ebb66efd66d9651aae269deacaf1139cb7f802, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:1e:4b:40:93:b7:90:3d:bc:52:85:22:70:
                    04:e3:ad:2e:ba:05:2f:6b:f7:c0:22:2f:a3:e6:93:
                    32:13:e0:1f:2b:58:eb:75:86:27:18:e1:7b:54:2b:
                    da:f0:dc:ba:fa:0e:1f:ba:ca:ea:71:b0:28:91:69:
                    49:af:1f:90:c5:e1:af:c4:c3:5c:af:9c:cd:b1:8b:
                    42:d9:50:ec:b4:ac:76:3d:0e:5d:d6:b3:84:8a:74:
                    e4:2c:63:42:16:c9:af:fd:6f:e3:3e:ef:01:a8:68:
                    e8:19:13:d6:ec:ad:f1:58:07:9c:f9:03:d7:40:e0:
                    0d:5b:9d:4b:32:b6:7e:40:7c:75:8e:74:47:2a:b2:
                    5d:6f:85:5e:1a:0e:61:c8:c3:a2:f3:9b:32:82:23:
                    b6:86:5a:9d:83:e7:c3:64:35:aa:94:d5:44:be:70:
                    38:9b:7d:bc:f0:64:5e:89:1b:f5:bf:86:28:a1:44:
                    f8:e1:4e:3a:64:57:fb:ef:de:a2:9a:98:74:d2:11:
                    f1:98:8c:27:2b:f1:ee:ed:3b:c4:42:2a:80:ab:d1:
                    a5:37:c0:ac:9a:19:07:d2:8d:d0:ab:a5:a5:45:45:
                    f7:4c:ae:99:79:ed:28:e7:26:83:d7:92:5f:c0:87:
                    cb:c9:cc:db:d4:cb:79:13:f4:d9:2b:43:e3:67:57:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:89:B3:31:FB:0F:AE:C0:46:C0:C9:D9:74:B1:D3:06:F1:B2:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132f73c3-a546-4296-a702-8a3aab70f706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.93.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7a:46:d7:73:72:b8:31:34:01:4a:71:de:99:80:b4:11:f2:3c:
         f7:0a:e3:5b:4d:1b:df:de:a9:62:a2:e8:e9:86:5d:31:8f:f9:
         2d:15:35:ce:35:14:cf:30:19:e3:c8:e1:aa:43:e3:06:68:25:
         64:55:c8:5b:01:56:84:11:72:e8:90:ea:ed:22:c6:05:42:c5:
         dc:3b:be:c6:29:5c:a3:6e:01:c4:52:2a:d6:41:c0:cd:19:e3:
         b1:0b:15:91:23:e0:b0:52:55:9e:f7:e9:88:24:f1:38:c2:c7:
         62:af:03:8a:63:8b:e3:44:be:b3:57:48:11:38:ca:d7:dd:3b:
         10:f6:86:44:4f:cb:c6:dc:42:ef:5b:3c:5c:6a:87:af:35:b6:
         34:2a:a4:03:5f:32:66:e4:90:8e:68:70:8f:54:f7:2f:27:16:
         27:ce:7e:bc:10:ef:dd:f7:55:22:fb:70:2b:f9:9a:0b:bf:36:
         58:56:29:26:4a:ee:64:34:66:be:05:10:88:ac:10:a1:fb:0e:
         52:07:d6:73:b0:52:d8:50:c7:57:0b:ee:4d:18:48:ee:63:44:
         02:62:42:b1:33:b1:d1:25:ed:a2:72:3b:18:28:79:63:d0:77:
         f0:b4:bf:1d:96:44:17:95:53:07:6a:2a:8a:79:79:91:af:9d:
         ef:3e:65:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:33 2026 by rpki-client