Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3c10c9-48aa-4b4d-b3f1-9f4ffc569fdf.roa
File:                     6c3c10c9-48aa-4b4d-b3f1-9f4ffc569fdf.roa (raw, json)
Hash identifier:          VhrTz3cG+xP+HqSIXB3hfHqELOQmOKbW2ytP7IVtl8w=
Subject key identifier:   FF:14:59:7B:CC:27:69:7B:D8:2C:55:AD:D6:C2:83:0B:82:DF:D0:7D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6A623373B5C3B45C8A3E3FB976BB89E9E257BF96
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3c10c9-48aa-4b4d-b3f1-9f4ffc569fdf.roa
Signing time:             Wed 13 May 2026 00:51:00 +0000
ROA not before:           Wed 13 May 2026 00:51:00 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        144.220.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:62:33:73:b5:c3:b4:5c:8a:3e:3f:b9:76:bb:89:e9:e2:57:bf:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 13 00:51:00 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=f42b2584517e841c3e54aa33bae28573545aa4ef14388b2913f08334f8c5afdb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:7f:de:f5:48:19:6c:e5:d6:d3:64:8f:0a:
                    95:e5:d1:84:87:b2:68:b7:eb:64:81:22:b7:a6:40:
                    a8:e4:58:10:a9:d9:d8:a7:81:ee:b6:24:e0:3e:7d:
                    d5:e0:fd:ab:63:97:37:d4:db:9c:86:1f:68:da:80:
                    29:d7:e1:48:5f:17:6c:73:f2:ef:7d:b5:af:00:1e:
                    8d:51:83:cf:4a:06:30:f7:f6:45:d2:bb:b9:ec:20:
                    08:78:54:71:4b:85:80:ef:71:cd:7b:64:00:17:e0:
                    1e:33:ec:94:89:81:b4:0f:b5:a9:41:32:bd:16:9f:
                    46:ce:41:cc:e3:5b:fb:57:1d:1b:22:d0:81:5f:7e:
                    fc:f1:4c:1a:93:59:fe:08:29:c3:b2:aa:9b:4b:ed:
                    a3:ac:74:b2:57:1f:da:da:5c:a3:a8:d7:d7:50:73:
                    16:80:16:0d:60:0b:ae:37:60:7d:60:73:4b:f4:cb:
                    66:0f:f6:9d:0a:78:95:e6:62:4c:fc:3f:8d:ae:70:
                    0f:55:fc:00:fd:0c:29:bd:7e:fd:ad:22:4a:6e:a7:
                    16:6d:37:2a:3c:d2:90:a0:e2:d6:e7:28:53:09:a8:
                    43:2c:f9:3f:e5:96:08:77:56:b6:09:a3:c3:37:23:
                    36:84:80:08:24:ae:a7:80:1b:2a:20:27:3c:7b:a6:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:14:59:7B:CC:27:69:7B:D8:2C:55:AD:D6:C2:83:0B:82:DF:D0:7D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3c10c9-48aa-4b4d-b3f1-9f4ffc569fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:e5:24:fa:8c:c1:99:02:a4:bc:78:d2:f6:d5:60:cf:53:44:
         ad:6a:25:f3:05:07:09:04:6c:36:d3:44:00:15:9b:92:d7:7b:
         e1:3b:b5:9c:9c:d9:22:91:74:6d:97:b0:04:a7:2f:91:4b:23:
         44:1a:87:4c:5c:6b:57:8d:0c:d3:cc:bb:c8:b4:15:b5:40:3f:
         2b:12:ed:2a:aa:41:41:cf:0a:17:fa:aa:d5:cf:55:be:73:3a:
         e5:08:3e:bc:c8:3b:37:c6:a6:4a:ae:25:56:a1:6b:e6:de:86:
         e1:54:13:ef:b2:ff:57:0d:00:c2:8d:e2:56:16:3c:aa:13:06:
         85:94:a3:3e:f7:bb:56:f3:9d:db:1e:53:51:90:6e:9b:b3:57:
         94:17:2b:9a:83:dd:20:9f:a1:2e:bc:c1:db:c4:fb:89:89:77:
         47:ff:c4:57:d1:be:f4:ad:fe:61:b0:1f:3f:c0:c7:74:1d:17:
         1b:39:26:a6:c6:e5:b4:e4:58:c3:be:6b:68:18:a3:f1:c3:05:
         b9:71:77:56:4c:4b:f0:d7:4f:f3:84:fb:92:2c:2e:c0:ef:17:
         e7:c7:07:b1:ea:06:52:ec:55:9a:83:32:75:22:25:be:f8:b0:
         d7:d6:47:09:2e:eb:36:71:65:73:40:02:c3:21:16:ea:45:ca:
         3a:26:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:56:57 2026 by rpki-client