Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b6ccb4e-d413-4324-93aa-d12bad25bca7.roa
File:                     9b6ccb4e-d413-4324-93aa-d12bad25bca7.roa (raw, json)
Hash identifier:          BukFswLp4/PnaU8Tw2h+1snYjBOlWSaLfLeyISusxSo=
Subject key identifier:   06:A0:6A:05:2B:C9:18:D8:A1:7A:AB:A2:F9:79:9E:14:F0:4B:F0:CB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       736E47C661AA02404D4AE0118135FBB463F42237
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b6ccb4e-d413-4324-93aa-d12bad25bca7.roa
Signing time:             Sun 22 Feb 2026 01:10:53 +0000
ROA not before:           Sun 22 Feb 2026 01:10:53 +0000
ROA not after:            Sat 23 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        144.220.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6e:47:c6:61:aa:02:40:4d:4a:e0:11:81:35:fb:b4:63:f4:22:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 22 01:10:53 2026 GMT
            Not After : May 23 23:59:59 2026 GMT
        Subject: serialNumber=fdff45ffa5851c17687949273d174f91a637afced0f87c2e69832160b7755c18, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:c7:2c:81:cc:b4:a3:e1:e2:8f:e7:8a:dc:
                    d7:ea:5a:39:ef:ee:a7:85:55:0e:6c:be:09:26:f7:
                    9f:7c:80:7d:6e:03:56:e4:0a:e6:78:ae:63:01:54:
                    b1:b8:f4:5b:5b:cb:ad:4e:37:74:8b:68:4e:5f:90:
                    a7:b5:b6:d5:ac:00:bc:e4:7b:6c:75:8f:d3:2f:99:
                    e6:dd:b3:93:ca:83:21:54:a2:4a:10:c9:aa:69:19:
                    c3:ef:48:9c:26:10:ff:f6:1e:ba:2c:b7:7f:1b:af:
                    b4:09:f7:d3:da:e3:9d:9e:fc:f2:45:31:e4:86:e5:
                    94:1a:10:69:be:b9:00:47:86:e6:14:f8:58:19:57:
                    87:a3:26:37:1c:82:57:84:e3:1c:8e:17:78:f6:3a:
                    c7:56:0c:33:fd:4c:87:45:18:ad:f8:e2:44:a8:3c:
                    2a:a7:87:d6:98:59:43:f2:ac:f5:34:3d:5c:04:53:
                    ac:83:c0:3d:7a:13:32:fd:2d:8b:bc:03:cf:2a:47:
                    37:21:0f:67:57:7b:b4:d5:bc:2b:c3:30:88:e0:e1:
                    40:64:47:f1:a8:0d:07:3e:f8:84:60:eb:55:73:41:
                    e0:80:b9:75:8f:20:be:6b:a7:38:28:6f:48:a2:f0:
                    13:f4:66:6c:76:0d:b0:5a:9f:4b:e1:b6:b6:ad:30:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A0:6A:05:2B:C9:18:D8:A1:7A:AB:A2:F9:79:9E:14:F0:4B:F0:CB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b6ccb4e-d413-4324-93aa-d12bad25bca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:72:b5:27:37:2c:b7:6a:d5:c5:63:88:a2:6d:b7:ac:0e:c8:
         6f:84:bf:9b:95:f5:76:45:0f:ef:35:1f:4f:d6:dd:0b:1d:8f:
         a8:49:76:16:0b:01:09:93:53:95:07:8f:cf:a4:f1:e1:a3:4d:
         8a:e5:07:03:66:cb:21:4b:d0:2e:79:5a:3a:9d:f9:48:1d:31:
         8b:02:46:ff:4a:a9:71:d4:de:29:35:ba:b5:fd:3b:d2:21:4f:
         95:45:a0:62:8a:d6:cd:67:09:96:e1:18:78:6b:eb:f8:62:03:
         c9:79:1a:a3:95:f5:a4:4d:38:99:79:7a:84:1e:f0:b0:49:d5:
         be:7e:d9:d0:7d:15:2c:16:24:80:d0:88:c0:2d:ff:e8:16:32:
         51:94:2c:aa:53:98:59:25:92:69:64:9c:b8:53:78:eb:1f:2c:
         1e:77:4f:ef:0b:fa:d1:da:00:fc:0d:5d:04:22:40:3a:63:1b:
         da:59:26:a9:29:60:5a:94:31:94:95:f2:62:18:f0:b3:d7:0f:
         2f:43:93:eb:6f:67:8c:36:39:88:51:9b:39:eb:d9:26:a6:1d:
         8a:66:63:1f:f8:b8:1c:72:93:dc:14:63:0c:64:5f:0f:ec:3c:
         b9:99:3a:0c:79:57:44:d3:14:73:b0:cd:80:ed:53:73:af:c9:
         8a:7a:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:46:12 2026 by rpki-client