Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa
File:                     c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa (raw, json)
Hash identifier:          lA+gwnQBvZfaseiLlQZpnN4BWLhsDRLAsZe7ZVMtmzE=
Subject key identifier:   D8:C0:94:DF:DC:E7:69:31:73:3A:FA:67:60:72:A0:41:F1:C6:91:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4913AD96622957C4D250A8DF1FAA281DE34E2A0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa
Signing time:             Sat 14 Feb 2026 00:10:49 +0000
ROA not before:           Sat 14 Feb 2026 00:10:49 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:13:ad:96:62:29:57:c4:d2:50:a8:df:1f:aa:28:1d:e3:4e:2a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:10:49 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=59e59e320d492d1b0e4f5d7d28ff47017f6ad3c605fc7874879b79d9c4c879c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:b8:a4:07:86:c9:19:a9:b5:95:41:d9:6f:
                    34:bb:b5:cc:89:28:d6:df:43:ee:54:17:56:9b:ed:
                    00:8a:ee:69:4b:10:ec:59:64:08:71:84:72:51:ea:
                    f8:c5:82:83:88:b0:0f:b3:f3:9b:4e:a6:1d:c2:24:
                    8f:5a:9a:48:67:45:d9:dc:0c:a3:91:86:bf:9e:e8:
                    6a:73:24:44:be:af:d2:22:f2:19:15:97:5e:dc:d8:
                    92:e7:31:ac:48:ea:0c:70:1a:67:a9:93:c2:e2:78:
                    ad:b9:34:c1:54:7d:40:c4:22:b6:fd:f1:d5:04:ab:
                    4a:88:11:98:8c:4e:80:ee:a2:08:cc:28:3c:b3:5b:
                    1e:11:99:da:75:7e:fd:c3:28:f3:ae:42:bb:b5:90:
                    18:8c:08:51:3c:f7:06:68:20:d7:29:52:7e:99:5e:
                    b2:e8:2b:6d:e4:74:c9:54:44:cc:ad:85:dc:6c:a5:
                    5b:25:95:f4:30:3d:fa:e8:fd:97:96:49:b7:95:50:
                    28:56:1b:ac:e1:ac:7b:1e:0c:41:cd:0f:2b:22:1d:
                    82:ab:12:5f:b7:40:27:b9:e1:55:0b:e1:c0:1b:a4:
                    4b:77:c0:f1:15:01:02:e4:64:ea:60:dd:f3:a5:91:
                    f1:1f:e2:b0:2c:b3:a8:54:b6:61:df:7b:1c:aa:46:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C0:94:DF:DC:E7:69:31:73:3A:FA:67:60:72:A0:41:F1:C6:91:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:7d:f6:4f:d0:45:6b:75:a1:ce:20:f5:94:d9:0e:66:3f:1c:
         98:f6:ad:4d:ca:3d:a5:1c:f5:6f:81:7d:81:09:d6:45:1a:b5:
         80:a6:6a:97:ca:69:49:09:4e:11:d8:6e:5e:cb:97:f6:3c:57:
         89:e8:10:4d:2a:57:9e:e3:1c:d9:7f:a7:ce:0e:a1:d2:26:8e:
         1a:8a:e4:3c:63:77:5a:9b:69:fe:af:38:c3:17:f4:a8:f9:60:
         f2:a5:11:b0:a8:c3:cd:65:bf:32:14:ef:35:b5:2b:a8:cc:2c:
         af:04:2b:26:c1:5b:58:bd:bc:20:fa:42:e9:8a:29:61:00:0e:
         81:16:75:06:45:c5:3e:2a:42:0d:e9:7a:2a:29:05:cf:c8:7a:
         31:00:f5:72:21:c6:69:ee:e6:b7:12:53:fe:92:15:f4:e3:4c:
         a5:08:be:68:7a:1d:45:dd:c4:9a:bc:70:61:d2:6b:ba:c9:ca:
         56:13:4a:30:b3:64:83:5c:2e:41:98:ef:8c:02:3e:53:f8:fd:
         a2:63:5b:bf:1b:ba:62:de:25:59:87:87:7e:c7:6b:15:da:06:
         b7:1a:f5:1c:e5:43:e2:5d:57:40:bc:44:fb:a6:49:70:0e:ba:
         12:f6:5b:3b:17:ef:c8:2e:6c:eb:0b:18:1c:d2:06:7c:5a:55:
         ae:2b:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:28 2026 by rpki-client