Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d922235d-2b58-4652-8b18-006b76b83540.roa
File:                     d922235d-2b58-4652-8b18-006b76b83540.roa (raw, json)
Hash identifier:          yKgyV7wWCrBt3AlaZ0UF6VG4JLsN4EG86mguiUP+GmM=
Subject key identifier:   E2:7C:BD:53:1C:1A:FF:EF:AE:9B:D1:AA:26:6E:28:F4:8B:7B:05:D5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0DF361789789E7709BC137B17FF03488EED0FFB5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d922235d-2b58-4652-8b18-006b76b83540.roa
Signing time:             Fri 20 Feb 2026 01:00:09 +0000
ROA not before:           Fri 20 Feb 2026 01:00:09 +0000
ROA not after:            Thu 21 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.148.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f3:61:78:97:89:e7:70:9b:c1:37:b1:7f:f0:34:88:ee:d0:ff:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 20 01:00:09 2026 GMT
            Not After : May 21 23:59:59 2026 GMT
        Subject: serialNumber=c4031bf9a2eb2d21585920613f662f2a681780569971156b9631b9c732c94aa6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:0e:82:2d:ac:f1:37:50:43:5d:e9:3e:0d:
                    19:3c:80:32:13:41:c8:d2:f8:d9:55:4b:88:6f:1c:
                    29:0d:9c:ef:30:a0:76:8f:a7:e8:ed:93:55:e4:a7:
                    10:f6:63:0a:f8:c8:bf:9e:46:0e:db:68:20:55:f0:
                    67:06:4a:5f:74:ed:ad:4b:0a:7a:c6:8d:33:5f:b4:
                    78:da:22:b3:31:fa:b9:cb:e6:6d:91:82:76:5c:e0:
                    47:2b:b7:f4:28:13:42:e5:df:04:bf:a5:f7:25:20:
                    b9:87:98:49:0b:a3:b0:fa:35:89:1d:51:d0:b3:5e:
                    63:d3:89:b4:2c:a8:d2:8d:41:66:f8:ad:2a:38:3f:
                    7e:13:92:bf:c9:d4:5f:44:9e:13:c3:aa:98:5d:19:
                    0d:14:de:17:d8:23:f3:4c:32:79:f7:8e:b9:d0:6e:
                    7d:8b:81:9c:7d:e9:04:c5:c7:e0:26:3b:08:b5:72:
                    07:df:c6:f9:1e:95:b6:ed:cf:43:cc:fa:0e:0c:94:
                    7c:5e:1a:22:1f:46:71:d2:56:0d:5d:cc:23:84:82:
                    52:5e:49:05:1a:cc:18:6d:1c:ce:34:01:4b:cb:c8:
                    a8:31:d3:fc:b5:b4:88:d3:79:d7:d5:c6:63:78:33:
                    e2:a1:23:63:f2:23:7a:57:85:2e:f8:e7:1d:51:e8:
                    45:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7C:BD:53:1C:1A:FF:EF:AE:9B:D1:AA:26:6E:28:F4:8B:7B:05:D5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d922235d-2b58-4652-8b18-006b76b83540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.148.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         48:78:b3:c1:bf:56:ee:24:1c:97:68:c4:1c:ba:83:a2:2f:10:
         3a:f0:fd:0d:4f:76:26:ec:22:dd:92:28:51:51:d2:a7:f1:5c:
         df:c1:d8:ac:58:a9:51:17:a5:86:eb:83:db:99:8a:c5:f0:e5:
         e5:92:60:9e:cf:3d:e5:75:37:e0:70:a3:0e:d7:e8:62:51:93:
         cd:b6:72:df:bd:e6:0f:ab:ff:1c:12:f6:63:11:b4:11:0b:b6:
         f5:21:e3:dd:28:c3:67:80:f2:88:d6:60:b4:da:67:c3:01:e0:
         4f:ca:9b:61:ae:ff:81:5c:34:a8:21:7c:16:5b:44:0f:91:90:
         a6:9c:00:7f:4f:d1:ff:00:9d:75:19:2a:57:ce:df:66:55:29:
         9b:ac:f6:58:eb:5c:bb:02:94:89:b4:15:7a:d7:33:c5:17:f7:
         e7:6d:f4:62:3f:8c:52:ef:78:75:f4:da:04:3e:b0:6f:1a:2b:
         41:b5:fa:25:3a:b0:c6:66:67:27:a1:d9:b6:02:46:62:f1:5a:
         ec:df:19:f0:30:fa:7f:6c:69:b0:00:78:23:02:f8:29:17:73:
         fd:4e:d3:1c:6e:d7:f0:b3:95:15:13:96:6b:65:2c:b1:e4:48:
         b2:aa:34:54:f9:85:dd:b8:63:fd:d5:59:79:d8:40:35:09:4c:
         33:06:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:26:04 2026 by rpki-client