Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa
File:                     fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa (raw, json)
Hash identifier:          AajA+EK6Mh6L208pv7sIQ2KL57t99/DNKFPzHCE7+Pk=
Subject key identifier:   D8:07:60:18:77:4E:D5:31:11:D2:30:05:A2:00:15:04:3B:BE:42:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46706AA5708E5CC07A7E4176C6928B0C6153AE8C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa
Signing time:             Wed 18 Feb 2026 00:20:35 +0000
ROA not before:           Wed 18 Feb 2026 00:20:35 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        115.177.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:70:6a:a5:70:8e:5c:c0:7a:7e:41:76:c6:92:8b:0c:61:53:ae:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:20:35 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=027c7ea6a76933409a8c2db3ea9312fee6a84efbe3dfd5ddb49a993ee95e4354, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:ba:87:51:29:0e:e9:72:71:95:01:ee:a2:
                    fe:e0:3c:cf:6e:9c:a3:d3:b5:d9:ff:ea:9e:51:c9:
                    2d:e8:98:5c:a7:e7:08:21:87:9b:78:9b:7a:63:aa:
                    ea:5d:41:cc:a5:04:94:71:a2:6b:71:a1:5a:43:1a:
                    6a:05:dc:2e:b7:f2:4a:b1:7b:2c:53:41:e9:50:26:
                    87:ec:39:67:22:ba:4d:7b:92:ce:1f:d0:7f:76:81:
                    6c:19:5f:e6:ef:36:33:e1:2d:db:c0:3a:d3:c4:4d:
                    b3:b7:70:23:e7:f7:0b:0c:af:d8:53:cd:15:da:4c:
                    6f:b0:c2:84:37:d5:7e:d6:31:00:9a:b2:20:79:85:
                    62:76:52:b4:6c:0e:07:cd:89:ae:f5:cc:9a:7d:7a:
                    1f:7c:71:fc:8a:dc:67:7e:2a:18:9a:1f:2c:71:82:
                    d3:f5:03:52:1a:4e:65:0a:2d:7c:b3:37:bf:7c:59:
                    d7:12:2e:e3:f8:26:ef:92:66:0b:f6:b3:42:8b:02:
                    3d:85:d4:9d:ac:7d:85:26:8a:b8:bb:7f:c3:9a:ab:
                    8c:12:cf:fd:8d:22:d1:b0:41:8b:b0:26:27:83:da:
                    fc:8e:9e:28:1c:88:73:c9:1c:a6:74:fe:17:77:c9:
                    cf:ec:63:29:c0:1c:a1:a0:f9:43:ac:93:6c:00:31:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:07:60:18:77:4E:D5:31:11:D2:30:05:A2:00:15:04:3B:BE:42:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.177.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:8f:09:00:80:bd:eb:df:d6:92:a0:20:96:df:ef:28:62:
         7a:14:14:d6:a1:c7:15:0b:45:5c:0e:34:9d:63:b1:aa:79:87:
         d4:6f:b0:d7:7d:cb:90:97:b4:ca:46:48:5c:26:2a:7e:93:dc:
         4f:4b:51:26:1c:46:29:08:53:6c:7c:be:e9:41:e0:5b:ce:3a:
         c6:db:63:46:81:ec:38:07:9b:46:fc:ef:6d:76:d6:93:45:d8:
         14:a6:74:8a:9e:a7:6b:3b:34:97:0e:6b:35:93:fe:2c:89:93:
         60:4e:f5:4d:dd:e1:d5:85:48:1e:08:4a:f6:68:fb:b9:df:a9:
         1c:65:e7:36:b2:a6:87:1a:aa:a9:77:ca:31:a0:ca:a4:11:5d:
         27:e4:5b:dc:6c:2c:7f:cd:7b:6b:3c:6e:44:89:56:58:7b:c9:
         af:1e:35:ec:44:32:00:2c:3c:e5:d6:93:4b:0e:cb:fb:1e:e9:
         6e:e4:7e:4d:67:3a:56:11:cd:ec:85:c5:16:04:76:1a:3a:f6:
         ca:d0:ee:24:aa:f0:ba:d4:48:26:13:c8:f7:75:46:d8:0f:a5:
         4d:cb:91:b7:f8:d2:13:e9:2c:6e:2d:40:b5:a4:3b:64:55:21:
         80:e3:17:2e:65:85:85:8b:45:60:8b:a5:a1:c6:aa:52:5b:c0:
         99:52:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:01 2026 by rpki-client