Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
File:                     e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa (raw, json)
Hash identifier:          0SCVHR6pH3hDB1r03olEsS73SxiN6AITuEXXu8z8LXg=
Subject key identifier:   F9:19:21:D1:AC:CD:03:2E:B7:58:5A:C5:B2:51:CB:B2:B5:57:73:34
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       3FA07F79F6C0BFBE771C305240035B6E5A5F8D15
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
Signing time:             Sat 28 Feb 2026 00:30:15 +0000
ROA not before:           Sat 28 Feb 2026 00:30:15 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a0:7f:79:f6:c0:bf:be:77:1c:30:52:40:03:5b:6e:5a:5f:8d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Feb 28 00:30:15 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=3072b4544fe94e7d70442d4bd9934faac04f12144b3b5408ebde65f0f282fc59, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:e4:e3:63:0e:dd:e4:94:c8:b8:fd:d1:10:
                    80:f8:e5:e3:e4:e5:ca:05:08:90:1f:70:e9:31:c7:
                    ae:ca:c7:9a:19:93:e6:79:f9:44:e8:93:ea:8e:e7:
                    1a:3d:b3:91:9c:1b:a6:bd:66:7e:7f:71:5b:c7:82:
                    2d:73:e5:9b:30:26:68:1f:6d:7c:5c:eb:47:c8:e9:
                    fa:5b:93:61:11:2b:b8:e0:14:2a:db:c0:c2:50:5b:
                    f7:74:3c:bf:63:b1:b6:21:98:e2:0c:76:30:1d:a2:
                    bf:7a:4e:0a:c2:1a:6e:79:be:06:6c:c5:6f:5c:36:
                    52:1f:a4:35:16:0c:ed:13:f2:90:d7:fa:a7:9c:0a:
                    fb:ab:94:9e:11:36:08:a1:01:fa:11:ac:6f:40:5e:
                    ba:75:cc:03:8b:2d:7d:02:02:7c:0b:d4:e4:6b:cd:
                    16:8e:57:68:3f:1c:f4:39:40:a5:1e:18:d1:29:ed:
                    e9:d6:d8:ef:23:9c:78:a8:98:91:7f:8a:82:94:9a:
                    d4:b9:b9:2c:4c:cf:26:be:63:a7:78:6c:1a:6e:ff:
                    45:4b:0e:04:36:b7:cc:90:b8:98:7c:a0:df:89:7a:
                    44:db:88:9a:7e:4a:ae:a0:49:25:d1:85:f7:71:57:
                    5b:65:bb:81:59:7a:4e:c8:22:5e:09:9a:35:7b:48:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:19:21:D1:AC:CD:03:2E:B7:58:5A:C5:B2:51:CB:B2:B5:57:73:34
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:23:d5:2f:22:fc:5b:39:c1:ef:8b:95:bd:f6:e7:75:58:d0:
         a1:78:b2:5a:a9:09:34:3e:e8:3b:44:a8:ce:46:a4:01:91:c9:
         4b:98:08:4a:51:ad:7a:d4:4e:d1:d2:40:f3:b8:42:b8:a2:81:
         02:4e:54:74:51:27:39:f3:9b:23:e8:f6:66:cf:37:35:bb:f1:
         8d:a1:78:99:48:74:9b:c4:7d:34:15:56:fb:f0:dc:f2:92:eb:
         4e:5f:2b:c1:ec:4c:eb:a2:39:45:02:a7:bd:5d:a8:b5:80:0f:
         2c:18:54:3a:39:0f:3e:25:c1:8d:bc:0a:e1:ba:95:67:db:07:
         41:b7:53:fd:ba:e4:d5:6e:f0:00:42:82:7f:cf:8c:33:bd:a0:
         b5:d2:b2:b2:0a:38:7c:86:89:49:e9:ff:61:7b:44:dd:99:21:
         1a:71:2c:56:9d:28:ea:cf:e0:5d:20:13:9f:58:66:e2:64:95:
         8b:e0:77:e5:14:3c:df:62:aa:37:56:20:4d:e0:b6:45:3e:15:
         88:cf:09:01:94:56:cb:0b:99:fb:15:6b:a1:46:c1:64:f3:51:
         de:75:6e:62:61:75:ad:b9:69:4b:65:18:0d:7a:2a:a0:5f:43:
         d3:25:99:26:a2:c6:ca:1f:d9:7f:92:ce:fb:86:05:f4:7e:f1:
         1b:ca:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:34 2026 by rpki-client