Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7674f57-d822-482d-8209-cb53dbca95b8.roa
File:                     c7674f57-d822-482d-8209-cb53dbca95b8.roa (raw, json)
Hash identifier:          72VfHgVwk6+U/beOdE2C2BDpgcSgqYP+Tl76l2Zvwrk=
Subject key identifier:   05:A6:A2:EE:51:4F:64:27:C8:D2:AE:51:73:EF:79:1B:84:89:AC:B7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B35EFC2E61574DEDC2B7DD63786C727C9CB88C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7674f57-d822-482d-8209-cb53dbca95b8.roa
Signing time:             Fri 13 Feb 2026 00:21:16 +0000
ROA not before:           Fri 13 Feb 2026 00:21:16 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.27.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:35:ef:c2:e6:15:74:de:dc:2b:7d:d6:37:86:c7:27:c9:cb:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:21:16 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=bf671121753573a6ef794a6ac03479ab29fe128e953bc4f1a4a11a882df193d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:2a:c3:c8:bd:85:46:09:db:25:bb:3c:09:
                    b4:44:22:84:e6:75:f8:b1:d7:05:98:f2:65:0b:d0:
                    45:95:c8:4d:6f:e6:ca:f6:ba:c4:8b:8d:19:27:d1:
                    e0:fb:ba:9a:03:5d:9c:c0:1d:49:bf:e3:6e:50:cc:
                    a2:0d:cc:9c:42:c6:3b:ca:56:40:89:e5:88:5c:34:
                    02:26:4c:a9:2e:96:01:b3:5f:db:31:ee:44:8b:ac:
                    2e:f2:0a:ff:6b:ec:25:cc:4f:33:a1:fe:3b:dd:11:
                    ec:c1:5e:58:40:e7:f6:ef:a6:c8:f0:7f:e4:b9:aa:
                    db:fb:3f:0a:50:bc:8e:96:f4:37:6c:d6:38:33:04:
                    3e:d4:5f:86:76:9f:6d:9d:5a:5d:15:00:18:45:09:
                    e7:f9:26:b8:c9:33:4a:75:9d:07:8c:84:1a:b8:cb:
                    6f:4d:4c:a0:56:0a:e1:de:9e:d4:b6:23:52:5b:df:
                    c3:30:34:02:57:fa:5f:82:0e:13:33:e4:49:70:62:
                    79:f7:1f:01:99:34:9c:5b:ed:f1:24:1e:0b:c5:72:
                    54:61:cc:a6:6e:99:75:28:9e:54:02:2c:f8:2b:7b:
                    b7:a7:e4:54:64:03:26:75:88:e4:de:11:7e:3a:2a:
                    d3:16:bc:7d:04:b8:1d:6e:dd:8b:c4:8f:47:07:d3:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A6:A2:EE:51:4F:64:27:C8:D2:AE:51:73:EF:79:1B:84:89:AC:B7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7674f57-d822-482d-8209-cb53dbca95b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:cd:8b:d8:84:2a:71:66:68:61:3d:7e:7d:3a:be:de:32:43:
         6c:a1:67:23:29:7b:44:87:1f:fc:32:a1:5b:49:80:91:09:dd:
         fd:aa:d3:60:18:b3:29:16:fb:da:f4:39:10:1e:b1:2c:d1:7c:
         4a:f9:91:49:ea:05:0f:27:30:33:08:7d:f3:53:f6:85:24:da:
         9a:18:bf:f8:fb:0b:21:e2:aa:75:7a:d7:63:90:ce:cc:b2:5d:
         21:5a:8b:11:f4:9f:0b:3c:a1:27:07:5f:77:07:02:6d:e4:2e:
         e4:44:2c:9e:4f:01:28:c2:fc:24:25:f4:8e:d2:f6:c9:ea:bf:
         12:b4:72:40:1e:c2:40:2f:7a:ac:bb:31:3e:17:10:cf:83:f9:
         95:b5:a6:7e:aa:01:ad:d1:f9:3c:7e:1f:3b:9c:b6:c0:b2:53:
         07:ba:72:d2:69:db:3d:04:e7:a7:16:a9:89:b6:f2:78:e8:d6:
         d8:9c:ae:8d:fa:f0:99:b0:91:7d:80:85:9d:0e:a3:10:06:28:
         f9:1c:ec:2e:ea:c0:c9:2b:48:4f:fd:af:45:3b:ca:a2:1f:65:
         25:95:da:4e:a4:30:eb:f5:4c:fb:88:96:ec:1c:34:06:90:6b:
         3e:a0:eb:04:6a:87:73:cb:ea:ca:b4:d9:ed:16:bb:9d:b4:1c:
         97:97:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:49 2026 by rpki-client