Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eee3b190-4e8e-4367-82e8-8998a84c6de8.roa
File:                     eee3b190-4e8e-4367-82e8-8998a84c6de8.roa (raw, json)
Hash identifier:          E6fojaS/tQfT8pj90TRq2Y56hnfk48xwJ8299pxhKMQ=
Subject key identifier:   12:2E:BC:DC:44:62:61:7E:58:0C:47:89:33:26:99:D7:31:3C:E2:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B0B930383D0FBF8D1ABB6E9DCCE8E406DD9512B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eee3b190-4e8e-4367-82e8-8998a84c6de8.roa
Signing time:             Sat 14 Feb 2026 00:50:40 +0000
ROA not before:           Sat 14 Feb 2026 00:50:40 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:93:03:83:d0:fb:f8:d1:ab:b6:e9:dc:ce:8e:40:6d:d9:51:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:50:40 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=29fe9a5ae95ec82b7597d8df8ed162c7084ecee790e3dddcc8d822fe84f283f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:e0:3d:34:fb:8c:39:67:04:20:90:ee:b4:
                    94:dc:4f:aa:38:fc:f4:02:70:cc:64:78:c4:88:54:
                    f2:48:a7:4e:62:9c:a8:b7:33:eb:4c:39:64:df:7d:
                    c8:3f:1b:c0:b5:35:55:85:40:41:6f:83:62:ff:bb:
                    32:9e:38:88:15:d7:7a:54:7d:69:ff:95:43:c0:c6:
                    dc:c3:a4:ea:ac:de:1f:c5:30:56:d7:f3:5f:10:f8:
                    42:2f:33:67:5f:99:cc:7b:83:dc:4e:4a:cd:d0:9b:
                    07:f9:ea:05:a3:33:39:a1:d2:52:dd:ea:c7:7b:c6:
                    97:84:3c:9b:f7:dd:7e:d1:9c:e3:7b:78:60:23:c8:
                    a0:b7:38:ba:a1:dd:dd:bb:f2:b3:5e:d5:b2:7a:f9:
                    99:39:f8:77:d6:af:bb:03:ea:0c:0b:7f:b9:72:f1:
                    f2:d9:1f:c6:2f:71:f3:1f:d5:a0:17:f2:45:c3:a5:
                    29:24:30:ef:5f:aa:e0:bf:db:ca:6c:b1:9e:a0:08:
                    ec:c7:6a:3b:9d:6f:c3:52:a5:57:d8:6d:1a:01:93:
                    83:91:75:97:af:9b:dd:3a:d4:26:ac:70:32:2e:14:
                    e6:06:34:d4:f0:05:ca:95:1e:5b:cc:66:96:f5:ba:
                    b1:e4:56:69:4a:51:1e:34:2f:a3:cf:0a:e2:60:4e:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2E:BC:DC:44:62:61:7E:58:0C:47:89:33:26:99:D7:31:3C:E2:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eee3b190-4e8e-4367-82e8-8998a84c6de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:b1:39:30:e1:4c:60:c8:9a:25:68:eb:0a:2d:3b:ea:32:
         85:15:6c:30:ab:85:9d:cb:85:a8:f3:1d:1b:ed:20:96:79:21:
         73:11:85:85:dc:c4:46:cf:47:c7:83:c0:55:f7:ad:cc:a6:73:
         84:b4:0c:a7:db:1a:e3:92:e1:08:b7:09:20:00:66:e1:39:05:
         63:a5:1a:73:f5:20:f4:19:d5:8e:d3:90:59:11:35:89:36:e1:
         07:19:13:68:1a:0b:05:52:d2:13:ff:dc:ea:75:c9:50:86:c7:
         6a:ec:12:81:1d:d9:d3:c4:36:c3:e8:e3:13:0a:37:28:f5:00:
         0b:7e:95:19:b9:7f:59:13:d5:97:8c:b7:b6:df:23:26:85:1b:
         69:54:ec:91:a2:92:8b:a2:17:e6:46:d6:da:d5:5a:f8:7c:df:
         0e:e2:07:e0:f9:4e:83:c9:ed:9c:3b:d9:97:96:c0:27:ee:cd:
         36:e5:1a:83:2b:92:48:5b:da:03:f8:a8:cd:28:49:f5:22:18:
         92:53:54:39:9c:1f:e2:2c:39:d4:be:18:ff:5d:ae:4c:03:63:
         f1:22:e6:bf:82:af:e8:51:44:e8:ae:3d:ea:27:e5:ff:a7:f3:
         68:34:a1:f4:85:67:9c:03:05:2f:65:26:74:bc:10:86:4e:f6:
         33:9e:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:34:22 2026 by rpki-client