Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73237f24-d10c-4fc6-8471-7f54fe7a3e25.roa
File:                     73237f24-d10c-4fc6-8471-7f54fe7a3e25.roa (raw, json)
Hash identifier:          vo7mE9UZM24HffCBVdwWaF6DS5Olkn//SgN+D4KPd3s=
Subject key identifier:   A9:5B:99:94:04:3B:E7:09:3A:64:44:B0:49:58:84:2D:12:C0:2F:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       457311B290E55B01341F5C853DE05E441A369AF6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73237f24-d10c-4fc6-8471-7f54fe7a3e25.roa
Signing time:             Wed 25 Feb 2026 01:50:33 +0000
ROA not before:           Wed 25 Feb 2026 01:50:33 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        40.165.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:73:11:b2:90:e5:5b:01:34:1f:5c:85:3d:e0:5e:44:1a:36:9a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:50:33 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=e87ce813722ae569eb47ac6b0dea937144f785193625962b2143c6d616a9e2ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:a5:91:64:cd:46:75:54:e2:76:f3:42:3d:
                    84:72:10:f1:ac:f0:1a:88:7f:96:d1:0f:79:9a:cf:
                    be:df:a1:e5:a8:6a:14:38:3c:55:5d:84:b5:ea:ec:
                    82:fb:ed:fc:75:cb:a1:09:59:2d:13:30:d4:d5:e3:
                    fd:8d:cf:c8:9a:94:7e:70:d3:02:24:29:65:f3:16:
                    09:13:c1:4d:1d:85:56:18:28:21:bb:06:18:d8:3a:
                    42:12:6c:79:6e:ef:a7:e7:fd:e0:c6:16:db:59:fd:
                    1d:43:e8:59:71:fb:23:79:cd:02:13:6c:5d:54:01:
                    a5:17:6a:85:d4:98:db:7a:f2:8c:7e:b1:7f:3b:9e:
                    18:7a:9c:21:c4:35:5d:8c:62:fe:23:15:25:2e:ee:
                    a9:d9:62:0d:49:e0:c5:28:96:b4:c1:2f:c6:32:b1:
                    b9:f1:4e:ab:19:c8:ed:78:fc:59:28:18:6d:2d:f7:
                    af:9d:75:82:5c:7a:e2:5d:4f:31:3b:f0:94:f9:b5:
                    e0:9c:79:52:c6:b9:d3:51:bf:fd:6e:5c:09:73:3a:
                    95:0a:7f:52:0b:8f:7c:f1:c9:0a:0a:a9:bd:52:f1:
                    52:ce:94:37:b2:53:b0:b1:34:32:6f:e2:b3:d8:67:
                    fa:91:ec:a4:41:56:2f:91:af:92:8b:a7:df:d8:0c:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5B:99:94:04:3B:E7:09:3A:64:44:B0:49:58:84:2D:12:C0:2F:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73237f24-d10c-4fc6-8471-7f54fe7a3e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:e6:39:85:f1:6f:c4:9a:a2:70:48:69:62:10:3a:46:bf:
         24:7f:2c:d2:a4:21:bd:e7:77:44:22:dc:03:d7:25:b0:04:61:
         9c:4d:c6:39:6a:5b:a7:d9:f4:6f:12:fc:af:7c:c1:d1:ac:8f:
         dc:60:0c:f6:0b:32:20:7e:8e:1c:5b:69:88:5b:12:95:21:5e:
         d6:bb:61:23:76:5d:fc:1c:b5:d2:e8:00:4c:eb:eb:e3:72:ef:
         1f:ae:c9:7b:74:6a:16:68:f9:45:06:9d:aa:7c:a1:0e:41:db:
         00:78:39:74:33:e4:2b:e2:5a:96:4f:21:bb:10:c7:f4:5c:14:
         56:19:93:33:6c:49:ee:75:ff:a7:8f:c5:90:fe:c1:7c:3b:4f:
         7e:77:55:df:42:7d:66:f6:c6:f2:17:47:2c:98:9a:32:9b:3f:
         95:1d:fa:51:25:3a:18:64:62:ed:e9:57:c9:d2:ab:25:1b:9b:
         52:63:67:74:9f:ff:e1:f9:b1:99:b9:0d:c7:52:3b:fa:66:3d:
         61:3d:c3:85:cd:3a:a1:8b:ac:12:d4:41:92:b2:ea:32:b6:8b:
         f1:5f:81:25:e5:52:07:a6:84:b1:9e:87:a0:61:d0:84:6f:30:
         3b:53:d1:e1:ca:63:83:2b:32:d1:57:e1:d5:f0:6b:44:32:73:
         75:65:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:50 2026 by rpki-client