Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa
File:                     6928a406-38e7-41d6-a4c4-6665e62bdcea.roa (raw, json)
Hash identifier:          xJ8ZiOQMzEFtuPBs6CyHjWk/oMQ0BoZW3cY0Y4pwla4=
Subject key identifier:   16:47:FC:B6:38:CD:94:F7:3F:60:22:5C:5C:86:F2:E2:87:82:D6:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45FF8DBAE4E802CCB738FD45AAF96B40260D8224
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa
Signing time:             Fri 13 Feb 2026 00:40:45 +0000
ROA not before:           Fri 13 Feb 2026 00:40:45 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.144.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ff:8d:ba:e4:e8:02:cc:b7:38:fd:45:aa:f9:6b:40:26:0d:82:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:40:45 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=3c5cf2b74cad4465bd886f751a16a9a554da6fba1ffba98757f8f7f6a6fe511b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:a2:26:4d:02:7d:47:6d:e8:dd:d5:56:7a:
                    2d:61:b8:96:54:75:7a:11:92:42:89:1a:d4:10:eb:
                    0b:f7:66:57:45:dc:c4:b8:9f:e4:47:c1:25:4f:78:
                    2a:0d:94:5c:1e:f4:1f:d1:84:83:e8:0f:a8:ce:f7:
                    5e:ae:8d:6a:48:ec:fa:b5:3c:93:0d:eb:d2:88:08:
                    1f:04:17:10:cd:52:86:ef:57:91:da:60:f3:a3:0e:
                    20:51:d3:39:86:bd:6b:7c:98:bc:73:c3:ab:20:c5:
                    35:78:7b:8d:7c:00:2a:63:48:a5:69:d9:c3:87:18:
                    aa:db:2a:ab:79:42:31:4d:70:63:e6:55:27:e1:27:
                    c6:52:74:85:2f:02:b8:7f:9c:14:0f:2b:21:f7:25:
                    5d:76:57:ff:73:3a:c3:a9:c6:50:93:9c:5e:0f:d1:
                    2c:e3:24:5d:ad:68:99:82:80:67:ec:3b:36:5b:35:
                    8d:f8:ba:45:e9:83:fe:bf:ef:9d:40:41:a6:eb:8c:
                    14:2c:7c:ec:8d:49:6f:9a:fb:31:b4:41:ea:7c:45:
                    a1:24:f0:79:ef:3c:fd:d9:97:e9:3d:ac:ad:1f:6e:
                    38:c3:1e:db:f6:b2:03:cf:7e:7a:68:0c:fa:78:c9:
                    27:54:4b:00:e8:19:81:34:5a:df:d3:47:83:11:09:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:47:FC:B6:38:CD:94:F7:3F:60:22:5C:5C:86:F2:E2:87:82:D6:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.144.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:0d:f7:cf:db:eb:0c:12:66:87:10:30:43:c7:8d:d6:f4:27:
         bc:93:de:ef:14:b0:da:2a:6c:58:ac:64:4b:07:03:24:85:84:
         ad:15:36:92:96:bb:2a:29:8b:64:39:fd:06:6b:56:7e:71:b3:
         17:5f:e1:ef:7c:03:58:af:6e:4c:38:61:27:55:fe:5f:9f:1c:
         bb:b5:44:f2:fe:68:0e:5d:8f:16:22:c8:43:cf:de:64:44:1e:
         ed:6c:d7:9c:4a:67:29:32:2e:e3:49:d3:30:3a:fd:c2:7c:8a:
         44:df:db:9c:37:a4:79:22:77:13:9e:c3:02:ca:13:43:7b:29:
         16:a7:9f:74:57:c8:0e:d4:25:8f:ed:44:2d:0b:6e:2f:42:63:
         b7:00:4d:4b:09:53:43:5c:66:80:40:8b:d7:62:9a:aa:34:b3:
         19:69:fa:d1:53:ec:77:ec:c1:6a:b9:24:52:2d:f6:91:5c:85:
         9f:81:5a:61:d4:c4:e1:f7:f1:8b:a7:a6:e6:6d:35:a6:36:54:
         68:bd:41:b7:be:f5:d8:04:f0:8b:68:7d:7c:23:0a:bc:b9:9f:
         aa:60:ab:fa:9a:56:dc:e8:47:6b:00:fe:1a:a7:d6:c0:d8:5d:
         a4:96:07:de:0c:ab:0c:3d:f7:b3:ce:fc:05:6e:2e:9b:7f:ad:
         50:1d:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:10 2026 by rpki-client