Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeb6d055-77fe-417b-af2e-ec5a5f936d4b.roa
File:                     eeb6d055-77fe-417b-af2e-ec5a5f936d4b.roa (raw, json)
Hash identifier:          YAWlEP47Hecmq2stIZm3ogoR6foc+HiZG6PChBBVFsQ=
Subject key identifier:   45:37:62:1E:42:B7:16:19:40:E3:F4:93:0D:7C:CE:43:81:D8:D8:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B6DC2EE6DF4D6A1DC12AD966E382639C768458D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeb6d055-77fe-417b-af2e-ec5a5f936d4b.roa
Signing time:             Wed 18 Feb 2026 00:20:08 +0000
ROA not before:           Wed 18 Feb 2026 00:20:08 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6d:c2:ee:6d:f4:d6:a1:dc:12:ad:96:6e:38:26:39:c7:68:45:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:20:08 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=e82b95fb37e4a92eefe75eb7a9d71a35acfacb7d28f8d0658f33406e2ec0c887, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:88:d8:00:df:10:1d:7f:93:6d:3b:42:22:
                    47:d0:a6:da:1f:90:ff:20:09:28:7d:60:83:a0:0b:
                    cb:fa:95:40:99:2f:c6:59:60:7e:1b:b3:a5:34:ee:
                    9f:ee:df:40:c9:14:04:5b:90:3e:f5:29:4d:2c:cd:
                    62:e7:90:55:fa:6d:10:24:91:71:df:5f:51:76:c4:
                    2b:d4:84:31:01:b1:c7:81:2c:8b:f5:19:43:95:3f:
                    51:4d:3a:5b:d2:f2:8f:af:fb:4c:1b:0b:c4:aa:4c:
                    22:7a:03:e1:b7:12:c1:25:6b:db:12:9a:f0:f2:c5:
                    a4:ce:6f:e4:2e:3f:b0:29:4e:bd:1d:d7:88:fd:9b:
                    fe:db:73:41:7b:f8:39:09:b2:03:20:83:63:e8:b1:
                    75:36:d2:7b:30:ce:9d:4f:48:d8:24:fc:69:3c:2b:
                    b9:e5:6d:04:29:59:73:21:7b:d2:ea:c9:f9:e4:7f:
                    10:46:ab:de:ff:22:d7:6f:69:25:50:b7:b6:ea:e5:
                    b2:30:10:28:b6:f0:68:44:36:a7:22:11:3d:cc:0e:
                    bf:30:7d:1b:95:aa:e9:42:92:e5:29:0f:40:13:f8:
                    cc:eb:24:8f:f9:3e:4f:27:17:05:6b:cd:f2:34:97:
                    d0:8e:1a:08:7a:37:20:20:04:45:1b:25:99:ca:d8:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:37:62:1E:42:B7:16:19:40:E3:F4:93:0D:7C:CE:43:81:D8:D8:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeb6d055-77fe-417b-af2e-ec5a5f936d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:2c:db:9d:34:0d:f9:a7:48:4d:9b:1d:15:3c:10:00:93:
         1e:04:8a:a6:e3:f7:bb:36:76:e3:25:68:a7:73:82:40:7f:91:
         6c:37:a3:b3:bb:d9:65:10:7e:01:55:ce:dd:d2:2e:b0:f4:3a:
         41:35:e3:6c:a5:c5:a4:69:89:50:7d:2d:a1:94:52:c4:09:2b:
         02:b7:21:bb:fe:66:fb:df:f5:d7:22:23:ca:1f:4a:0b:ea:a3:
         96:96:f6:2e:16:76:e2:f5:d5:14:6f:0b:fb:12:b9:b6:7c:1e:
         6f:e8:4f:86:07:9b:0e:a5:e6:7a:f3:74:da:f0:40:01:8e:87:
         dc:13:7b:8f:93:18:b4:48:ab:5a:65:88:44:72:b8:cf:85:57:
         66:c0:fc:91:aa:71:46:65:ab:45:0b:33:e7:4e:7d:e4:2b:91:
         ac:cd:34:2d:e4:fb:71:4e:fa:79:e5:fa:28:fd:be:7f:8e:d6:
         b3:ce:f1:65:fb:ac:9c:3a:90:a0:17:26:15:27:3e:58:d2:83:
         29:7f:56:fc:d4:b8:51:ae:a4:17:29:a5:53:00:b8:48:2b:9e:
         65:cc:a1:55:ab:b4:4d:b1:3d:64:df:c5:91:55:e2:2b:1b:53:
         d6:22:c1:4e:d4:56:e3:fd:58:0c:4e:7d:82:30:2d:af:12:a0:
         6b:70:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:17 2026 by rpki-client