Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5587c1e-5e1b-4454-9a2d-7a5bc5b44d87.roa
File:                     e5587c1e-5e1b-4454-9a2d-7a5bc5b44d87.roa (raw, json)
Hash identifier:          SGIub4Q5MMdWWhVc+P2mie5bXbnF7ytihvrifrclxOo=
Subject key identifier:   68:D4:EB:9D:F2:1E:C6:CD:5E:D5:A1:90:A7:BC:E6:B4:17:66:05:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       105BA8EB00B492B555782F3BBFD0B906AFEA0AAA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5587c1e-5e1b-4454-9a2d-7a5bc5b44d87.roa
Signing time:             Tue 24 Feb 2026 01:01:58 +0000
ROA not before:           Tue 24 Feb 2026 01:01:58 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        100.24.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5b:a8:eb:00:b4:92:b5:55:78:2f:3b:bf:d0:b9:06:af:ea:0a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 24 01:01:58 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=dd04f54f488944186492a3b72312e90fbe2a81173c35023fd3a1237adddc2326, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:ce:bf:73:88:a1:6c:04:92:51:bc:42:4a:
                    38:07:7e:a4:a1:f0:a4:d3:d0:25:ce:f6:b0:69:7f:
                    57:2c:dd:b5:30:33:42:72:23:04:72:d8:9b:b8:ef:
                    aa:da:f6:e4:d7:50:c3:56:97:69:8e:6e:49:ce:4a:
                    10:0c:28:66:58:15:ce:b8:ce:72:e5:1e:f1:13:e6:
                    e9:07:f4:ff:36:d9:0f:35:35:68:80:4f:a7:e3:b1:
                    ca:19:ea:c6:f2:cf:91:30:4d:7b:07:95:16:63:36:
                    8d:d7:5e:dc:2c:6b:10:6b:92:27:a0:48:d5:ca:2b:
                    30:17:56:36:67:84:b3:d2:5a:98:ca:26:e7:67:da:
                    f8:93:05:91:0f:2c:7a:92:45:e7:fb:59:93:ad:c1:
                    72:87:96:1c:2b:75:cd:15:45:1c:fd:89:85:85:1a:
                    72:da:cc:46:86:b9:f2:cd:bb:68:af:aa:3b:2f:88:
                    88:7c:0f:17:06:a9:9b:2a:c3:23:33:54:81:e3:3f:
                    2f:0b:b4:d4:9c:5f:b9:54:de:38:d1:6b:07:5a:35:
                    b5:b3:5a:37:67:e5:8b:f4:04:f4:05:05:2f:c2:a1:
                    9b:3e:d3:ae:a1:6c:31:4e:89:de:6a:0f:7c:45:d1:
                    1c:2b:d5:19:c8:73:06:1f:5b:fb:ba:a4:9a:2d:07:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D4:EB:9D:F2:1E:C6:CD:5E:D5:A1:90:A7:BC:E6:B4:17:66:05:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5587c1e-5e1b-4454-9a2d-7a5bc5b44d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.24.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         46:94:3f:98:98:20:d5:08:05:47:2e:c0:10:6e:47:fc:ae:37:
         16:4a:2b:3f:b7:f5:1d:e5:ec:04:9e:0b:a6:2c:09:bb:f8:50:
         9e:c5:1d:96:b2:e7:49:e7:ea:6e:ef:b0:1b:5d:55:74:a9:7c:
         88:c5:28:35:9f:6d:e3:65:37:5a:47:4f:0c:f6:bd:a5:5d:8b:
         45:9a:d3:1f:77:41:ac:8f:d9:4b:6f:70:30:c3:27:01:ca:5e:
         8c:58:8d:81:af:e4:21:98:b7:fe:10:b3:d3:84:18:c1:62:12:
         bf:62:d5:78:36:cd:e5:b1:cf:52:f6:02:73:6f:fe:18:4f:bc:
         06:08:54:e2:f9:2a:fd:94:50:3a:8e:a5:c0:b3:90:48:ff:50:
         8a:c9:cd:6a:13:4f:6c:64:ee:ca:cc:89:c6:9d:40:9a:9e:62:
         8c:6e:e7:54:2e:31:98:1a:83:e4:d3:52:c0:39:bf:fc:2a:c0:
         0a:4d:9b:51:6d:96:a5:ac:d9:d9:71:2f:6f:30:bc:49:12:c4:
         a2:e3:78:bc:32:65:8d:ad:3b:43:2b:81:21:b4:b1:a8:ba:f1:
         24:a4:fc:f6:df:e0:0f:7d:74:4d:2b:d1:4f:c3:13:f5:24:2a:
         f1:bb:fd:c6:02:05:19:ae:cd:46:b6:b0:a4:80:7c:69:13:29:
         3b:61:f3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:47 2026 by rpki-client