Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90250894-227b-4244-97af-9b2216446b2c.roa
File:                     90250894-227b-4244-97af-9b2216446b2c.roa (raw, json)
Hash identifier:          SsFNTn47IhE0L2vSkNF/aFC/wa8RQxNDZpZnZnqRHYM=
Subject key identifier:   32:6A:00:B6:E7:30:89:45:82:66:43:A1:75:FE:C8:02:6E:01:C6:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A33DB9452CB6E0C34CB36C2E1E399CE5A5FE409
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90250894-227b-4244-97af-9b2216446b2c.roa
Signing time:             Fri 13 Feb 2026 00:21:18 +0000
ROA not before:           Fri 13 Feb 2026 00:21:18 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     6167
IP address blocks:        204.126.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:33:db:94:52:cb:6e:0c:34:cb:36:c2:e1:e3:99:ce:5a:5f:e4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:21:18 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f414b0ebb57b7efb73895ac247fb4040d97f1a798e0b7c9d38ed603d0098ec48, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:24:ab:f4:48:ba:e8:8f:61:77:47:f4:26:
                    a5:56:b4:39:ef:6c:21:0a:6c:a6:65:f4:12:00:16:
                    e3:7f:02:f1:9d:78:2a:a4:97:1f:c2:04:8f:78:da:
                    58:e7:06:7b:90:f2:65:c5:6b:8d:12:7f:86:fb:a4:
                    74:61:f9:e2:aa:43:1f:85:03:f0:bf:68:38:a9:19:
                    78:51:47:9e:fd:13:45:26:cf:0a:19:44:5d:c8:37:
                    b2:57:13:54:99:53:a0:ff:64:2a:df:79:a8:0d:f8:
                    e9:da:63:c3:1c:81:73:c9:aa:c1:63:8e:66:3b:8a:
                    06:9b:bf:01:5e:7c:81:40:ec:fe:61:77:94:00:c8:
                    41:09:21:ac:5a:c5:00:36:75:53:b1:ea:06:f5:c3:
                    ef:cc:3e:f1:d2:f1:74:e6:ba:eb:9d:f4:e1:de:35:
                    af:3e:42:80:d6:7a:d0:db:ea:63:c2:ed:76:f0:7e:
                    64:30:67:80:8e:66:aa:f1:77:09:69:4e:40:0f:06:
                    66:e1:15:ef:83:4d:ee:60:7b:c2:3e:a1:60:b4:19:
                    f9:ad:72:44:84:c4:f6:ff:f6:46:37:fd:cd:19:22:
                    98:c3:49:94:4b:fd:74:7d:d2:10:a5:b9:7e:7d:45:
                    43:48:9f:11:a5:66:70:4e:74:91:fa:8e:ea:1e:f6:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6A:00:B6:E7:30:89:45:82:66:43:A1:75:FE:C8:02:6E:01:C6:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90250894-227b-4244-97af-9b2216446b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:30:52:ce:fa:b4:92:09:3f:b1:1e:da:ab:26:2a:43:ea:
         0d:6e:d7:ac:34:fb:5b:35:03:51:ad:0f:26:b0:00:5b:a5:f9:
         9e:cb:d5:99:24:e7:83:e7:45:c9:f1:d2:ef:8a:4b:81:ab:85:
         e9:80:16:17:45:63:ef:aa:ac:95:ee:53:c1:39:cb:71:07:a0:
         13:03:b1:01:94:18:1d:84:e5:40:8d:9e:c3:de:a6:b8:69:20:
         f1:1c:14:e9:71:0a:6b:66:85:37:3c:8b:fc:5f:b9:61:88:f6:
         da:1b:b2:b9:78:85:54:55:16:49:e8:d0:c8:4e:a7:57:ae:f8:
         e4:a8:d6:89:9a:f2:0c:65:10:3f:d0:b6:f3:1f:a6:b3:be:a5:
         b5:e5:b6:fb:70:7f:13:ee:c5:60:df:a3:c6:8a:2c:d8:1d:46:
         22:c6:ac:92:c8:31:42:44:99:d1:2e:ea:80:b8:d4:11:f4:22:
         ae:ab:04:fd:04:cf:a0:36:3c:63:f1:dd:b2:b6:d8:86:8b:8e:
         d5:5c:f0:0b:02:b6:86:0f:54:ed:30:49:d1:94:45:36:96:f8:
         71:78:65:45:e4:b0:83:cd:49:5d:3c:49:0c:64:02:b1:5a:84:
         fe:4c:45:e5:52:eb:cd:de:37:77:fd:98:06:77:32:83:ed:cc:
         ac:76:af:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:26 2026 by rpki-client