Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b19207-d242-447f-be92-5f266b9a2bc8.roa
File:                     26b19207-d242-447f-be92-5f266b9a2bc8.roa (raw, json)
Hash identifier:          Mp9eKPbVeYABexweHZhd5nX3qnkY+ASncLfPotVOE+g=
Subject key identifier:   65:7D:DB:61:F3:C9:47:7B:51:85:FF:A3:57:42:28:BA:89:9B:9C:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65BFE00CF629F6C439F3947851267CAA9D16D5BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b19207-d242-447f-be92-5f266b9a2bc8.roa
Signing time:             Sat 21 Feb 2026 01:10:07 +0000
ROA not before:           Sat 21 Feb 2026 01:10:07 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:bf:e0:0c:f6:29:f6:c4:39:f3:94:78:51:26:7c:aa:9d:16:d5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:10:07 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=4dd875306c3f16a7fd05f3f80098f685db0492414b8a32096829a013fcba17bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:72:bb:35:23:44:8e:ee:e9:86:69:e3:9e:
                    d0:90:21:21:58:f9:3c:aa:ad:81:54:e3:50:90:6a:
                    5d:35:46:38:83:dc:32:1d:a3:b9:0b:90:2e:be:d0:
                    63:6a:d6:a4:6e:e3:eb:db:1d:fb:06:0d:18:c6:e6:
                    f0:28:c5:8e:28:dc:63:8e:82:c9:fe:f3:12:3a:ce:
                    ad:74:cc:88:de:f8:81:cc:1e:00:9f:73:d7:64:0a:
                    f0:3a:b5:1a:13:8e:8f:8a:ad:1f:2a:85:68:05:05:
                    46:bd:4e:0e:d8:b5:41:e6:e4:37:fa:ee:1a:1f:4b:
                    95:7f:7a:d3:0c:0d:cf:cd:29:66:36:8d:74:fb:ce:
                    13:08:67:98:26:6e:d4:f2:4e:57:c2:4e:ff:de:f0:
                    1e:d5:c8:71:1b:8e:4d:f7:18:02:21:28:e0:62:79:
                    e1:fe:bd:7a:5b:9c:e8:9c:b1:17:cf:d0:c3:67:d7:
                    8b:04:de:a8:2d:5d:fa:5b:2b:a3:c6:6e:5a:f4:7b:
                    7c:07:1d:93:96:3a:b2:24:13:8b:5d:d1:d3:5e:12:
                    56:bb:d4:3f:dc:c6:f6:e8:c5:2b:0f:39:ba:8c:6e:
                    f5:60:95:30:3c:6b:bc:07:ba:35:37:5f:06:e4:c3:
                    15:37:4e:77:94:56:18:14:b7:d5:64:c6:73:be:10:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7D:DB:61:F3:C9:47:7B:51:85:FF:A3:57:42:28:BA:89:9B:9C:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b19207-d242-447f-be92-5f266b9a2bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:ce:4f:c3:3d:52:ab:8e:58:0e:47:2c:87:ee:9e:2a:a9:d8:
         10:f5:0f:a7:cf:65:53:cd:90:9d:86:78:cb:79:7c:0c:f5:dc:
         98:e8:2b:44:54:9f:1a:50:d1:5f:da:49:f4:bf:e3:cd:39:09:
         58:b1:3a:20:86:76:98:03:67:7f:ce:bd:bb:d0:e4:78:2f:46:
         2e:51:3d:2d:f0:ad:f1:93:fa:9a:e9:ce:dc:91:c3:30:60:ba:
         bd:c4:bd:15:07:99:c3:23:68:2e:71:20:6a:bb:f8:bc:40:04:
         62:53:dd:95:b3:9a:b1:48:97:e9:74:c8:00:72:c2:91:f1:31:
         fc:76:3a:e5:7f:e3:b4:81:7c:f5:05:53:71:03:27:d4:d6:b7:
         34:ac:f1:c3:30:72:8e:c5:c7:98:f7:1d:26:2c:af:7d:c3:cd:
         54:f0:e3:fb:99:11:01:f0:ae:45:f0:d8:ef:36:6f:d2:72:3b:
         00:a1:af:92:67:82:d9:7f:be:ae:1b:a1:c0:31:80:1a:48:79:
         50:18:37:fe:f8:80:b8:56:78:c9:09:f5:9e:13:7c:a3:7c:62:
         86:2c:67:d5:0f:01:d2:07:bd:57:48:40:a1:ed:a3:7e:40:35:
         08:60:50:8c:8d:1a:80:59:7e:5c:e4:db:ed:c1:8d:26:6e:d3:
         7a:75:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:41 2026 by rpki-client