Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b05e238-05bc-4024-8f4e-9e39e735bfb9.roa
File:                     4b05e238-05bc-4024-8f4e-9e39e735bfb9.roa (raw, json)
Hash identifier:          3XERVFWAE9t4nuAqNO4rmtOtpWXwiXi9a067HcT7jnw=
Subject key identifier:   D2:41:42:AB:E0:57:0E:8E:C1:C0:25:A2:FC:99:AD:FD:1C:8D:B8:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55C41AE9BBCA6A6B532FFAEF73B67CDA4579ED55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b05e238-05bc-4024-8f4e-9e39e735bfb9.roa
Signing time:             Wed 18 Feb 2026 00:30:57 +0000
ROA not before:           Wed 18 Feb 2026 00:30:57 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.246.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c4:1a:e9:bb:ca:6a:6b:53:2f:fa:ef:73:b6:7c:da:45:79:ed:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:30:57 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=60f535b49d602c5be4a01345b21ad4abb6b6b6f99cb2a05fb4089ed6e6f0dfa2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:c4:99:74:de:8c:b6:52:d6:b5:00:c9:61:
                    9c:e6:43:9c:0d:69:90:55:88:ef:91:cc:5f:fb:52:
                    5c:c5:3b:ee:9b:f4:c1:b0:e1:ab:b6:0b:3f:77:b8:
                    14:dc:d6:d3:4a:b7:a3:c3:c7:10:10:33:96:5b:b9:
                    06:01:22:a4:ea:b5:5a:19:e3:e8:26:84:d1:d5:f6:
                    3a:88:83:1b:12:3d:ca:a3:8b:f7:7f:92:11:bd:7f:
                    d2:4c:24:2d:ec:91:2c:fa:e3:35:b0:6b:90:9e:45:
                    02:9c:85:1a:06:50:d6:8b:c0:83:67:fb:6c:16:af:
                    74:c9:bd:13:13:7b:2f:e6:9d:0d:d5:71:16:40:be:
                    52:13:1b:28:46:7e:66:b2:68:6f:01:48:90:7b:ea:
                    c9:42:05:f9:86:38:da:c2:b1:6f:9c:57:b0:42:90:
                    06:04:21:8e:e3:af:46:bb:63:38:41:d8:cc:16:a3:
                    b0:95:7f:b4:70:a7:63:45:12:e7:ff:18:e3:a7:2a:
                    2d:d0:a9:75:6e:29:70:7f:d5:f2:6c:0b:c4:4d:e5:
                    ff:9c:4f:08:30:d0:32:89:1f:27:7f:48:9e:1d:61:
                    29:34:5d:db:04:e8:ea:6d:bd:8a:a2:ea:53:b0:ea:
                    73:56:7c:a9:e7:53:11:13:0f:a5:7d:f4:6f:71:91:
                    4e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:41:42:AB:E0:57:0E:8E:C1:C0:25:A2:FC:99:AD:FD:1C:8D:B8:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b05e238-05bc-4024-8f4e-9e39e735bfb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:4a:27:09:67:14:8d:04:c9:f4:d0:b7:e8:08:c2:44:fb:
         07:6c:63:f5:93:78:74:72:01:e2:4c:b4:d7:c9:6b:60:94:fe:
         e6:46:43:4b:70:65:cc:59:b8:e4:24:92:ee:ef:bf:66:71:42:
         b8:85:64:72:a2:d6:58:e1:31:ba:a5:1f:08:74:aa:8f:51:15:
         52:7d:2f:7d:d9:8c:06:ea:f5:43:0b:2a:1a:44:1c:5e:7c:d7:
         8e:aa:7d:45:42:0f:36:02:a0:6f:c9:94:97:ba:e9:e6:18:f8:
         5a:e9:c3:f2:3b:1b:46:40:c3:36:a4:07:c4:ef:1a:21:24:0d:
         85:32:c5:95:fd:5d:ed:02:9e:e3:6d:a3:e5:12:98:cd:a1:99:
         16:5d:27:10:f4:a6:51:3e:96:64:12:8e:e2:1e:d4:a7:20:f2:
         f5:25:4e:b4:03:5d:9e:fd:ee:3e:ab:cf:96:93:d5:20:d2:1c:
         9e:83:50:f0:1c:08:7f:7f:23:8a:b1:f8:98:73:99:de:1e:cd:
         44:59:df:a1:7c:55:9e:27:ba:b3:24:40:c0:e7:a1:95:35:a8:
         2d:32:21:c7:a5:26:2f:ed:71:5c:e9:bb:ef:3a:f7:09:e3:54:
         f3:0c:4d:81:70:ca:c2:b2:c2:d5:01:47:3e:30:33:db:d5:4d:
         7f:e9:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:20 2026 by rpki-client