Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4ab88d4-e10d-4eb5-ae65-358dffce8e89.roa
File:                     d4ab88d4-e10d-4eb5-ae65-358dffce8e89.roa (raw, json)
Hash identifier:          8Rbxem5X7l0XvZtCkJqJkmAIJKTDuyAgstfSuqWx9gg=
Subject key identifier:   21:47:8C:B6:47:AC:FA:EB:51:41:28:10:30:2C:73:E2:E4:EC:0F:FE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1AE1993698C88B80162AB786335B12A8B1353202
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4ab88d4-e10d-4eb5-ae65-358dffce8e89.roa
Signing time:             Tue 17 Feb 2026 01:10:12 +0000
ROA not before:           Tue 17 Feb 2026 01:10:12 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.164.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e1:99:36:98:c8:8b:80:16:2a:b7:86:33:5b:12:a8:b1:35:32:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 17 01:10:12 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=1b4751256392bf9d9f0e482b6af7ee8299f55dddcbf00f7d4031029e06819c5d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:14:b9:88:fc:f4:5a:82:c9:e7:61:44:eb:
                    a1:81:c0:77:4d:35:f9:db:c2:8f:fd:bc:01:a9:b5:
                    0f:89:81:3c:2a:7d:a8:67:69:e1:71:03:de:62:14:
                    21:7e:7f:a8:0e:37:7f:65:51:78:0f:4f:8e:fd:6e:
                    4f:f1:42:e8:98:9d:6d:33:72:0d:31:cd:3c:c5:da:
                    c3:c4:fd:5a:b8:22:59:cb:a5:08:76:44:67:8a:88:
                    85:46:e1:a6:87:e9:ce:49:a2:53:72:d8:a3:3c:28:
                    7a:ed:a2:62:32:c6:11:7b:e4:ac:3f:21:49:9a:dd:
                    73:b8:41:06:f1:b0:71:c2:25:2d:9c:78:34:9b:66:
                    fa:cd:aa:dc:1a:ec:a9:0b:30:0c:b3:4c:65:02:bd:
                    53:2b:42:56:2f:fd:a8:2b:6f:77:d5:71:b4:a7:41:
                    13:1d:b5:dd:6c:7e:4f:3a:74:ca:02:fb:67:7f:50:
                    eb:59:f3:e2:44:8e:c0:15:e2:8e:a3:a6:4a:72:de:
                    c7:be:ec:6a:b6:dc:02:0c:6e:37:22:ab:47:20:b8:
                    08:be:79:cb:f0:6f:b6:c0:e5:f4:a0:d7:ad:19:cf:
                    78:93:75:4c:73:9d:4c:2a:d4:a9:60:e8:6f:57:bf:
                    6d:f3:37:df:6d:8e:22:2f:90:88:6c:45:55:d2:c1:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:47:8C:B6:47:AC:FA:EB:51:41:28:10:30:2C:73:E2:E4:EC:0F:FE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4ab88d4-e10d-4eb5-ae65-358dffce8e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.164.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         67:76:0e:7a:0b:b5:f3:dd:a9:6a:6e:75:07:fe:33:a0:fc:7e:
         a5:db:7e:01:70:ef:08:0a:d4:70:f2:a3:c4:0d:ea:99:6d:62:
         19:de:4a:2f:04:9a:f8:44:c9:ba:bb:a8:d8:c8:10:bd:19:e6:
         d4:4b:2b:84:b6:3b:14:5c:76:04:d9:95:0c:a3:65:25:94:01:
         8f:75:fb:7d:0c:ac:97:88:c8:5a:63:5b:54:50:a4:72:70:bc:
         79:9c:c5:ae:73:af:05:4f:e8:86:c6:6f:3a:f3:6d:4b:ee:7e:
         23:01:47:0a:7c:4e:d7:41:a7:5f:38:14:7e:58:d6:33:d7:1a:
         38:ac:22:25:56:5e:78:10:ff:76:86:9e:40:07:ab:3b:a9:25:
         52:28:19:22:29:19:98:36:8c:dd:f5:ff:9e:8b:a0:50:14:34:
         e8:6d:da:54:79:6e:bc:5f:e8:fb:18:99:da:b3:34:aa:78:f7:
         b8:7d:a7:7d:f5:ba:99:2a:ba:4e:83:6d:e3:ef:c2:90:1e:19:
         9b:b3:0f:af:c7:63:f1:a5:75:66:73:ed:13:f2:54:f4:18:e6:
         16:8b:ad:31:2a:42:ce:2c:95:83:50:95:43:a5:7c:9f:6a:99:
         51:dc:2f:63:f6:84:3a:7b:75:e1:ee:a1:e6:cf:82:20:f1:99:
         02:41:09:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:41:36 2026 by rpki-client