Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa
File:                     b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa (raw, json)
Hash identifier:          /JktpYOkpFElyOKv8Z3QVCGmLjbH74dhfuMnHZx+Mzw=
Subject key identifier:   25:22:91:AA:96:64:59:08:CD:C9:96:73:37:79:FB:82:13:76:0F:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       288DCC6E979F59E7A7317798C7240B20BBEF3FAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa
Signing time:             Sun 15 Feb 2026 00:20:10 +0000
ROA not before:           Sun 15 Feb 2026 00:20:10 +0000
ROA not after:            Sat 16 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8d:cc:6e:97:9f:59:e7:a7:31:77:98:c7:24:0b:20:bb:ef:3f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 15 00:20:10 2026 GMT
            Not After : May 16 23:59:59 2026 GMT
        Subject: serialNumber=0867055fd22b12790dcb79db7fe5ee43ee6f08c1ae8eb4f8c6521b182c6c4cc1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:ae:4f:47:be:54:bc:c3:2b:27:d6:9f:02:
                    8b:1f:21:c3:6d:be:c0:e4:dd:5b:e0:a8:b4:34:69:
                    82:1f:4f:35:bb:25:03:c5:7e:68:0b:29:e3:ff:84:
                    4e:e2:5e:eb:b7:a7:cc:be:ef:9b:90:db:15:92:7a:
                    f8:e9:c1:bd:5e:75:9d:e2:09:a4:c7:52:38:42:8a:
                    96:81:8d:d4:97:50:ca:90:60:e4:74:45:7d:97:fa:
                    19:79:0f:5d:a9:85:89:76:26:59:4c:5d:e7:42:0a:
                    e8:9a:7c:83:62:48:f6:8c:3f:39:88:9c:a5:dc:03:
                    d5:31:47:ef:04:cc:4d:be:10:47:0e:e0:1b:6e:23:
                    5a:66:1f:9d:aa:3a:e2:78:2b:e4:37:fd:a1:1e:22:
                    14:70:d1:25:1d:24:d9:66:97:b7:bf:5b:c2:2a:6a:
                    c9:99:ce:32:82:54:df:69:f4:64:00:f7:1f:4b:b9:
                    55:13:2f:b2:46:4d:21:bc:4b:ef:d0:e2:47:04:c3:
                    c2:ba:e1:86:94:34:a9:6b:20:8a:20:0b:b0:96:84:
                    62:3f:04:06:2d:36:7f:4c:d0:01:e6:82:04:74:7e:
                    7b:1d:90:64:a9:0f:f7:c2:83:b8:ac:d2:dd:b5:93:
                    94:83:9a:6b:40:09:f5:fd:2b:db:46:39:34:a4:77:
                    62:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:91:AA:96:64:59:08:CD:C9:96:73:37:79:FB:82:13:76:0F:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d4:66:27:bd:c6:ad:49:1c:11:77:0e:3c:cd:c8:5e:20:9b:85:
         9b:b9:cb:c6:c2:04:99:26:cc:21:dd:87:69:16:6a:93:eb:ba:
         f6:5a:d1:63:2a:7f:73:ec:97:24:2b:f4:4d:f4:28:45:f9:0b:
         c7:b7:ea:5b:67:99:a0:3b:7c:f1:a7:2f:88:06:84:ac:ab:8b:
         67:b1:4e:5e:a8:cf:48:28:7a:21:f1:99:c5:87:ca:90:a9:a3:
         c6:fd:83:c0:20:59:36:09:06:2c:16:1f:e8:84:65:54:30:c5:
         51:0a:e2:ab:b2:df:d1:d9:d1:f2:1c:c5:81:3f:30:8e:ad:78:
         9d:3d:d0:b4:02:04:d6:bb:c1:15:6b:ca:11:5c:6e:6f:58:62:
         1c:0d:a7:7f:fe:93:c3:68:22:29:e3:f4:5b:6c:ca:1d:72:17:
         44:36:8f:3b:f5:30:47:fe:03:bf:d4:f0:a2:e0:1b:7e:f3:a1:
         71:62:99:87:9e:49:f6:9b:2e:9c:7d:a1:de:cc:cf:dd:88:fc:
         e7:75:33:60:41:ab:91:c3:72:67:fc:d7:af:54:68:05:94:85:
         cc:25:8d:86:0c:f8:d5:31:70:76:46:6b:4f:8b:44:be:3c:41:
         34:f0:ab:be:32:2a:79:30:5e:38:21:b6:ab:b9:6c:25:56:b0:
         7a:82:7d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:35 2026 by rpki-client