Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa
File:                     8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa (raw, json)
Hash identifier:          /DyiH2fEaJsPeoZ3GBYYbIDLYV2kgCfTrK7NUxSlucs=
Subject key identifier:   54:CE:20:D7:8F:0C:7A:B8:90:A2:A5:8D:42:42:C2:20:A5:2C:59:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C91C60BB815C9F7F2FDCE5378328BB81680FB0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa
Signing time:             Fri 27 Feb 2026 00:00:18 +0000
ROA not before:           Fri 27 Feb 2026 00:00:18 +0000
ROA not after:            Thu 28 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:91:c6:0b:b8:15:c9:f7:f2:fd:ce:53:78:32:8b:b8:16:80:fb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 27 00:00:18 2026 GMT
            Not After : May 28 23:59:59 2026 GMT
        Subject: serialNumber=2e765ada2493073ee36a6e422b5d2f4f3a0721cb270e1b0dfff7861717e0d026, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:39:49:47:a4:c4:f6:3b:b5:3e:6b:79:39:54:
                    80:30:a4:b1:88:7a:fe:74:2e:45:5a:3e:8f:c3:0a:
                    6d:da:a6:43:ef:36:de:16:69:b8:1a:45:fa:fb:34:
                    0e:ff:19:7d:35:c2:f1:e8:ed:16:34:50:5e:3c:06:
                    f8:cc:2e:38:e6:cf:57:9e:06:44:7a:60:a0:ee:e5:
                    a7:85:ce:b6:f0:90:e1:95:c4:24:a8:de:97:40:cf:
                    45:bd:9e:ac:bf:7b:d3:f2:07:08:cd:34:bc:42:f7:
                    96:15:df:b0:d8:d1:84:02:83:b2:53:a6:49:ce:42:
                    60:19:28:5e:7c:8d:2c:87:84:fd:05:83:c4:f1:58:
                    e7:63:6b:b4:1f:eb:6e:72:78:34:54:fb:62:11:b0:
                    69:37:f6:b1:a1:df:62:a6:a3:53:8d:fb:39:7e:fc:
                    1b:83:b2:2f:44:db:09:43:31:49:d0:13:1b:ec:86:
                    e2:88:b2:db:0f:f7:ab:54:80:0d:3a:59:69:30:a3:
                    4e:2e:7c:d3:a1:29:2e:53:2c:e3:02:6d:22:41:b6:
                    ab:7f:ef:f0:60:b1:75:eb:a7:d5:a9:ad:61:21:a1:
                    47:b9:db:4b:28:a5:97:24:c9:04:4d:d0:9c:a7:50:
                    0f:a0:68:cf:53:53:87:f3:d5:28:7f:da:6b:61:f5:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CE:20:D7:8F:0C:7A:B8:90:A2:A5:8D:42:42:C2:20:A5:2C:59:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:87:d9:4e:6b:d4:b7:0b:67:bf:d7:0b:ec:29:da:e8:68:
         d2:76:af:21:ae:ab:ba:12:86:aa:f5:97:0e:91:5b:c4:54:87:
         fe:9b:d1:08:2d:a5:58:56:91:dc:7c:30:9f:4d:37:06:c6:19:
         b0:ed:dd:e4:45:6b:42:3f:59:9d:4f:fe:c7:93:b7:d4:ba:f3:
         87:76:38:b1:fd:82:82:cc:d5:bf:14:84:bf:52:cd:98:35:e6:
         90:39:c2:3d:09:23:cc:64:d9:2f:a1:9d:e6:b2:3a:cb:2d:3d:
         2d:3b:7a:cf:dc:7f:2f:42:2e:4a:c1:cd:d8:48:6e:14:f5:d5:
         d6:2c:7a:55:73:ae:5c:17:68:85:a7:73:5e:6d:7d:36:77:78:
         27:a9:aa:93:ac:a9:cf:cd:a0:63:87:cd:44:9d:08:e8:22:63:
         da:46:64:00:ad:d7:b2:cd:b5:dc:d0:98:a9:19:98:5b:09:10:
         11:9b:70:65:87:bf:b1:9b:3e:f0:de:16:a9:93:2a:89:3f:1f:
         ff:7b:9e:97:1b:5c:40:9b:76:34:43:a8:76:96:c9:aa:6a:4c:
         62:d6:c4:30:36:cb:a5:f0:39:2c:3f:3e:9b:8b:fe:45:cd:4f:
         75:53:eb:d0:09:b1:88:f8:61:0f:f2:9c:f2:7c:eb:39:eb:d3:
         27:c8:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:34 2026 by rpki-client