Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb48584d-19e8-48c5-bd15-8a33b9dc6d49.roa
File:                     cb48584d-19e8-48c5-bd15-8a33b9dc6d49.roa (raw, json)
Hash identifier:          8Nhf9J5ovNQRxXDzwuyyhFqWZN8QZ3u8UrJnOvmrs80=
Subject key identifier:   9B:06:4C:3D:C0:61:77:74:66:5F:24:9F:A0:B6:A0:34:5A:B5:AF:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       468F266A4F4CC6BA85F5B07E1EF4B9F690F52855
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb48584d-19e8-48c5-bd15-8a33b9dc6d49.roa
Signing time:             Thu 26 Feb 2026 01:00:58 +0000
ROA not before:           Thu 26 Feb 2026 01:00:58 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8f:26:6a:4f:4c:c6:ba:85:f5:b0:7e:1e:f4:b9:f6:90:f5:28:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 01:00:58 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=d5e40ccb7fdfb9383c9ddb4b43c51c7dd924e7887ae6917f3498a9a0c73900eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:f2:23:35:40:ff:85:01:8c:cc:b6:d6:eb:
                    0f:d5:a1:79:db:fb:9a:9f:70:6b:0a:42:a3:88:bb:
                    36:99:be:43:a9:6c:2d:10:e6:c8:7a:64:e0:73:ff:
                    b4:b4:e9:a2:be:8f:6b:c0:16:81:94:de:78:d3:1e:
                    86:3b:f1:fd:1f:16:b1:b2:25:ce:7b:80:13:6b:0b:
                    ce:46:59:ea:0e:40:ca:83:ff:2b:9f:a0:a4:c8:02:
                    52:20:cd:35:d2:a7:0b:97:45:4b:6f:b6:db:63:ab:
                    56:d5:9a:c7:f5:2e:68:7a:08:3f:a5:8a:b5:00:48:
                    a3:53:6f:d2:86:c3:0e:72:e8:c8:be:5a:e9:78:72:
                    ee:44:51:f4:95:dd:ec:d8:35:6c:f8:a5:5f:d2:07:
                    e5:e8:4c:11:38:1b:b9:a3:ec:fd:4f:a3:bb:ac:0c:
                    87:72:e7:7c:17:18:d6:3c:83:37:c4:4d:19:91:17:
                    95:8e:fd:3b:3d:3f:4d:07:55:7e:12:bd:09:9a:8b:
                    db:31:1d:b7:45:ef:1a:41:8e:04:fb:7c:1b:4d:ed:
                    fa:6c:8f:02:53:d8:2d:9c:22:49:7f:ad:51:8f:2c:
                    ba:74:88:b6:3e:12:c0:af:aa:9b:b7:5f:bc:4a:e2:
                    07:79:45:9a:90:e2:7b:98:ca:78:a0:63:ca:ce:47:
                    0d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:06:4C:3D:C0:61:77:74:66:5F:24:9F:A0:B6:A0:34:5A:B5:AF:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb48584d-19e8-48c5-bd15-8a33b9dc6d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:b4:df:3b:0b:95:b8:81:6d:0d:c7:90:43:c1:6b:84:bb:e0:
         37:7a:2e:20:49:0f:df:be:9b:13:ad:b1:40:3b:c8:ea:50:87:
         4f:16:63:d9:22:6a:d1:16:86:e3:ee:99:7a:c3:1d:b4:46:ad:
         3a:8f:59:a8:ba:e1:8f:40:c2:ef:aa:59:3e:08:6f:38:ac:e0:
         96:28:a8:cd:f0:8c:b3:0a:e5:52:ab:01:3d:55:52:d8:4c:32:
         c7:aa:c8:fd:f2:a3:c7:2c:06:7f:e2:57:f7:33:01:22:e5:21:
         00:b1:88:e8:1e:47:46:79:3f:66:8d:b9:26:38:9a:af:89:1b:
         d9:5a:05:d2:ce:ba:6f:e0:3f:09:ad:aa:c6:8d:c7:ba:9e:d9:
         d5:45:20:bd:c7:1c:d3:97:17:56:a9:dc:c5:c7:a0:0b:cd:2f:
         a1:dd:77:ec:88:44:af:43:82:75:34:82:1d:fd:23:90:f7:cf:
         af:27:2d:af:b4:6c:da:c9:38:fd:9b:f9:2a:1e:fc:f2:2e:6d:
         8e:b8:50:b9:71:2f:fc:be:d7:08:7d:4b:ea:18:08:b3:7a:18:
         71:55:a0:5f:34:74:d1:96:b1:8e:ea:82:41:d4:2f:fc:b6:8c:
         bc:79:c3:57:e2:a2:9b:25:b9:c0:ad:89:f9:b1:73:e6:ce:f9:
         78:ab:af:5e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURo8mak9MxrqF9bB+HvS59pD1KFUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDEwMDU4WhcNMjYwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNWU0MGNjYjdmZGZiOTM4M2M5ZGRiNGI0M2M1MWM3ZGQ5
MjRlNzg4N2FlNjkxN2YzNDk4YTlhMGM3MzkwMGViMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDb1fIjNUD/hQGMzLbW6w/VoXnb+5qfcGsKQqOIuzaZvkOp
bC0Q5sh6ZOBz/7S06aK+j2vAFoGU3njTHoY78f0fFrGyJc57gBNrC85GWeoOQMqD
/yufoKTIAlIgzTXSpwuXRUtvtttjq1bVmsf1Lmh6CD+lirUASKNTb9KGww5y6Mi+
Wul4cu5EUfSV3ezYNWz4pV/SB+XoTBE4G7mj7P1Po7usDIdy53wXGNY8gzfETRmR
F5WO/Ts9P00HVX4SvQmai9sxHbdF7xpBjgT7fBtN7fpsjwJT2C2cIkl/rVGPLLp0
iLY+EsCvqpu3X7xK4gd5RZqQ4nuYynigY8rORw3DAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUmwZMPcBhd3RmXySfoLagNFq1r3cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NiNDg1ODRkLTE5ZTgtNDhjNS1iZDE1LThhMzNiOWRjNmQ0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4STANBgkqhkiG9w0BAQsFAAOCAQEAOLTfOwuVuIFtDceQQ8FrhLvgN3ou
IEkP376bE62xQDvI6lCHTxZj2SJq0RaG4+6ZesMdtEatOo9ZqLrhj0DC76pZPghv
OKzgliiozfCMswrlUqsBPVVS2Ewyx6rI/fKjxywGf+JX9zMBIuUhALGI6B5HRnk/
Zo25Jjiar4kb2VoF0s66b+A/Ca2qxo3Hup7Z1UUgvccc05cXVqncxcegC80vod13
7IhEr0OCdTSCHf0jkPfPryctr7Rs2sk4/Zv5Kh788i5tjrhQuXEv/L7XCH1L6hgI
s3oYcVWgXzR00ZaxjuqCQdQv/LaMvHnDV+KimyW5wK2J+bFz5s75eKuvXg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:35 2026 by rpki-client