Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263a53be-93fd-449b-afc4-20df6f689c9a.roa
File:                     263a53be-93fd-449b-afc4-20df6f689c9a.roa (raw, json)
Hash identifier:          sRJTl/blZbxc6cgtaWTAGQY1nm5OYmvPzm48vAeof8Y=
Subject key identifier:   93:66:30:20:A6:4D:33:8F:FA:4F:49:47:3B:41:A8:3B:57:5B:92:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F2BAF8BC12B7C4CC0079FB572B1C7418A7041D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263a53be-93fd-449b-afc4-20df6f689c9a.roa
Signing time:             Wed 25 Feb 2026 00:40:04 +0000
ROA not before:           Wed 25 Feb 2026 00:40:04 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.121.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2b:af:8b:c1:2b:7c:4c:c0:07:9f:b5:72:b1:c7:41:8a:70:41:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 00:40:04 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=0c775eff8e838c361ec4fe917a430d5defb2a0b66ad94b0a708c9fa2210ed188, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:1b:a6:92:b7:ac:65:89:17:2f:42:ed:5b:
                    18:88:f6:bf:29:7c:43:30:69:9b:8d:a8:68:90:17:
                    ce:fc:6a:1e:f1:07:06:75:3f:fe:a7:e0:23:23:ca:
                    89:91:2c:f6:b3:e5:8b:d7:b0:81:87:1c:ae:de:e5:
                    b7:d5:9f:24:53:3e:8a:5d:b6:99:0d:64:52:20:9b:
                    18:49:18:25:f1:7f:dd:31:5b:7c:5b:1d:a0:64:ee:
                    09:ef:68:07:f7:92:0b:46:8c:c0:5e:58:ab:f2:a0:
                    21:43:58:ec:cb:ad:ee:e1:80:14:34:f4:7c:6d:44:
                    68:b2:d6:c3:90:9c:80:38:98:f7:10:c9:cf:8b:6f:
                    9c:77:56:bf:83:80:53:4c:c0:28:b6:e4:9e:3a:d6:
                    4e:75:96:83:69:57:21:dd:05:0f:3c:05:78:dc:c0:
                    f5:81:bf:18:db:a1:e2:1f:b4:fe:0b:df:4f:96:eb:
                    81:e1:b9:cf:09:1a:d8:98:29:46:ee:11:c6:e2:3e:
                    bb:ee:49:1c:a8:fe:a4:06:9d:c5:65:e8:8e:44:e3:
                    f9:5a:24:15:94:07:da:45:12:64:94:67:6f:f1:f5:
                    b3:18:60:5a:7f:19:df:6d:e5:1d:ea:73:e5:93:f8:
                    04:6f:f6:32:b9:31:8d:ae:b8:55:52:ff:98:90:5f:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:66:30:20:A6:4D:33:8F:FA:4F:49:47:3B:41:A8:3B:57:5B:92:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263a53be-93fd-449b-afc4-20df6f689c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.121.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:86:87:4e:bc:bc:d1:a6:52:e0:65:71:dc:2b:40:fc:52:fc:
         38:67:df:47:eb:e3:14:1b:e7:cb:b3:28:22:56:0f:2a:dc:68:
         63:eb:8c:b7:51:18:f4:63:76:7a:8f:11:61:ad:b8:80:27:83:
         e8:c3:60:4c:c8:c9:53:7b:d3:f9:98:af:78:af:33:25:d6:56:
         89:14:eb:0e:8e:b1:69:70:ec:b8:ea:b8:bb:a9:fa:cf:18:fd:
         17:3c:1f:af:79:3a:65:21:f0:3f:0e:22:c3:ce:d6:04:f8:f5:
         4b:93:3b:a0:9b:c9:95:08:67:f3:cd:c5:62:87:ad:8a:02:6f:
         2e:d7:61:49:4b:58:f1:80:ba:fd:79:35:a7:d8:bb:d0:6a:46:
         72:8b:25:28:ed:36:83:4d:6d:d8:ce:cf:6a:f7:73:31:7c:c1:
         3d:9d:59:ef:1b:f1:c0:9d:7f:46:60:96:60:96:93:27:7d:8c:
         8d:2c:e1:64:92:f6:9d:09:6d:9c:f6:2a:3c:f8:45:f5:be:a3:
         5a:e6:fb:69:58:a6:74:b0:43:40:08:ce:e7:37:c3:cf:db:64:
         45:d1:ff:f1:0b:1e:4f:fa:7d:dd:b1:73:13:2b:79:2d:67:41:
         8e:8c:e2:ec:c9:e7:af:c6:e6:75:1e:8c:4d:99:fd:7d:c3:a9:
         08:27:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:21:54 2026 by rpki-client