Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
File:                     946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa (raw, json)
Hash identifier:          ENCzFlozOcxP7UdFve8td49MSGfD09QKM0KYbQd/WnA=
Subject key identifier:   DF:1C:E7:7E:F2:DD:5D:F5:40:5B:F8:4D:F7:BA:BF:FD:64:39:0C:80
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       757CE5A708609E3D6F082E3E9FFB6C53C560FD25
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
Signing time:             Wed 11 Feb 2026 00:30:49 +0000
ROA not before:           Wed 11 Feb 2026 00:30:49 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7c:e5:a7:08:60:9e:3d:6f:08:2e:3e:9f:fb:6c:53:c5:60:fd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Feb 11 00:30:49 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=020da8c17cd1f1716eebe3bb0a52fb7860d7a09238de1542055351ad19fb9f48, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:92:63:28:16:a6:8e:0c:86:ac:1c:2c:2e:
                    2d:06:23:b5:4e:de:29:46:7f:c8:d5:c2:64:fe:3c:
                    57:73:1d:8f:97:6d:11:59:e2:ab:f0:2e:8c:b3:e4:
                    cf:23:67:9f:81:52:f7:00:2b:d7:63:7f:62:18:d5:
                    41:d0:3a:82:c2:52:ca:56:47:1d:06:63:40:90:10:
                    b7:61:92:9f:4f:8e:5b:86:b0:1e:9c:4a:72:ae:bf:
                    c7:79:68:fc:cd:7c:b9:83:17:ac:0b:50:d9:63:bf:
                    b0:59:ba:d6:58:c4:fe:d7:80:94:f8:77:a3:d8:fa:
                    c4:65:f9:a0:62:15:f2:40:87:fe:bb:e3:55:76:3c:
                    b8:57:79:28:b5:a0:7f:b9:86:b6:28:ba:78:6e:90:
                    66:b1:65:53:63:55:dc:34:00:ce:0a:bc:18:fe:11:
                    68:27:fb:51:37:b8:3d:26:4f:d0:b5:71:0a:5a:64:
                    69:8a:8a:33:c7:8a:58:b9:49:af:34:76:41:12:fb:
                    c9:e6:d0:9e:3a:43:45:11:31:d1:f1:8e:8e:65:0e:
                    65:60:99:f9:fb:d6:7e:6b:cd:6f:61:37:ac:de:56:
                    dd:08:6a:f3:ad:ce:55:bb:c5:cf:54:66:10:e7:6d:
                    bb:82:8b:38:ed:77:16:d1:a4:5a:a2:ac:b7:0b:bb:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:E7:7E:F2:DD:5D:F5:40:5B:F8:4D:F7:BA:BF:FD:64:39:0C:80
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:38:f6:d8:4b:54:63:7f:b3:70:42:d3:ec:5b:83:4a:51:f4:
         1d:d9:94:66:c6:b1:42:01:a1:59:35:7b:a8:09:0c:e4:ce:b6:
         8b:6d:9b:24:3b:bc:85:e5:be:96:90:4f:f1:38:d6:c7:dc:0c:
         ec:ae:7a:6d:a8:ba:e8:2a:7e:b3:8f:63:6f:9b:56:02:66:12:
         d5:1c:4f:00:26:3b:5c:f7:db:be:a2:9c:2c:e2:aa:9b:d8:67:
         1b:43:b8:80:91:c5:cd:8b:bc:b7:58:1e:a1:15:bc:8a:3d:2e:
         a5:09:ef:20:1f:a9:84:28:95:13:63:95:e6:12:f9:75:80:ed:
         87:da:46:3b:13:d5:bc:b6:df:1f:3b:3a:27:c1:dd:bd:53:3d:
         05:04:59:92:84:57:50:0c:0a:ba:e6:d9:46:b4:04:02:ea:b7:
         c1:11:6a:d8:85:31:fc:23:93:27:59:df:88:75:24:bb:8b:65:
         da:ec:8a:be:ce:d1:47:c1:e5:8c:70:a8:a5:07:a0:19:76:8b:
         82:0c:ba:b2:73:1a:f1:ce:b1:47:cc:a8:23:ec:b5:5a:c3:fd:
         ac:8f:11:ae:55:45:0e:9a:c1:06:fa:e2:19:d2:33:34:79:af:
         33:34:c9:8c:52:29:8b:15:75:11:17:b6:05:dd:be:f5:69:43:
         19:b4:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:50:18 2026 by rpki-client