Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1505dba2-f5d8-4cfa-892e-d67f9fff862f.roa
File:                     1505dba2-f5d8-4cfa-892e-d67f9fff862f.roa (raw, json)
Hash identifier:          CfZH237O+d4WE6RbcO1VTwolDHfxrz+aYyWW3vs3aeI=
Subject key identifier:   0D:6F:A1:AD:3B:00:13:79:A7:A2:0A:AA:77:6E:55:0C:8B:7E:FF:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40AFAAD50214BA51968B564BF6991CD5B28BC31F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1505dba2-f5d8-4cfa-892e-d67f9fff862f.roa
Signing time:             Tue 10 Feb 2026 00:31:42 +0000
ROA not before:           Tue 10 Feb 2026 00:31:42 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:af:aa:d5:02:14:ba:51:96:8b:56:4b:f6:99:1c:d5:b2:8b:c3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:31:42 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=09486ee83e4cdcde6f728f8e9a2375c1540c03e37c6535d1790c7026c517aa90, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:3d:2d:f3:c4:6f:cd:6e:9b:15:2b:e6:eb:
                    b5:57:ba:37:71:99:52:f1:45:b9:d6:58:ae:f9:7f:
                    8e:f1:eb:62:00:86:e9:e4:64:b4:88:0d:2b:cd:6c:
                    11:06:b5:28:3d:e9:7f:ce:29:38:e8:9e:23:10:c3:
                    73:1c:9d:bd:55:d1:e1:2d:5a:a1:c5:3d:ed:d3:fa:
                    2a:91:85:15:98:05:55:2f:2b:fd:52:cf:17:7f:c0:
                    64:05:6a:99:3c:b9:dc:66:83:4f:b4:4b:5e:c7:e0:
                    b0:71:41:cc:8e:fe:c4:0e:50:a9:c5:77:bc:8a:da:
                    a8:f0:06:ad:9d:fa:8e:c7:e7:77:d8:d5:50:29:49:
                    d4:17:01:93:e0:12:d2:7a:e7:bc:5a:4d:0b:1d:a1:
                    0c:46:dd:63:7a:c1:2d:47:06:53:9c:65:1e:d0:87:
                    f1:a7:91:ff:4d:56:2b:69:f9:47:2b:c5:e8:c8:5f:
                    bb:5b:99:63:79:4b:d4:60:3a:82:04:22:99:59:90:
                    1f:d8:88:34:0d:8e:b7:49:2b:0c:89:7f:bd:39:86:
                    39:7f:ff:94:e7:60:fc:78:78:61:48:c1:b5:c0:b7:
                    c4:f4:9a:be:a4:cf:cf:5b:89:94:81:eb:57:86:08:
                    8b:61:7a:55:cc:2f:1a:2e:45:bb:14:17:1b:5e:1b:
                    86:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6F:A1:AD:3B:00:13:79:A7:A2:0A:AA:77:6E:55:0C:8B:7E:FF:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1505dba2-f5d8-4cfa-892e-d67f9fff862f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:21:c4:2e:ab:b2:70:49:71:14:e9:fb:fd:17:30:50:49:db:
         04:1a:2c:50:56:a6:80:98:64:bc:84:59:fa:4c:07:8a:34:c3:
         14:4c:ad:c5:03:e3:b6:55:c3:3a:41:71:74:69:55:ba:06:24:
         58:ec:18:af:85:8e:5f:d4:d2:b8:69:6a:c3:c6:05:47:62:cf:
         a9:a9:29:14:21:8f:49:6d:c0:00:d7:fe:29:5f:1e:cb:bd:10:
         9c:a0:3a:68:38:5a:8c:b9:72:ea:92:1a:60:c5:c3:b8:c1:96:
         c4:eb:39:d5:b4:ea:bf:4c:cd:cc:a8:b1:45:61:53:b4:ca:95:
         c4:e3:2a:34:0a:b3:a5:99:75:8c:a0:fa:25:6a:89:3c:93:15:
         3f:a9:d3:bd:e7:d0:04:e7:2e:2e:a9:34:93:9e:37:ff:a0:57:
         6b:ac:c9:80:04:d6:88:a6:11:63:24:a2:59:9b:75:bf:cb:f9:
         16:3c:47:44:68:db:15:ae:bc:c1:44:5a:05:1f:6d:77:2b:62:
         dc:53:0c:59:75:94:a7:ec:17:09:17:96:41:de:ce:84:67:c0:
         03:9b:5c:db:f6:ee:a3:74:5d:f5:2a:b9:57:31:df:5e:50:da:
         e0:6c:19:7b:0a:47:c8:f2:5b:d2:41:31:92:99:43:fc:6a:c5:
         a0:2b:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:08 2026 by rpki-client