Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93c2d13e-2320-4ada-916f-f8946d3f86bd.roa
File:                     93c2d13e-2320-4ada-916f-f8946d3f86bd.roa (raw, json)
Hash identifier:          +vQMEAlHAPpouaqn8K7NcJrs0hBcLExlLaLT7Yf88Mc=
Subject key identifier:   91:2D:CD:81:70:6A:44:56:1A:85:CC:D9:13:EC:2F:F3:44:8D:E3:4D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       26A19FB7F3FFC01C9582EA77BB82F113648F394C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93c2d13e-2320-4ada-916f-f8946d3f86bd.roa
Signing time:             Wed 18 Feb 2026 00:40:34 +0000
ROA not before:           Wed 18 Feb 2026 00:40:34 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.193.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a1:9f:b7:f3:ff:c0:1c:95:82:ea:77:bb:82:f1:13:64:8f:39:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 18 00:40:34 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=1c8f315875ee678ee749330fed307c556b74f4582b8de99ffa28486e355ad59f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:ef:ea:6a:5e:03:97:85:04:f1:5f:84:e7:
                    b7:4a:d2:1f:93:dc:e4:c2:f7:f4:02:15:b8:1a:9a:
                    15:73:9c:cd:d4:de:83:93:7c:8c:eb:1f:16:8e:b3:
                    d7:47:25:15:ee:cc:af:0e:13:1e:93:dd:a3:3e:57:
                    1d:bd:cd:c1:e9:a3:c2:37:63:a2:9d:35:52:ff:a3:
                    df:f0:72:fd:f1:99:4d:b6:92:06:28:ce:d5:3d:a5:
                    ba:f1:8b:7d:7e:db:5b:08:52:0e:cb:7e:fa:03:b6:
                    ab:a6:dd:ff:67:40:54:d7:01:56:42:c0:ee:37:5a:
                    b7:98:aa:22:7f:2f:8f:59:62:be:0c:e1:d3:e7:45:
                    d0:a5:cf:9b:0e:2a:fe:ce:82:44:d2:08:0c:1c:3b:
                    11:b4:e7:36:74:7c:5f:e1:8b:f2:42:12:b6:50:30:
                    8f:a3:45:3a:ab:19:89:82:d9:dd:35:b1:46:84:1f:
                    35:d0:fd:cf:9b:57:87:9e:dd:f8:86:57:75:34:04:
                    1d:ad:12:db:54:5b:c8:93:be:7e:b4:2c:04:64:e3:
                    1f:14:b4:17:fc:61:f5:a9:cc:13:f2:37:85:d1:41:
                    29:09:f4:27:80:29:50:41:51:e3:cb:1f:f1:a2:73:
                    46:f4:b0:9f:30:46:11:18:a7:b1:a7:fa:5d:64:f3:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2D:CD:81:70:6A:44:56:1A:85:CC:D9:13:EC:2F:F3:44:8D:E3:4D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93c2d13e-2320-4ada-916f-f8946d3f86bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.193.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:3d:96:af:20:ea:7d:ea:18:c4:12:6c:bf:ea:6e:4f:2e:08:
         eb:24:72:5b:91:00:67:48:3a:fc:80:f7:47:5f:09:e0:56:31:
         4d:58:11:9d:a5:f0:3c:e1:4b:e7:ca:d4:7f:f4:ad:fc:65:21:
         90:cb:0f:a1:47:29:66:02:c5:93:07:7c:d9:f7:d0:92:d6:ad:
         3a:7f:1f:47:a2:fa:22:cf:da:bd:7f:3c:06:8a:f0:e4:4e:64:
         f5:1c:ee:62:97:b2:bf:f2:1b:26:e0:41:35:d0:6f:82:80:ca:
         e9:af:d1:14:7f:85:e0:04:b1:b2:fe:e1:2c:33:49:4c:b3:05:
         34:02:1b:38:c0:f9:c8:c2:f4:3e:08:5d:40:a7:08:68:a0:f6:
         80:c4:39:fc:21:9d:76:95:44:d9:35:03:b4:a3:63:9c:20:37:
         e6:7c:96:71:8b:78:4e:ea:1b:80:df:d5:67:dd:5f:0b:54:fc:
         c7:86:10:d7:c5:13:fa:5e:47:5a:5c:23:42:3c:1f:26:4a:61:
         d1:cb:e4:ac:39:47:28:6f:1c:97:ba:7b:70:53:55:f8:a8:34:
         ba:f2:53:6c:11:ee:a9:1c:51:0b:65:11:53:89:9a:51:bd:99:
         15:ff:68:c3:8a:3b:2a:f2:25:b0:38:2c:7d:56:6f:07:18:ba:
         5e:71:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:07 2026 by rpki-client