Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa
File:                     f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa (raw, json)
Hash identifier:          8di3bd1PRV3CP88Fapd9wm4NcDqSbIdRexdgIB+5/7s=
Subject key identifier:   6F:40:B7:02:C1:58:0E:84:5A:4C:E6:76:88:D5:59:AE:FD:BF:0C:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       259357678641539322C128521742C374D3A9C7AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa
Signing time:             Sun 08 Feb 2026 00:20:12 +0000
ROA not before:           Sun 08 Feb 2026 00:20:12 +0000
ROA not after:            Sat 09 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:93:57:67:86:41:53:93:22:c1:28:52:17:42:c3:74:d3:a9:c7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  8 00:20:12 2026 GMT
            Not After : May  9 23:59:59 2026 GMT
        Subject: serialNumber=771c24cd81164fd8fb16563ac264be11b029c4c30e617042b6d90e145291b476, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:c1:4c:ab:eb:0e:9b:f7:df:f7:9d:e1:ee:
                    c2:0e:fd:7d:11:38:6e:0a:27:a8:75:0b:f1:6e:f2:
                    11:f6:c9:38:41:2c:ca:7d:a2:68:69:6c:77:36:9b:
                    1a:e1:1d:79:20:8f:1c:63:f0:61:fd:eb:10:8d:1b:
                    9d:d4:f4:5d:4e:2f:1b:15:43:c2:a4:8a:91:9d:0e:
                    59:db:ab:9e:5d:fc:fc:88:b8:d6:3f:41:d2:b9:f0:
                    94:86:f1:c2:fd:61:9e:e2:d8:99:ee:ba:0f:aa:a8:
                    fe:2f:f0:f5:c4:cd:cd:0d:bc:9b:b2:9f:8a:de:26:
                    30:5e:39:f5:06:44:0d:36:30:a6:65:16:43:0c:8d:
                    3c:63:75:91:39:f5:0b:7e:02:2c:9e:34:85:d7:5e:
                    c7:8f:3b:f2:e4:e3:01:3c:a8:94:79:78:45:2a:a4:
                    87:ac:45:cc:36:f3:e5:9a:4c:48:9e:cd:97:0f:0f:
                    b8:39:0e:77:11:12:24:be:9d:26:b4:ba:24:ff:91:
                    f9:fd:f6:0b:5b:ec:3b:1e:b7:15:2c:3b:26:72:68:
                    78:09:8b:54:12:77:39:06:cc:3b:1d:d3:28:86:7a:
                    1f:17:14:b0:9c:b1:4c:20:be:d7:f9:2a:e4:a7:db:
                    ed:eb:cd:5e:75:1c:04:c7:83:f6:46:46:6f:2e:8a:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:40:B7:02:C1:58:0E:84:5A:4C:E6:76:88:D5:59:AE:FD:BF:0C:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:d1:62:9c:5c:ae:6b:90:65:5e:0b:e0:30:e8:b7:eb:f1:d4:
         70:d7:a4:2d:52:e1:a6:9b:45:08:fb:f5:95:0c:26:c1:b1:c0:
         31:36:04:45:88:b6:31:89:89:bc:67:05:e8:fe:be:84:14:3f:
         81:b6:c6:7f:8c:31:4c:7c:5c:03:5f:d6:18:e2:66:8f:8f:b1:
         ad:e1:1e:14:1b:02:63:4b:13:94:a0:77:8e:6a:32:57:d7:c9:
         5d:b1:bc:43:13:9d:a2:93:b5:48:3b:7a:e9:fa:52:a4:49:87:
         7a:cb:fc:60:a4:0b:f0:8b:57:c7:1f:3d:c5:98:52:ac:f7:74:
         9c:b1:2e:21:44:c1:02:7b:77:be:7e:84:2a:a8:d6:ae:ad:e1:
         1d:1f:b9:06:7c:b2:cc:c9:c2:12:43:00:d8:ad:63:97:32:1e:
         e2:69:c2:bb:15:d8:fc:3b:bb:1a:d7:2c:0b:97:ff:fd:4b:7a:
         ec:5f:56:7d:8b:42:92:8d:7e:7d:f1:38:bb:63:7a:4a:88:d5:
         2e:c0:72:b6:ba:bc:33:60:3c:4c:74:8e:a9:89:fd:78:92:24:
         94:8b:08:e2:99:d7:57:62:c7:34:71:d1:0d:97:9d:3d:a3:c6:
         e0:ae:e7:27:56:85:36:c3:2c:3e:89:de:27:80:aa:37:43:5c:
         27:63:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:08 2026 by rpki-client